last executing test programs: 38.854142121s ago: executing program 3 (id=4): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xde, 0xf3, 0xc2, 0x20, 0x45a, 0x5210, 0x101, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x2, 0x0, 0x3d, 0xff, 0xa1, 0xfb}}]}}]}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff05ffffff00000000fbff08cf3607861c000000000002907800000000e0000001f55397fab5bbad48a38837afcdc73a6c596e5c8d89f258ee753a3f770020f4089c1ebbcdca6c534af8ab2e47629de8aed207d8d07fde2838c882fd55bd0041c91906b59d"], 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa3, 0x23, 0x39, 0x10, 0xa6da, 0x7458, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x8, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x3, 0x8, 0x6, 0x62, 0xff, [], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0x6, 0x6, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x2, 0x7, [@generic={0x4, 0x24, "9fbb"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x6, 0x2}}]}}]}}]}}, 0x0) 37.042949649s ago: executing program 3 (id=26): syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000b19a3640d21975128400000203f47bc4c1b91fd1d29c00090400010079319c000008240000000000000000869ecc93fa534ec8ec61079396c4e9ced0a6977fb53b092d762f85d3467152b29f6aad127b49f1e497328013caaff5acdc3464d305cda8d6ddd141f955416563a48521e7a29ec06faba5000cbdbe98c3e4d53527aff8fca2fd7fa505da50b154097dad4b57b4fcae9427296353899b199fbb2204a4efce9da9eec99df2d339454b0b71fac1d479cd5decaf4f9c7acd558ae5a1f844", @ANYRES16=0x0, @ANYRESDEC], 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000032e76218576b82d5b6a634432c3e074046eac5c1b3de874ba7ad116ad78452f9c57b9fa86f1aa80e73dfda8a2c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4a) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902"], 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x80, 0xa, 0x102, 0x0, 0x0, 0x6, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r4}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x400, 0x4, 0x3, 0x8, 0x2, 0x2, 0x6e8}, 0x1c) 33.973142698s ago: executing program 3 (id=39): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8400, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x403, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 33.970683758s ago: executing program 3 (id=40): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r5) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) (async) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 27.998050911s ago: executing program 2 (id=86): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x7fe2, 0x9, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r5}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/vlan/config\x00') read$FUSE(r7, &(0x7f0000004680)={0x2020}, 0x2020) lseek(r7, 0x2, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0xfc01, 0x20}, 0x5000) 27.936905112s ago: executing program 2 (id=87): getresuid(0x0, &(0x7f0000000480), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) utime(&(0x7f0000000200)='./file0\x00', 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xd5) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000"]) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 27.936545402s ago: executing program 2 (id=88): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getenv(0x4201, 0x0, 0xffffffff80000001, &(0x7f0000000240)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl(r1, 0xfffffff9, &(0x7f0000000380)="38fcd3bc67cf79dd1b8dc15b29ce678fed0e45e20d2dac6791810fb8ab95ac79df695cbf7ad093d63f75408a3cd37b53925b82a8c772f22b8711468c37f6b588a7bf485c113e689c27c8299ce997e0f5c56931810b54004ca3893a08cd35897757dc3a27c67b1931f2a8cd319329dcc87f967e45be705cb53084e547b00c6612585df5044ddd4510f7f114b063fb303cea723ffbfb8505409ad65fd0d51ba5ac38f340a60937a046db746514ae16d8a0bbdc85218df510d973") unshare(0x22020400) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r2, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000300)={[{@uuid_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@volatile}], [{@smackfsdef={'smackfsdef', 0x3d, 'verity=on'}}]}) 27.934923602s ago: executing program 2 (id=89): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e995"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x2000c050) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[]) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 26.997417557s ago: executing program 2 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 25.840477465s ago: executing program 2 (id=107): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e995"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x2000c050) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[]) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 25.823239355s ago: executing program 32 (id=107): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e995"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x2000c050) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[]) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 17.83651539s ago: executing program 33 (id=40): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r5) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)) (async) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r8]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 9.407073092s ago: executing program 6 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000000b40)=ANY=[@ANYBLOB="23805308c71ebebc4431750f7be86835bb3bb4b158cd58eed26d37b7148a290cd165cc958ccf029a6f9a01e88b4170d7f0f7c62a97f1ae7dc8a8ed0cbfbe679b46da3f4d9228dfcffcec400f2b37c93011bb47f3d5297c80d22ee658dec8a0a4ad7fcf40fe", @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYBLOB="1d62ebb0ccb5e94dcdcb828c3970355b9987cd6e334ffd454ca2bf544100429d00dcac2b5ec12138c76a72d6cda85586456756cfeeebfff5318562932cc5ea38c4d76f9b48de0492f1be1b8371c6efb50e014f04f60a7cb78d3388ef325f13519f1a31f9c9d36e767716fd3eee1722b811f8ac99893bea886c4fa4947aeae5c7e075d58400146bce9d3eea0143e89892b92be440a44d16c809f06d40dd7761e7a04fa177d3b0407807aa78aff0c33b86c40b81ae7091495934b57c7ff4d692d19df7267ae058eb67e57259fa8b951eb46cfe735ef396279e0507b4ab6f733511c2f94bc0df878e9f90fca75fcdb0057b8e1b1014f5", @ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB="450cefe1e809e19f9aadbc89c99e54816863c56624fb0ef2405c59f85e2e0c02c9668d15a26c6cc47b44d8edc12ef5bf53d6a23c2c31b8ce390b611c97983fb71d3e41f4aa00b8ff770ef0398ec5adc27967a3a9c6d4e3615a80ae", @ANYRES16, @ANYRES32, @ANYRES16, @ANYRES32=r0, @ANYRES16, @ANYRES8, @ANYRESDEC=r1], 0x42, 0x1538, &(0x7f0000002c80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000004d00)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x127b, &(0x7f0000002880)="$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") socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000010c0)={[0x7fffffffffffffff]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 6.619491186s ago: executing program 6 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000100008500000087000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) ppoll(0x0, 0x0, &(0x7f00000024c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.787703779s ago: executing program 0 (id=223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = dup3(r0, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@remote, @empty, 0x1d, 0xd}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x128, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x3, 0xfd}}, [{{0x9, 0x5, 0x82, 0x2, 0xce42e84da1fef7bc, 0x1, 0xb, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x4, 0x10, 0x8, 0x88}, 0x4c, &(0x7f0000000180)={0x5, 0xf, 0x4c, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x9, 0xfc, 0xe47, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0xfd, 0x60, 0xfc0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x5, 0x7}, @generic={0xf, 0x10, 0x2, "f71b288a4610380509f2ce6b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x6, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f72147bd8ca0b49023adc65f797196fc"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x24, 0x2e, {0x2e, 0x5, "2abb8dca17c8e9a2d6a83892f8507910a9dbf954479973e09ecf8b7df00c01b255576b73f38c622289dc3c25"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000300)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x7, 0xaa31}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x10, 0x9, 0x58, "edf82bfd", "0758e919"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x6, 0x1, 0xa, 0x37, 0x8}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x63, "b48d7f0f2ea22e794ac95cdb6f9a77ae86567a6e3c49c3e8b91ac0e5509f0ae7d03732109e2aebdd1dc42b8976e24180e1f8fb49be183ed286c4c8943769f4c7bcac5d679f7386c7275ba55f81cc8e68c6c5e08ac5c4ae4868f09e6fcc3087daccbe46"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xc7}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x80, 0x80, [0xf0f0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "25c2"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "f7d5"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) r3 = syz_usb_connect(0x2, 0x1bf, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0xb4, 0x3e, 0xf2, 0x8, 0x9022, 0xd660, 0x407b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ad, 0x2, 0x0, 0x2, 0x10, 0x8, [{{0x9, 0x4, 0x63, 0x8, 0x2, 0x99, 0x4d, 0x55, 0xa, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x6}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x3, 0xaf, "30f5fff3"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x2, 0x8, "e2ed6bd0d5"}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x0, 0x7b}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x1, 0x1, "8a5cb5"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x4, 0x70, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x400}]}}]}}, {{0x9, 0x4, 0xfd, 0xa, 0x7, 0xff, 0xff, 0xff, 0x2, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x3, "1ef4"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0xec, 0xff}]}], [{{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x9, 0x11, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7f, 0xa, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfb}]}}, {{0x9, 0x5, 0x9b2ecc1bc107b5b, 0x0, 0x10, 0x2, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}, @generic={0x27, 0xc, "c83a3bfd0341c2c752bfb3f1949620a9b233e8a29a428c0cdcea9e9b320592b125c33f392e"}]}}, {{0x9, 0x5, 0xb8a54b3011cb4a5e, 0x0, 0x200, 0x2, 0x4, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x9, 0x401}, @generic={0x9f, 0x30, "a9c6b73afc275c17458e1d7d37395403e314e0303e9b67e9e4980dfce9228bdf46da417e469c4bc4232d1d3138614b07d9d509d84fc00430a64eac9dc6f8b2bcc70ccf28de7473490ef6d4e82c89cc5fdc45cb893a779e854d918e3138979f7a4c9718a1b764c2389edfcdfdb64b3432ec41f0967581cc3c06aae3ce219322999adf2cb3ebca1607e1c72143a8e42cf8737ec3c367ccd6500b70a0a12d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7f, 0x5, 0x7f}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x8, 0x3, 0x17}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x1, 0x3, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x3ff}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0xe, 0x3, 0x7, 0x20, 0xf8}, 0x66, &(0x7f0000000b00)={0x5, 0xf, 0x66, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x10, 0xf00, 0xffff, [0xff003f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "de2a0c51c6d50a1de5f0e3360b2edc75"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x1, 0x800}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x81, 0xf, 0x1, [0x0, 0xc0c0, 0x0, 0x1f80, 0xcf, 0xff2080]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x87, 0x3, 0x1, 0x4}]}, 0x5, [{0x82, &(0x7f0000000b80)=@string={0x82, 0x3, "5b65d48bbcf252e94f4688d678276c5a0f4016b5906d9f4f16d6c329de222f41e917fd0b1d78c7481e810867c92cf237a26cb36e88f14011650917dcfcc55d27547bacfdaee76e1ab731b6f64540c0cd4e61f3a6a6f3f81dff624e699889f409083d88ad7dc2e92a32e526cfad59deea218985b8cca26e4ab7ac581d577c58f4"}}, {0x4b, &(0x7f0000000c40)=@string={0x4b, 0x3, "a9c826479f16584d1e99bb40160b26f0fbf92031468bcfc2f9496cbb94a6079f2f6f38b190f4c06ecb9bbe718cb1c6fc7df28d6763e2b7986b637f177bd73d1f49d1c6aed80a78fd22"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_ep_write(r3, 0x5, 0x93, &(0x7f0000000e00)="ac31f12e1938aa828ed48103c6eebe19e5ce8c01a80a7c5c83050d6b490ba9db8daf709fc3ec36d952b2d2339737d3ec67ce4643002b69341d5c8197aaba083f82eb23cec2eda47f4dc6517b3f4eaea7ad7d2ce6d0bdc0bf2aa82c1622d637f326ccd04f613ba181bb701aad074ef3c9be91324a013b8482399ea8792029e4f45b634fef9d894a4addd8f8d46f87b9378a8d1f") ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000ec0)={0x2, 'veth1_vlan\x00', {0xffffffff}, 0x2}) syz_usb_ep_read(r2, 0x7, 0xd9, &(0x7f0000000f00)=""/217) syz_genetlink_get_family_id$team(&(0x7f0000001000), r1) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000010c0)={0x14, &(0x7f0000001040)={0x40, 0x5, 0x8, {0x8, 0x4, "79d7d9b59280"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001100)={0x0, 0x31, 0xb1, "9def9a1add108e4a7126fef2bd4055a73753cbdbec96a922a3e7d0211ea15294a3469029e9d8b3141e8a78a3784b905f67835e57cdb3f5eb68a295a431c10fba4726c3490b8180ab417906e7ca40e41b288b901346f41ef1a4a38e0d6a380cb49821ca87305f155824d945831c1a6a642f27aa1f35bcaa4fc23dd6ab94c01ad2a449f010ab4f8ba15c0c538e8ad002f9f0262fbb4dd8fea8e8da6edbd4981061d257435925dd73605b0c165193685fe060"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xb}}) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000001280)={@initdev}, &(0x7f00000012c0)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r1) syz_usb_connect$cdc_ecm(0x4, 0x5e, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0xb8, 0x81, [{{0x9, 0x4, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5729, 0xe, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0xfffa, 0xea, 0x4, 0x4, 0x9, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xf2, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xb1, 0x58}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x250, 0x5, 0xe, 0x2, 0xff, 0x4}, 0x57, &(0x7f0000001400)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x1, 0xfa9}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xa5, 0x4, 0xb, 0xf0f, 0x10, [0xff0000, 0x8, 0xc000, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x9, 0x4, 0xd8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x6, 0x40, 0x2, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "cd5f251beb07a40946a43d8d9f638e4a"}]}, 0x1, [{0x81, &(0x7f0000001480)=@string={0x81, 0x3, "99746de3602e00c3a743bbfabff4e6766fcfea00fc13a25102f18875b378faefb24f8c72ebf43e5514abdff8fe4e1e0601a46b300d6dc558cbc1213b4010400dc4e53720aedb05e4b3c9d61390e1f168251b69cdceaf09bdea02cbcd81ffd1bdc81be8f646632d010538c59f4d2a62b83a6673ef2406e7171f1cb65d39fbfa"}}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002800)=[{{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001600)=""/59, 0x3b}, {&(0x7f0000001640)=""/97, 0x61}, {&(0x7f00000016c0)=""/187, 0xbb}, {&(0x7f0000001780)=""/105, 0x69}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/199, 0xc7}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001a40)=""/91, 0x5b}, {&(0x7f0000001ac0)=""/86, 0x56}], 0x9, &(0x7f0000001c00)}, 0x10001}, {{&(0x7f0000001c40)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000001cc0)=""/193, 0xc1}, {&(0x7f0000001dc0)=""/78, 0x4e}, {&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000001f00)=""/135, 0x87}, {&(0x7f0000001fc0)=""/6, 0x6}, {&(0x7f0000002000)=""/208, 0xd0}, {&(0x7f0000002100)=""/235, 0xeb}, {&(0x7f0000002200)=""/52, 0x34}], 0x8}, 0x81}, {{&(0x7f00000022c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/191, 0xbf}, {&(0x7f0000002400)=""/197, 0xc5}], 0x2, &(0x7f0000002540)=""/241, 0xf1}, 0x3}, {{&(0x7f0000002640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/177, 0xb1}, {&(0x7f0000002780)=""/24, 0x18}], 0x2}, 0x8001}], 0x4, 0x40002002, &(0x7f0000002940)={r5, r6+60000000}) close(r0) syz_usb_control_io$printer(r2, &(0x7f0000002a80)={0x14, &(0x7f0000002980)={0x0, 0x23, 0x94, {0x94, 0xd, "52306e06cdaa8528c4cedddf010f839ff347f23135da829e31dfbf4b76e808e88fd285487eb496d41c25e130b21db52b913ea8ea8d1c83a9a1d061a91da84616d27f551a3c6400e11c8ff03de6ab22a9c82113292d723b4d997194619181941ffd6f2c6f1c1ed614f3dbb3953dff54fd17ae6da2e8ff61667c1888a0996fcbcb424a346883013339408fc11c7a8af9bd5234"}}, &(0x7f0000002a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3403}}}, &(0x7f0000002dc0)={0x34, &(0x7f0000002ac0)={0x0, 0xf, 0xe5, "d006757c430a6a1378bec1aa4b233a2933e3eb684d5c75fb2e790521598a7cfb6e359dfd692278f68d4c202291bff37a3c663859973a72020a1d1c3a7ac94634e7bc3b57ece1e6c56256b9190542c3260b935860451a2b520628589619cebfa041186989f2cfa18744ca7e5fe72d68a104c5829b4481114e67717e9c07cc74fbcd4009c0106336455efcad29df5caeeb3188b4b60e95b975dec98156e2bf63df219c218ff894d5f0af82363aaa127c4f48db081b497a524c944c62a0fd40ea383707cd5b5708b59b75c5f44b411025dd4e73508b8300a0bfb52528043d44ef55207acbf964"}, &(0x7f0000002bc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000002c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002c40)={0x20, 0x0, 0xed, {0xeb, "434c692670a53597747f338614b52955872f8412cd668c6bb828e856173adfede6f394f2990ce20e0c1ab177e9446fc0d6e481da35350cf271ea6764e26906fb86b707a02b3cc6ce441601225d26c40b5d76db2dfbc54446320a43ec07a5ddec189394e87a58f05c47c73a2d36d2108d599a06db9e0ad31f0bbc397dcdc6a6b95116bb4199b1607a4178b92adb1bb27706977a5148bbcb35ae938c350833e78b9fbcbf9f52e603e5615efc9f553f2e7fd2511499941cb2c5e98d0e654960f06dd896e4744f757e2cdb4757d1e70de8da94f13a547cdc352646bf9ecf0c23f23c88bbd250a15632f32b9e42"}}, &(0x7f0000002d40)={0x20, 0x1, 0x1, 0x4a}, &(0x7f0000002d80)={0x20, 0x0, 0x1, 0x17}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000002e00)={{0x0, 0x8468, 0x7ff, 0x100000000, 0xa, 0x3, 0x800, 0x6, 0xa3, 0x8, 0x9, 0x100, 0x6, 0x5, 0x2}, 0x18, [0x0, 0x0, 0x0]}) stat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$cgroup(0x0, &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00), 0x10018, &(0x7f00000030c0)={[{@clone_children}, {}, {@none}, {@nofavordynmods}, {}, {@xattr}, {@cpuset_v2_mode}, {@none}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@fowner_eq={'fowner', 0x3d, r10}}]}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000003140)={0x5, 0x0, [{0x28000000, 0xf6a, 0x4, [0x5, 0x800, 0x5, 0x81, 0x6, 0x8, 0x2, 0x7]}, {0x6, 0xfffffff8, 0x61, [0x4, 0x9, 0x6e, 0x4, 0x400, 0xa, 0xe3, 0x48]}, {0x2, 0x9, 0x0, [0x67f9, 0x8001, 0x4, 0x0, 0xc, 0xfffffff9, 0x1, 0x4]}, {0xfffffffd, 0xffffffff, 0x7, [0x1ff, 0x10000, 0xffff6952, 0x7, 0x3ff, 0x1, 0xb9, 0x1bce]}, {0x7, 0x499, 0x7, [0xa6, 0x6, 0x4, 0x1, 0x1, 0xac, 0x9, 0x4]}]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000032c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000003440)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xd0, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r12}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xc}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "4e3d4cdc80b6a3aa41492d9a0d37b93c47c0fec78620f00aed80d8dfa2ce12468fec9eff29b66101ef105ea690a3f009236b3099414c40f725"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x6, 0xac, "ce40"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x35, 0xac, "e2b6ac23e748682e21661d3ebfec7bd10232a373965bd86d0b5debf3e461a4fea1249e35c9760f70e6f53289cb393049c7"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2, 0x5]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x389}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44}, 0x40) 5.772425129s ago: executing program 6 (id=224): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) dup3(r0, r0, 0x80000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffd}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="189833c9c3335218a2000000360000006c000000000000002400000000000000290000003200000000000000000000000000ffff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000400000012900000039000011040002eb00000000"], 0x18}}], 0x2, 0x4000) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000006c0)={0x8001, 0x7ff}, &(0x7f0000000700)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000580)) r5 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) fallocate(r5, 0x10, 0x369000, 0x7000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file1\x00', 0x0, 0x10}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) readv(r1, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0xffffffffffffff25) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) 4.780922115s ago: executing program 6 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000008000000e27f000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffa}]}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000b00)={"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"}) epoll_create1(0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x828, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 4.780189315s ago: executing program 5 (id=230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000001e00)={0x2020}, 0x2020) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x225}, {&(0x7f0000000e00)="1b3b351333f3a3b1c75ded5829aceff143e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d17d49f632f1c3dcaf0", 0x52}], 0x3}, 0x84) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) close(r5) 4.622252737s ago: executing program 6 (id=231): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00'], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6}, 0xfffffffffffffdd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000800200000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) 3.83284417s ago: executing program 5 (id=233): unshare(0x64000600) r0 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getcwd(&(0x7f0000000080)=""/12, 0xc) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) truncate(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) unlink(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x40001) sync() ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) 3.670177032s ago: executing program 1 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f696e6c696e655f786174743e306163746976655f6c6f67739a06c993a7823d6fbec4894dd27bacf03d342c646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303737302c6d6f64653d6c66732c696e6c696e655f646174612c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172"], 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x4) (async) write$binfmt_script(r2, &(0x7f00000000c0), 0x4) copy_file_range(r2, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) clock_getres(0x3, &(0x7f0000000000)) (async) clock_getres(0x3, &(0x7f0000000000)) 3.345007807s ago: executing program 1 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00008000000100080001000100001f00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8048}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0x20}}, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000020392c6000000000000000005000003000808000000080001000100001108000440000000050800034000000004080004400000000208000440000000060900020000000001025a4b013c00054000000024"], 0x5c}, 0x1, 0x0, 0x0, 0x200448f4}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3b}, 0x48, 0xffffffffffffffff) (async) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x3}, 0x6f, 0xfffffffffffffffd) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) (async) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000880)={0x0, "f1a1173fb93c2d3589e67197f90be6e423ceb0aba2f7a37ba31854ec98e9ff00ed21fcad7ff0fbcb566a0982f8938c4906ba644710d9261ed56ad59300", 0x1b}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r11, 0x1, 0x8, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) (async) write(r12, &(0x7f0000000000)="240000001a005f0214f9f4070009270002000000000034c93cafffff0700010000000000", 0x24) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') readv(r13, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 3.303334708s ago: executing program 1 (id=239): syz_usb_connect(0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000bc703406d04c608c2330000000509022e000100000000090400000001"], 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x0, 0x7a, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x2db}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x10, 0xc}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7, 0x7f, 0x9, 0x40, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x9, [{0x99, &(0x7f0000000140)=@string={0x99, 0x3, "5365b2999c83648b2f198b2a3cf4a81434ab9341f4b75b41c27c6c9fcebe80aaa896939454ec10d2ec172be5de0970966c60e7ea621f92167b4cd65ec62ed2c484870537004f53116811275e60e72ec88c5b7a20354b0fdc254fd40200db6bdebf4c9d500cfea4f9b7d80f21275174eae96b74ecbf6454d57c1fc1c68722b6291e47bdc18207db3e3119e29a224d7484743572382f9dd8"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4e, &(0x7f0000000240)=@string={0x4e, 0x3, "eea8782514801ceed6a25fe1344c6cab8c9d11fe931a7f2fdae242c25ece7591436ec9250038bfe0ca2cfd014dc0eb7fad1f50ea18f97881761f46b3a4a89820a3d0fecfec33275785e4da4d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}, {0xa5, &(0x7f0000000300)=@string={0xa5, 0x3, "9dc57d8b2327c41c96072c669f52f93d325a1313867d1fb83210eedb29cbe0bc55e2eb4948f0661fd8ebc1bb1a55a76825a967b6dadfdf3a741378450aeac6175be636b6c2df6f65a7555d25381cc7ffb548216a05b1f0f343a331485bbc88e3ea266e6cdbf862bd772709dc945084545bf87b7a2883a7f361c2eadb5eac1e461075e92e35efb507e021d64f5d8b9407dc87787738351817ef23252e7ad6f133d8626b"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "ff967575b15e9c27149af5793c124e65e4a22858f68b15e1a0303d49855ac670072b9bb4fecff5685af95f091a9b1ffb83a467a4f3e664cb38b88cf87a524cf20e8e97141df028be8036ac7d6b5480fbfb0629a3fae7abdde24447fabff73edbc1b97d015eb06100de8af4c6d751882d6a156e58d1097c43212688a2e93c196d3f966604a5b7477753c191663dfb1462d7af97bea9f8"}}, {0xb3, &(0x7f0000000480)=@string={0xb3, 0x3, "f0bd2f105a126175066be29cbd9ed857a9c8799274d5d8f07477b111fc521afbba0689167c235c2e5c8550659c1795baaf619254a480f493a9aa53d02efdf28c0fcf15937ae079edd0ba671cb4b2715cd4915481cc822df834158b5e588b648daf7787892a80014b838e6205b9c034dc8c1b93efb3fb4f6a78758cca7ae6603745863ab6471cbcb14a7f4700ffcb0ca42909e9af9bed27ec623b21851e87a2b7218c21775d2c9c8701c6415be93f6d2bc5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x200a}}]}) 2.940223013s ago: executing program 5 (id=240): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb07f, 0x0, 0xff}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x0, 0xdd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getpgrp(0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xdcb, 0x6, 0x10, 0xe, 0x10, 0x1000, 0x10, 0xf, 0x12, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb07f, 0x0, 0xff}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x0, 0xdd}}}}}}}]}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) (async) getpgrp(0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xdcb, 0x6, 0x10, 0xe, 0x10, 0x1000, 0x10, 0xf, 0x12, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) 2.468296691s ago: executing program 0 (id=241): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc020000000000000000000200000001080017004e244e23"], 0x4c}}, 0x0) 2.272392664s ago: executing program 0 (id=242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000f854000000000000000000181100002c76e50f2f76bae90e17e57b0043aa40554030030d9475e4fdac9219f037ab4feee13dc9e476024912cf80599eebdedeb7c35e97d107492d0ec3d04a42ebc8d471c6219a0f244a5653f94a439fc1647a8c1e167331378bb75fd4f036af", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1, 0xa3, 0x7400) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) shutdown(r5, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = accept(r7, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000002240)='\x00', 0xfffffe76, 0x44810, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_get_implied_cluster_alloc_exit\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000080690000014ebd7000fcdbdf25000000000000000008000100020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='objagg_create\x00', r6}, 0xfffffffffffffff9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001000000000000080000018bc6143b0000000890780000"], 0x0) 2.160408536s ago: executing program 4 (id=244): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x100000, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x800}}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLblt62IP0DQKhqJP1pafsjBi0YTDpqY6AHjqbYLqSzU0JoIIVo94NGQeDfe/QOMJ70Y9WTiVe+GhBguoKc1szMDS9ktXbplofv5JLP73syD974z83bezNttAH1rNHtJIrZGxJ8RMZxnby4wmr9du3J++t8r56eTqNff+SdplLt65fx0WbT8d1vyTL1e5De0qPfC+xFTtVr1TJEfXzj10fj82XMvzZ6aOlE9UT09eeTIwQN7hg5PHupKnFlcV3d9Ord759H3Lr41feziB79+l7V3a7G9OY5uGc33bkvPdruyHtvWlE4GetgQOlKJiOxwDTb6/3BUYtP1bcPxxhc9bRywpur1er3V9bmwWAfWsSR63QKgN8oLfXb/Wy53aehxT7j8an4DlMV9rVjyLQOR5oknB5fc33bTaEQcW/zvm2yJNXoOAQDQ7Mds/PNiq/FfGo/kiaHs5YFiDmUkIh6MiO0R8VBE7IiIhyMaZR+NiMc6rH/pDMmt45/00h0HtwLZ+O+VYm7r5vFfWhYZqRS5bY34B5Pjs7Xq/mKf7IvBDcdnk+rEMnX89PofX7Xb1jz+y5as/nIsWLTj0sCSB3QzUwtTq4m52eXPI3YNtIo/iXIaJ4mInRGx6w7rmH2+/YTQ7eNfRhfmmerfRjyXH//FWBJ/KWk7Pznx8uHJQ+Mbo1bdP16eFbf67fcLb7erf1Xxd0F2/De3PP+vxz+SbIyYP3vuZGO+dr7zOi789WXbe5oOz/+j24rzfyh5t7FiqNjwydTCwpmJiKHkzVvXT97438p8WT6Lf9/e1v1/e9zYE49HxO6I2BMRT2Q3hUXbn4qIpyNi7zLx//LaMx92Hv8yT+W7KIt/5nbHP5qPf+eJysmff+g8/lJ2/A82UvuKNSv5/FtpA1ez7wAAAOB+kTa+A5+kY9fTaTo2ln+Hf0dsTmtz8wsvHJ/7+PRM/l35kRhMyyddw03PQyeKZ8NlfnJJ/kDx3PjryqZGfmx6rjbT6+Chz21p0/8zf1d63Tpgzfm9FvQv/R/6l/4P/SnR/6Gv6f/Qv1r1/8/alh77fk0bA9xVrv/Qv1bQ/xfzt/ajAuD+5PoP/Uv/h77U9rfx6ap+8i+x7hOR3hPNWP+JgRX/MYsOEvXhvP9naza0LNPrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+D8AAP//Yz/jTQ==") mount$cgroup(0x0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x402, &(0x7f0000000180)={[{@clone_children}]}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa3d0a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x101800) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000300)=[0x3, 0xc]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r5}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) eventfd(0xc) 1.581162525s ago: executing program 0 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000008000000a000000000311900181000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x204e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) 1.30000462s ago: executing program 6 (id=246): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7a, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x6, 0xdb}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xb6, 0x9, 0x9, 0x4, 0xa3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0xa, [{0xe4, &(0x7f0000000440)=@string={0xe4, 0x3, "fd56435b4293d97a7005f037473775eadba84dc0eec011861db93669c116aaa3ddc1ece9e606b02ae3ac32c194bf39d86635bbffc4f4bb6a9ed24338385f7949f347ab218dc6aa032d203261a37c46ce627a2ed71678d1996534c7c1015a1ecf3287d12a690d48e4f6ac40c67aa90544fa114f95aefdb3337083d4f2d34a9b1b0d26c93655dd57e863d469bf589d4a5b2bb1b9dbc5ea05d73ead21be8377755ab010535801ec361524d2a9e124de31b5659c79f9914e0204048f78ca763198b0773a6833e5f7d85bceac50deffa3147dcb13431b165e5d6e60030d50deed5827fde2"}}, {0xb0, &(0x7f0000000540)=@string={0xb0, 0x3, "5907fbb841f63d340799e4de650c09fba35903723e0c834e5430106f232fa724617a9db98aec0dcc147848ee212c2744a1975b2b4147c4c688a87d06972ec8aced589f52b3f9f99de340222fd0df80ba30c4a3d22e5f302436caa92f49af9eb29270ab8117716df9fb959443a72ef74e8cea6a668251276c721376920bdd55056bd8dc542c9d71e00085df8fab32de9421f232f312102a02bc46c8c1133d9d9c555f2f8cee30c4e63428dab8946e"}}, {0xf4, &(0x7f0000000600)=@string={0xf4, 0x3, "d5cfb2763870f435b41692ba7258948c879f73e7a01439466e7f4345a5dc6e055c7a69227d127d4db760ce48f88d3dcb537067ca962a0165594a177e860f88d5885fc2ab3af42a0f3a2e72f9354747aac1384a8f6bbef2ee52e7f7cc7afc47c6dc517c92fb2bdda8409e2a8b817ab7800f2f06db18dba591ed780b61f41490016f9d9926b17b4cf1ea70a883dc595116d9fb9112aeba8c704482f842b07dcba21274d751fa8011cfc247871090060829611b12db4b39307ba24bf363a09a907dd15b94177cf651d8ef863b0771bf92dba1adb9c611481a613781ccefdc22250f4516424815bdc272c975b1e20977ce25f387"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xe4, &(0x7f0000000ac0)=@string={0xe4, 0x3, "6b1123acbfc5ae7fb7701ae6bacd525da0b350f6c88df46f58dc51f6f445994940a21a7ba2ce8cc9bf7ef9044e39e71e97b14755a82c9aef9ff46505d8e37d55d5609aac37363ba58e5f5ad3fd6b6a19aa6d49b73cd60d3718ab33e72c551ca7e7a1e41adc78e528b1a2a08ad9fa1ff3b9aefb203bdc2a0aa3f0a8faf6a8d7d4ec9a90095f3d25a339c9b987721cf77cbc662f0330b049b46c3fdbc5541cf6b9044ff1ae3ef77c5d46b632af6936b9bc500155b10186ba48fefbd9fcb7f53cf9f6ca33109756af7ba06886bf987d42c1039327048f1eb0086ce8180c35ff7f006250"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x76, &(0x7f0000000800)=@string={0x76, 0x3, "6454d88c5b4e89fa92b7d29b0a71d78c8c2a9b89aeccd7236f677724cde2665d827c681012be27ba03e5a451cb9bae276f66e9e3f195e1fc0d0666a5e3eaff1977d073f4696844b0c0ea1cce464653d32ee29ecef0a7012fad4761c756a1d2ed2d8f86092f4b86609e8b8f160ec4d370e4bcc3c0"}}, {0xe6, &(0x7f0000000900)=@string={0xe6, 0x3, "a37c8f900c00cf06f13d5d5e66b7e9ea3aac9db8fd998adb9cb77884e408b10b599365f035cf5182b3ea097b676e9f60307c499f9fd1f317c41b374a07be68602bf43e40f91cae7fa9091abd1de971804fbac621f8654a78dc34c177c33e0fdf2b56e0f142a9f66c13ce1aa15453b7f680cd12214c7724ba8b79e7a9bbd93248a6a36ebf7b2a3daaa4de1ba2478e9fb86b59117d2eea2094d02db4e087ebfbda933db22ab6a3b621ae1cce7cc1dd01262bad40e5e02003fad8dc989d01efeca0370d7e09600a9fab8bf9c5b8c14757347efa9c5afa7dba8ccf64007c09dc2c50d423633c"}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)={{}, {0x0, 0x2710}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) (async) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) (async) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7a, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x6, 0xdb}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xb6, 0x9, 0x9, 0x4, 0xa3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0xa, [{0xe4, &(0x7f0000000440)=@string={0xe4, 0x3, "fd56435b4293d97a7005f037473775eadba84dc0eec011861db93669c116aaa3ddc1ece9e606b02ae3ac32c194bf39d86635bbffc4f4bb6a9ed24338385f7949f347ab218dc6aa032d203261a37c46ce627a2ed71678d1996534c7c1015a1ecf3287d12a690d48e4f6ac40c67aa90544fa114f95aefdb3337083d4f2d34a9b1b0d26c93655dd57e863d469bf589d4a5b2bb1b9dbc5ea05d73ead21be8377755ab010535801ec361524d2a9e124de31b5659c79f9914e0204048f78ca763198b0773a6833e5f7d85bceac50deffa3147dcb13431b165e5d6e60030d50deed5827fde2"}}, {0xb0, &(0x7f0000000540)=@string={0xb0, 0x3, "5907fbb841f63d340799e4de650c09fba35903723e0c834e5430106f232fa724617a9db98aec0dcc147848ee212c2744a1975b2b4147c4c688a87d06972ec8aced589f52b3f9f99de340222fd0df80ba30c4a3d22e5f302436caa92f49af9eb29270ab8117716df9fb959443a72ef74e8cea6a668251276c721376920bdd55056bd8dc542c9d71e00085df8fab32de9421f232f312102a02bc46c8c1133d9d9c555f2f8cee30c4e63428dab8946e"}}, {0xf4, &(0x7f0000000600)=@string={0xf4, 0x3, "d5cfb2763870f435b41692ba7258948c879f73e7a01439466e7f4345a5dc6e055c7a69227d127d4db760ce48f88d3dcb537067ca962a0165594a177e860f88d5885fc2ab3af42a0f3a2e72f9354747aac1384a8f6bbef2ee52e7f7cc7afc47c6dc517c92fb2bdda8409e2a8b817ab7800f2f06db18dba591ed780b61f41490016f9d9926b17b4cf1ea70a883dc595116d9fb9112aeba8c704482f842b07dcba21274d751fa8011cfc247871090060829611b12db4b39307ba24bf363a09a907dd15b94177cf651d8ef863b0771bf92dba1adb9c611481a613781ccefdc22250f4516424815bdc272c975b1e20977ce25f387"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xe4, &(0x7f0000000ac0)=@string={0xe4, 0x3, "6b1123acbfc5ae7fb7701ae6bacd525da0b350f6c88df46f58dc51f6f445994940a21a7ba2ce8cc9bf7ef9044e39e71e97b14755a82c9aef9ff46505d8e37d55d5609aac37363ba58e5f5ad3fd6b6a19aa6d49b73cd60d3718ab33e72c551ca7e7a1e41adc78e528b1a2a08ad9fa1ff3b9aefb203bdc2a0aa3f0a8faf6a8d7d4ec9a90095f3d25a339c9b987721cf77cbc662f0330b049b46c3fdbc5541cf6b9044ff1ae3ef77c5d46b632af6936b9bc500155b10186ba48fefbd9fcb7f53cf9f6ca33109756af7ba06886bf987d42c1039327048f1eb0086ce8180c35ff7f006250"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x76, &(0x7f0000000800)=@string={0x76, 0x3, "6454d88c5b4e89fa92b7d29b0a71d78c8c2a9b89aeccd7236f677724cde2665d827c681012be27ba03e5a451cb9bae276f66e9e3f195e1fc0d0666a5e3eaff1977d073f4696844b0c0ea1cce464653d32ee29ecef0a7012fad4761c756a1d2ed2d8f86092f4b86609e8b8f160ec4d370e4bcc3c0"}}, {0xe6, &(0x7f0000000900)=@string={0xe6, 0x3, "a37c8f900c00cf06f13d5d5e66b7e9ea3aac9db8fd998adb9cb77884e408b10b599365f035cf5182b3ea097b676e9f60307c499f9fd1f317c41b374a07be68602bf43e40f91cae7fa9091abd1de971804fbac621f8654a78dc34c177c33e0fdf2b56e0f142a9f66c13ce1aa15453b7f680cd12214c7724ba8b79e7a9bbd93248a6a36ebf7b2a3daaa4de1ba2478e9fb86b59117d2eea2094d02db4e087ebfbda933db22ab6a3b621ae1cce7cc1dd01262bad40e5e02003fad8dc989d01efeca0370d7e09600a9fab8bf9c5b8c14757347efa9c5afa7dba8ccf64007c09dc2c50d423633c"}}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) clock_gettime(0x0, 0x0) (async) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)={{}, {0x0, 0x2710}}, 0x0) (async) 1.244834391s ago: executing program 1 (id=247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x8, 0xffffffff}, 0x1c) (async) timer_create(0x0, 0x0, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) (async) bind$packet(r4, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) (async) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0) (async) syz_emit_ethernet(0xf7f, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) (async) syz_emit_ethernet(0x9a, &(0x7f0000000680)=ANY=[], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xffffffffffffffe2) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r8, 0x0, 0xf) 1.215851101s ago: executing program 4 (id=248): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xb, r1, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,access=', @ANYRESDEC=r1]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r5, @ANYRESOCT=r3, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r5, @ANYRESHEX=r4], 0x1, 0x14ee, &(0x7f0000002400)="$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") ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001740)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000022c0)="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", 0x2000, &(0x7f00000018c0)={&(0x7f0000000080)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x3, 0x40082, 0x20c5, 0x25, 0xf, 0x2f33, 0x0, 0x0, 0x10, 0x932}}, &(0x7f0000000180)={0x18, 0x0, 0x1, {0xd}}, &(0x7f00000002c0)={0x18, 0x0, 0x6, {0x2}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000000340)={0x18, 0x0, 0x1b9a, {0x4}}, &(0x7f0000000440)={0x28, 0x0, 0x8, {{0x4, 0x2000, 0x2}}}, &(0x7f00000005c0)={0x60, 0xffffffffffffffda, 0x1000, {{0xa59a, 0x4, 0x2d40, 0x1, 0x0, 0xa, 0xfffffff7, 0xd3e}}}, &(0x7f0000000700)={0x18, 0xffffffffffffffda, 0x4d, {0x400}}, &(0x7f0000000740)=ANY=[@ANYBLOB="1100000000000000ffffff624fffffffff"], &(0x7f0000000780)={0x20, 0x0, 0x200}, &(0x7f0000000880)={0x78, 0xfffffffffffffffe, 0x2, {0x0, 0x7, 0x0, {0x2, 0x800, 0x5, 0xf8d2, 0x34f, 0xce, 0x101, 0x1, 0x3fc00000, 0xa000, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000940)={0x90, 0x0, 0x401, {0x0, 0x0, 0xfff, 0xbb, 0x1, 0xf627, {0x4, 0x6, 0x1256ddd0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x2ca54eaa, 0x0, 0xfffffff7, 0x8000, 0x3, 0xee01, 0x0, 0x101, 0x6}}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)={0x5c0, 0x2f, 0x58f52c9, [{{0x4, 0x1, 0xb56, 0x6, 0x8000, 0x7, {0x5, 0x101, 0x8, 0x4, 0x485, 0xc7ff, 0xc29, 0x4, 0x100, 0xc000, 0x0, 0x0, 0x0, 0x1, 0x6}}, {0x0, 0x3, 0x6, 0x6, '\xff\xff\xff\xff\xff\xff'}}, {{0x6, 0x2, 0xaa, 0x2, 0x6, 0x3, {0x2, 0x3, 0x3, 0xfffffffffffffffe, 0xfff, 0xa000000000000000, 0x2f, 0x292, 0x1262, 0x2000, 0x5, 0x0, 0x0, 0x5, 0x9}}, {0x3, 0x2, 0xe, 0xa, './cgroup/syz0\x00'}}, {{0x1, 0x1, 0xfff, 0xce4, 0x5, 0xffff, {0x0, 0xfffffffffffffffe, 0x4, 0x7f, 0x7, 0x76, 0x1, 0xfffffff7, 0x5, 0x0, 0x7, 0x0, 0x0, 0x2, 0x8}}, {0x6, 0x8000000000000001, 0x6, 0xffff, 'vlan1\x00'}}, {{0x4, 0x1, 0xfffffffffffffeff, 0x6, 0x7fff, 0x50, {0x5, 0x6, 0x9, 0x443, 0xfffffffffffffff0, 0xa6b4, 0x10001, 0x9, 0x389dbcee, 0x2000, 0x319, 0xee00, 0x0, 0x3, 0x1}}, {0x5, 0x9, 0x10, 0x1ff, 'kmem_cache_free\x00'}}, {{0x3, 0x3, 0xfb, 0x4e2, 0xf, 0x4, {0x3, 0x1000, 0x1, 0x4, 0xffffffff, 0x185600000000, 0x7fff, 0x5, 0xdd33, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x8}}, {0x4, 0x9, 0x1, 0x2000, '\x00'}}, {{0x2, 0x3, 0x5, 0x200, 0x4, 0xb, {0x3, 0x8, 0x0, 0xffff, 0x3, 0x7, 0xffffffff, 0x2e8, 0x1, 0x2000, 0x2, 0x0, 0x0, 0xac, 0x81}}, {0x1, 0x7, 0x4, 0xefd5, 'GPL\x00'}}, {{0x2, 0x0, 0x8, 0x4, 0x3, 0x4, {0x3, 0x0, 0x1, 0x22, 0x5, 0x101, 0x1800000, 0xf9d1, 0x2, 0x4000, 0x2, 0xffffffffffffffff, 0x0, 0x8000}}, {0x3, 0x9, 0x6, 0x800, 'vlan1\x00'}}, {{0x6, 0x0, 0x4, 0x7, 0x1, 0x7, {0x6, 0x3, 0x400, 0x6, 0x5, 0x9, 0x8, 0x2, 0x8, 0x0, 0x7, 0x0, 0x0, 0x3, 0xc33}}, {0x3, 0xb, 0x6, 0x2, 'vlan1\x00'}}, {{0x4, 0x1, 0xfffffffffffffffb, 0x4, 0x0, 0x5, {0x0, 0x1ff, 0x8, 0x800, 0x10000000000000, 0xc17f, 0x7fffffff, 0x5, 0xe1, 0xc000, 0x7, 0xee00, 0x0, 0x5, 0x5}}, {0x6, 0x8, 0x2, 0x81, '!^'}}]}, &(0x7f0000001640)={0xa0, 0x0, 0x9, {{0x1, 0x0, 0x3, 0xf, 0x3, 0x3, {0x1, 0x9, 0x3, 0x7, 0xffffffffffffffc0, 0x9, 0x996, 0xb, 0x4, 0x1000, 0x8, r1, r4, 0x9, 0x9}}, {0x0, 0x1}}}, &(0x7f0000001700)={0x20, 0x0, 0xfffffffffffffff7, {0x8, 0x0, 0x80000000, 0x5}}, &(0x7f0000001780)={0x130, 0xffffffffffffffda, 0x8001, {0x5, 0xffa, 0x0, '\x00', {0x10000, 0x8, 0x4, 0x8, r6, 0xffffffffffffffff, 0x1000, '\x00', 0x9a5, 0xff, 0x8000, 0x7, {0x3, 0x10000}, {0x10, 0x7}, {0x3efaabf1, 0x65eb4612}, {0xe, 0x400}, 0xfffffffd, 0x8, 0x10001, 0x9}}}}) r7 = getpid() r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0xc0006000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r7], 0x40000000000001cd, {r8}}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x9, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8914, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) dup(r15) 1.206460331s ago: executing program 1 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000002d1400"/30], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800113b66720094000000000022000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r7 = fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800edfbffffffffffff00ff070000000000cb92", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$eventfd(r7, &(0x7f0000000280), 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='r\x00\x00\x00', @ANYRES16, @ANYBLOB="20002cbd7000fcdbdf2501000000050004000200000014000200766972745f77696669300000000000000500040001000000140002007663616e3000000000000000000000000900010073797a32000000000900030073797a31000000000900010073797a3000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x480c4) 1.200055931s ago: executing program 0 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) setpgid(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}], 0x1}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c000000"], 0x0, 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='mm_lru_insertion\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 1.116544172s ago: executing program 0 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000000000ff7f000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004f6ca106de3ae77509000000000000000000000000f90000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000001c0), &(0x7f0000000840)=r1}, 0x20) r3 = socket(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000a40)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000200)=""/50, 0x32, 0x0, 0x7, 0x9, 0xfffffff7, 0x7}}, 0x120) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x1, r7, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x6, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r12 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r12, 0xc080661a, 0x0) 1.115794993s ago: executing program 4 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000bb00004e618f88a3b09e6c9e0000", @ANYRES32=0x0, @ANYBLOB="8b0404000000000020001280080001007369740014000280060008003f000000080002000a010100"], 0x40}}, 0x840) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 1.105323872s ago: executing program 1 (id=253): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2150165a, 0x40, 0x6, 0x0, 0xfffffffffffffffe, 0x4080078, r6}) 357.017734ms ago: executing program 5 (id=254): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) ptrace$cont(0x18, r1, 0x5, 0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devlink_health_report\x00'}, 0x18) epoll_create(0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffc8}, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) 280.356285ms ago: executing program 5 (id=255): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) dup3(r1, r2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0xf, "f42a97706b23b6a31f9f75fdcb6b62"}}) 149.998607ms ago: executing program 4 (id=256): r0 = socket(0x10, 0x3, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet(0x2, 0x5, 0x6) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@nodiscard}, {}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@barrier}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@fsync_mode_strict}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") (async) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) (async) syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4891, &(0x7f0000000000)={[{@user_xattr}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}]}, 0x0, 0x41e, &(0x7f0000000880)="$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") 119.399328ms ago: executing program 4 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='netfs_sreq_ref\x00', r0}, 0x18) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1ff}, 0xe) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c72c4181fd9452360a8db6db049f79966646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',noxattr,nodevmap,msize=0x0000000000010001,directio,access=client,noextend,k']) 89.941988ms ago: executing program 5 (id=258): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000003c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@lazytime}, {@grpjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@journal_checksum}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2c3, &(0x7f00000004c0)="$eJzs3b2OG1UUAOAzXtvrsIVdUCEkpkhBwypOS4EjtEiIrUAu+JFgRRIpsq1Ia8lSAsJKxRNQUPAedPRINLwBEg9AR4QiXTSe8U92E3u9iRMUvq/Zq3vPmXvGc+0pRnP3qzdHg5t3x7cffPtHtFpZ1HrRi4dZdKIWc6kSAMAr4WFK8del7u/12q5qAgB2a+X+33hKyP75rvd2XRYAsEOffPrZRzeOj48+zvNWxOj7ST+L8m85fuN23Ilh3Ipr0Y5Hy2cBKZXtDz48Pop6XujE1dF00i8yR1/+tvrYoMjvRjs6T87v5qVZftSL/Omk34jXIrIs4k6vKOR6tOP1c/nF+NH11fxy/mn0m/F2qzrJYv7DaMfvX8fdGMbN2TON5fzfdfP8/fTD3998XgQX+dl00t+fxS2lvRd9bQAAAAAAAAAAAAAAAAAAAAAAeHUd5guduDoquqr9d/YezcYPHxuf7a9Tm42X+VlEc9Y4sz/QNMVP8/11ruV5nrIyfr4/z6RfjzfqUX9pJw4AAAAAAAAAAAAAAAAAAAD/IeN79wcnw+Gt0+fSqF7yX7zWf9nj9FZ63or1wftbzRV7VXhR69mY7q9fjBY9xUlcpvhJI49YV3PjXM+Vop7NR/4npZSyLOLZLlPjInNtaBysjyk+4F9+PHhncJJt+gxb8wv38+pQM07H985c08guUNj+fCWkrZZfc01Ms1oxFzrOwTN+id79s5zs/uCkseWXqFE14mnLr7XVet7ww9F8fr9BAAAAAAAAAAAAAAAAAABAafnS7xMGH6xNre2sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4wZb//3+LxrRKnvdceSwmpTRdBDfjdPySTxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/gX8DAAD///w4anM=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xb, 0x7, 0x8008, 0x4, 0x43407, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1c, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffdfe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 4 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd8fdb, 0x103) (async) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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") (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=@newtaction={0xf4, 0x32, 0x1, 0x0, 0x0, {}, [{0xe1, 0x1, [@m_ct={0xdc, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x7db}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x400}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "e4a2364e1ba74c781449a37c1fbb01f7"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x63, 0x6, "02c5a3138ee5b3328af187c78a3bf949a58fe95e4b5e8ccaf587f5e5051d058773c299acde152a444be3aaa8c12d3f4d624eb1ec36d92fe255187548ce35ce9cf3d6c15de8d775c0986284f0e2b22a3b1e5f9b7881168685a52df731c54b54"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf4}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) lseek(r11, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 20.092775][ T24] audit: type=1400 audit(1744545476.530:66): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.093714][ T273] cgroup: Unknown subsys name 'net' [ 20.100639][ T24] audit: type=1400 audit(1744545476.530:67): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.105720][ T24] audit: type=1400 audit(1744545476.540:68): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.106291][ T273] cgroup: Unknown subsys name 'devices' [ 20.198253][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.203660][ T273] cgroup: Unknown subsys name 'rlimit' [ 20.370764][ T24] audit: type=1400 audit(1744545476.810:69): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.394197][ T24] audit: type=1400 audit(1744545476.810:70): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.418856][ T24] audit: type=1400 audit(1744545476.810:71): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.424356][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.450933][ T24] audit: type=1400 audit(1744545476.890:72): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.476286][ T24] audit: type=1400 audit(1744545476.890:73): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.505622][ T24] audit: type=1400 audit(1744545476.940:74): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.531066][ T24] audit: type=1400 audit(1744545476.940:75): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.557328][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.622677][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.630113][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.638462][ T284] device bridge_slave_0 entered promiscuous mode [ 22.646374][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.653508][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.660635][ T284] device bridge_slave_1 entered promiscuous mode [ 22.751165][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758198][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.765573][ T285] device bridge_slave_0 entered promiscuous mode [ 22.773133][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.780131][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.787389][ T285] device bridge_slave_1 entered promiscuous mode [ 22.832226][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.839185][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.846348][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.853172][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.877848][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.884794][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.892518][ T286] device bridge_slave_0 entered promiscuous mode [ 22.899180][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.906005][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.913441][ T286] device bridge_slave_1 entered promiscuous mode [ 22.926021][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.933521][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.940910][ T288] device bridge_slave_0 entered promiscuous mode [ 22.952446][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.959368][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.966424][ T288] device bridge_slave_1 entered promiscuous mode [ 22.994621][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.001690][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.009202][ T287] device bridge_slave_0 entered promiscuous mode [ 23.031960][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.039138][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.046642][ T287] device bridge_slave_1 entered promiscuous mode [ 23.087593][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.097094][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.104950][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.114296][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.157951][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.165947][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.172841][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.180161][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.188372][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195402][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.218707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.227078][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.280228][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.295937][ T284] device veth0_vlan entered promiscuous mode [ 23.311121][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.319192][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.326369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.339486][ T284] device veth1_macvtap entered promiscuous mode [ 23.358975][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.368132][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.375863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.383279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.392461][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.399367][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.407046][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.415032][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.422361][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.429577][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.437750][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.444570][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.451873][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.460362][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.467301][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.474537][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.483367][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.510644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.520070][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.529402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.536991][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.544534][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.552972][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.573033][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.581390][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.589856][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.597683][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.605706][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.612932][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.620682][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.629442][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.636554][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.643897][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.652206][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659196][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.666397][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.674466][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.682565][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.690560][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.698108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.711628][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 23.712129][ T285] device veth0_vlan entered promiscuous mode [ 23.728965][ T287] device veth0_vlan entered promiscuous mode [ 23.735112][ T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.746472][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.754830][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.763199][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.771469][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.779715][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.787735][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.795799][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.804507][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.812366][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.820504][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.829934][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.837436][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.844712][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.852309][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.867117][ T286] device veth0_vlan entered promiscuous mode [ 23.875019][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.883808][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.892245][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.900480][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.908669][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.916442][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.924311][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.932214][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.940199][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.947931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.962904][ T285] device veth1_macvtap entered promiscuous mode [ 23.970507][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.978684][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.986929][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.998530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.006895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.020887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.029713][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.038062][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.045980][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.054832][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.062995][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.073527][ T288] device veth0_vlan entered promiscuous mode [ 24.080539][ T287] device veth1_macvtap entered promiscuous mode [ 24.087168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.095337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.103686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.111895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.119413][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.127460][ T286] device veth1_macvtap entered promiscuous mode [ 24.137185][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.144943][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.152949][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.164488][ T288] device veth1_macvtap entered promiscuous mode [ 24.172267][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.180021][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.189191][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.204889][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.213307][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.222167][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.230609][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.254664][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.263176][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.272202][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.280988][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.289412][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.298298][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.317368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.327367][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.492899][ T340] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 24.515686][ T342] process 'syz.4.5' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 24.527315][ T340] exFAT-fs (loop2): hint_cluster is invalid (17) [ 24.669953][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.682746][ T365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.702205][ T355] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.711159][ T355] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.759025][ T369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=369 comm=syz.2.16 [ 24.867981][ T379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 24.887398][ T379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 24.937790][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 24.971657][ T366] F2FS-fs (loop0): Unrecognized mount option "comprs_cache" or missing value [ 24.983989][ T292] hid-generic 000A:0003:0008.0001: item fetching failed at offset 5/9 [ 24.993832][ T292] hid-generic: probe of 000A:0003:0008.0001 failed with error -22 [ 25.056711][ T25] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 25.065433][ T25] usb 4-1: config 0 has no interface number 0 [ 25.071892][ T25] usb 4-1: config 0 interface 127 has no altsetting 0 [ 25.078708][ T25] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 25.089929][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.132236][ T390] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.143284][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 25.143296][ T24] audit: type=1400 audit(1744545481.580:153): avc: denied { mount } for pid=380 comm="syz.4.20" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.189342][ T25] usb 4-1: config 0 descriptor?? [ 25.190872][ T396] syz.0.23[396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.194213][ T396] syz.0.23[396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.316729][ T399] device wireguard0 entered promiscuous mode [ 25.448704][ T396] loop0: p1 < > p2 < p5 > p3 p4 < > [ 25.462329][ T396] loop0: p3 size 132352 extends beyond EOD, truncated [ 25.474007][ T396] loop0: p5 size 132352 extends beyond EOD, truncated [ 25.503261][ T326] udc-core: couldn't find an available UDC or it's busy [ 25.515736][ T403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 25.542826][ T326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.596813][ T25] usb 4-1: string descriptor 0 read error: -71 [ 25.604507][ T25] ums-karma 4-1:0.127: USB Mass Storage device detected [ 25.611986][ T24] audit: type=1400 audit(1744545482.000:154): avc: denied { read } for pid=395 comm="syz.0.23" name="loop0p1" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.637668][ T401] ====================================================== [ 25.637668][ T401] WARNING: the mand mount option is being deprecated and [ 25.637668][ T401] will be removed in v5.15! [ 25.637668][ T401] ====================================================== [ 25.715051][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 25.725296][ T24] audit: type=1400 audit(1744545482.000:155): avc: denied { open } for pid=395 comm="syz.0.23" path="/dev/loop0p1" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.805946][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 25.889885][ T25] usb 4-1: USB disconnect, device number 2 [ 26.077053][ T24] audit: type=1400 audit(1744545482.210:156): avc: denied { create } for pid=391 comm="syz.2.22" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.162189][ T396] overlayfs: './file1' not a directory [ 26.245701][ T24] audit: type=1400 audit(1744545482.220:157): avc: denied { read write } for pid=391 comm="syz.2.22" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.294609][ T24] audit: type=1400 audit(1744545482.220:158): avc: denied { open } for pid=391 comm="syz.2.22" path="/9/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.346561][ T24] audit: type=1400 audit(1744545482.600:159): avc: denied { mounton } for pid=395 comm="syz.0.23" path="/dev/loop0p3" dev="devtmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.376542][ C0] sched: RT throttling activated [ 26.398995][ T24] audit: type=1400 audit(1744545482.610:160): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.446800][ T24] audit: type=1400 audit(1744545482.620:161): avc: denied { create } for pid=412 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.480732][ T24] audit: type=1400 audit(1744545482.620:162): avc: denied { bind } for pid=412 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.679751][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.687940][ T414] loop1: p2 p3 p4 [ 26.691887][ T414] loop1: p2 size 130943 extends beyond EOD, truncated [ 26.709728][ T414] loop1: p3 size 16776960 extends beyond EOD, truncated [ 26.718960][ T414] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 27.401272][ T434] binder: 433:434 ioctl c0306201 200000000040 returned -14 [ 28.077307][ T416] udevd[416]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 28.088523][ T415] udevd[415]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 28.101870][ T345] udevd[345]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 28.120646][ T448] syz.2.31[448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.120944][ T448] syz.2.31[448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.131860][ T25] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 28.175239][ T442] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000000001,,errors=continue [ 28.193933][ T452] FAT-fs (loop1): bogus sectors per cluster 255 [ 28.208745][ T452] FAT-fs (loop1): Can't find a valid FAT filesystem [ 28.217227][ T442] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.313623][ T448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 28.315950][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.330767][ T25] usb 4-1: can't read configurations, error -61 [ 28.514740][ T463] syz.4.33[463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.514829][ T463] syz.4.33[463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.736814][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.781563][ T461] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 28.794995][ T461] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 28.803638][ T461] exFAT-fs (loop0): failed to load alloc-bitmap [ 28.810411][ T461] exFAT-fs (loop0): failed to recognize exfat type [ 29.095421][ T471] netem: change failed [ 29.102620][ T471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=471 comm=syz.1.37 [ 29.117558][ T467] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 29.123923][ T467] EXT4-fs (loop2): mount failed [ 29.175868][ T475] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 29.186649][ T25] usb 4-1: too many configurations: 244, using maximum allowed: 8 [ 29.347254][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 29.355282][ T25] usb 4-1: can't read configurations, error -71 [ 29.362214][ T25] usb usb4-port1: attempt power cycle [ 29.526588][ T292] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.617327][ T475] FAT-fs (loop4): Unrecognized mount option "nnonugtail=1" or missing value [ 29.623697][ T486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.640053][ T486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.651213][ T486] EXT4-fs (loop0): 1 truncate cleaned up [ 29.657084][ T486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.787836][ T494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.795218][ T494] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.38: bg 0: block 248: padding at end of block bitmap is not set [ 29.798137][ T500] netlink: 11 bytes leftover after parsing attributes in process `syz.2.43'. [ 29.810362][ T494] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.38: Failed to acquire dquot type 1 [ 29.831942][ T494] EXT4-fs (loop4): 1 truncate cleaned up [ 29.837772][ T500] netlink: 7 bytes leftover after parsing attributes in process `syz.2.43'. [ 29.847364][ T494] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 29.869791][ T494] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.38: deleted inode referenced: 12 [ 29.885141][ T494] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.38: deleted inode referenced: 12 [ 29.946580][ T292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.958020][ T292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 30.001573][ T513] EXT4-fs (loop2): 1 orphan inode deleted [ 30.007580][ T513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 30.016720][ T513] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.066731][ T292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 30.075812][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.083837][ T292] usb 2-1: SerialNumber: syz [ 30.137540][ T292] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 30.145538][ T512] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 30.151586][ T292] usb-storage 2-1:1.0: USB Mass Storage device detected [ 30.163557][ T512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.172803][ T512] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 30.179439][ T292] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 30.184184][ T512] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.187722][ T292] scsi host1: usb-storage 2-1:1.0 [ 30.202211][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 30.202223][ T24] audit: type=1400 audit(1744545486.640:206): avc: denied { create } for pid=528 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.229550][ T24] audit: type=1400 audit(1744545486.640:207): avc: denied { ioctl } for pid=528 comm="syz.4.49" path="socket:[16213]" dev="sockfs" ino=16213 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.272427][ T512] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.280217][ T512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.341555][ T15] usb 2-1: USB disconnect, device number 2 [ 30.403307][ T24] audit: type=1400 audit(1744545486.840:208): avc: denied { create } for pid=548 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.729632][ T552] IPv6: syztnl1: Disabled Multicast RS [ 30.968130][ T549] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 31.006218][ T549] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 31.044660][ T549] System zones: 0-2, 18-18, 34-35 [ 31.052166][ T549] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,data_err=ignore,,errors=continue [ 31.182894][ T560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 31.191844][ T560] sch_tbf: burst 511 is lower than device bond_slave_1 mtu (1514) ! [ 31.207834][ T24] audit: type=1326 audit(1744545487.640:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.248694][ T570] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.59: casefold flag without casefold feature [ 31.269010][ T570] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.59: missing EA_INODE flag [ 31.281608][ T570] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.59: error while reading EA inode 12 err=-117 [ 31.286572][ T24] audit: type=1326 audit(1744545487.640:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.293923][ T570] EXT4-fs (loop2): 1 orphan inode deleted [ 31.322567][ T570] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.393220][ T24] audit: type=1326 audit(1744545487.670:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.460140][ T24] audit: type=1326 audit(1744545487.670:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.485123][ T24] audit: type=1326 audit(1744545487.670:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.525320][ T24] audit: type=1326 audit(1744545487.670:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.550383][ T24] audit: type=1326 audit(1744545487.670:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=557 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf82db6169 code=0x7ffc0000 [ 31.650052][ T586] xt_hashlimit: max too large, truncated to 1048576 [ 31.759723][ T585] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 31.767863][ T585] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.777431][ T585] F2FS-fs (loop4): invalid crc value [ 31.784414][ T585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.810117][ T585] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.817647][ T585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.124680][ T597] overlayfs: unrecognized mount option "func=FIRMWARE_CHECK" or missing value [ 32.483249][ T308] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 32.492309][ T308] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 32.946903][ T616] EXT4-fs (loop1): 1 orphan inode deleted [ 32.953110][ T616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.962405][ T616] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.408518][ T626] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 33.438811][ T626] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=.,nolazytime,,errors=continue [ 33.449799][ T626] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.646546][ T622] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.713509][ T643] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 33.734133][ T643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 33.907197][ T622] usb 5-1: Using ep0 maxpacket: 16 [ 34.120947][ T622] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.133829][ T622] usb 5-1: config 1 interface 0 has no altsetting 0 [ 34.302892][ T622] usb 5-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.40 [ 34.312733][ T622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.321041][ T622] usb 5-1: Product: syz [ 34.325232][ T622] usb 5-1: Manufacturer: syz [ 34.329975][ T622] usb 5-1: SerialNumber: syz [ 34.346662][ T653] netlink: 96 bytes leftover after parsing attributes in process `syz.1.80'. [ 34.384998][ T658] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.397432][ T658] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 34.408260][ T658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdedde5da, utbl_chksum : 0xe619d30d) [ 34.811993][ T676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'. [ 35.254146][ T622] usbhid 5-1:1.0: can't add hid device: -71 [ 35.265742][ T622] usbhid: probe of 5-1:1.0 failed with error -71 [ 35.273048][ T622] usb 5-1: USB disconnect, device number 2 [ 35.779611][ T24] kauditd_printk_skb: 197 callbacks suppressed [ 35.779624][ T24] audit: type=1326 audit(1744545492.088:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eadb8c169 code=0x7ffc0000 [ 35.810736][ T24] audit: type=1326 audit(1744545492.088:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f6eadb8c169 code=0x7ffc0000 [ 35.835592][ T24] audit: type=1326 audit(1744545492.088:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eadb8c169 code=0x7ffc0000 [ 35.861447][ T24] audit: type=1326 audit(1744545492.088:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eadb8aad0 code=0x7ffc0000 [ 35.884442][ T24] audit: type=1326 audit(1744545492.088:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eadb8c169 code=0x7ffc0000 [ 35.907471][ T24] audit: type=1326 audit(1744545492.116:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eadb8c169 code=0x7ffc0000 [ 35.933923][ T702] EXT4-fs (loop0): Ignoring removed nobh option [ 35.940036][ T702] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 35.941716][ T24] audit: type=1400 audit(1744545492.135:419): avc: denied { bind } for pid=701 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.969626][ T24] audit: type=1400 audit(1744545492.257:420): avc: denied { create } for pid=704 comm="syz.1.93" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.990223][ T24] audit: type=1400 audit(1744545492.257:421): avc: denied { read } for pid=704 comm="syz.1.93" name="file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.991067][ T702] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,discard,nobh,mblk_io_submit,dioread_nolock,,errors=continue [ 36.013518][ T24] audit: type=1400 audit(1744545492.257:422): avc: denied { open } for pid=704 comm="syz.1.93" path="/21/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.051852][ T705] EXT4-fs (loop1): Mount option "data=writeback" incompatible with ext2 [ 36.098741][ T622] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.182299][ T714] capability: warning: `syz.1.95' uses deprecated v2 capabilities in a way that may be insecure [ 36.245643][ T287] ------------[ cut here ]------------ [ 36.251537][ T287] WARNING: CPU: 1 PID: 287 at fs/overlayfs/util.c:453 ovl_dir_modified+0x2f4/0x3e0 [ 36.261363][ T287] Modules linked in: [ 36.265099][ T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted 5.10.234-syzkaller-00157-ge0b88ee5f09c #0 [ 36.275279][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.279806][ T716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 36.285315][ T287] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 36.285345][ T287] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 93 38 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0c 99 63 ff <0f> 0b e9 14 ff ff ff e8 00 99 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 36.320092][ T287] RSP: 0018:ffffc90000b979c8 EFLAGS: 00010293 [ 36.326243][ T287] RAX: ffffffff82072664 RBX: 0000000000000000 RCX: ffff888124998000 [ 36.329082][ T716] tmpfs: Unknown parameter 'nolazytime' [ 36.334317][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.347780][ T287] RBP: ffffc90000b97a10 R08: ffffffff82072571 R09: ffffed1025714ad1 [ 36.355514][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810fef7e00 [ 36.363498][ T287] R13: 1ffff11021fdefc0 R14: ffff88812b8a55e0 R15: dffffc0000000000 [ 36.371451][ T622] usb 5-1: Using ep0 maxpacket: 8 [ 36.376764][ T287] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.385698][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.392820][ T287] CR2: 00007f6eac1f5f98 CR3: 00000001213f3000 CR4: 00000000003526a0 [ 36.400919][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.409192][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.417420][ T287] Call Trace: [ 36.421122][ T287] ? show_regs+0x58/0x60 [ 36.425712][ T287] ? __warn+0x160/0x2f0 [ 36.432011][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 36.437001][ T287] ? report_bug+0x3d9/0x5b0 [ 36.441394][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 36.446864][ T287] ? handle_bug+0x41/0x70 [ 36.451067][ T287] ? exc_invalid_op+0x1b/0x50 [ 36.455665][ T287] ? asm_exc_invalid_op+0x12/0x20 [ 36.460666][ T287] ? ovl_dir_modified+0x201/0x3e0 [ 36.465779][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 36.470863][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 36.475968][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 36.480861][ T287] ovl_do_remove+0x656/0xc90 [ 36.486033][ T287] ? ovl_set_redirect+0x630/0x630 [ 36.491020][ T287] ? down_write+0xd7/0x150 [ 36.495518][ T287] ? down_read_killable+0x220/0x220 [ 36.501021][ T287] ? selinux_inode_rmdir+0x22/0x30 [ 36.504934][ T622] usb 5-1: config 0 has an invalid interface number: 141 but max is 12 [ 36.506330][ T287] ovl_rmdir+0x1a/0x20 [ 36.518666][ T287] vfs_rmdir+0x2b7/0x3f0 [ 36.522194][ T622] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 36.522759][ T287] incfs_kill_sb+0x108/0x220 [ 36.534961][ T622] usb 5-1: config 0 has no interface number 0 [ 36.542034][ T287] deactivate_locked_super+0xad/0x110 [ 36.542593][ T622] usb 5-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 36.548323][ T287] deactivate_super+0xbe/0xf0 [ 36.558666][ T622] usb 5-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 36.562975][ T287] cleanup_mnt+0x45c/0x510 [ 36.577619][ T622] usb 5-1: config 0 interface 141 has no altsetting 0 [ 36.580969][ T287] __cleanup_mnt+0x19/0x20 [ 36.591229][ T287] task_work_run+0x129/0x190 [ 36.595598][ T287] do_exit+0xc83/0x2a50 [ 36.599843][ T287] ? put_task_struct+0x80/0x80 [ 36.604574][ T287] ? __kasan_check_read+0x11/0x20 [ 36.609429][ T287] ? __fdget_pos+0x209/0x3a0 [ 36.614032][ T287] ? ksys_write+0x24f/0x2c0 [ 36.618346][ T287] ? __ia32_sys_read+0x90/0x90 [ 36.623066][ T287] ? debug_smp_processor_id+0x17/0x20 [ 36.628267][ T287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 36.634687][ T287] do_group_exit+0x141/0x310 [ 36.639235][ T287] ? debug_smp_processor_id+0x17/0x20 [ 36.649840][ T287] __x64_sys_exit_group+0x3f/0x40 [ 36.654784][ T724] EXT4-fs (loop1): Ignoring removed oldalloc option [ 36.655259][ T287] do_syscall_64+0x34/0x70 [ 36.666068][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.672744][ T287] RIP: 0033:0x7fc2fe1ae169 [ 36.677220][ T287] Code: Unable to access opcode bytes at RIP 0x7fc2fe1ae13f. [ 36.679022][ T724] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,oldalloc,init_itable,user_xattr,minixdf, [ 36.684415][ T287] RSP: 002b:00007ffd9ebb1388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.684433][ T287] RAX: ffffffffffffffda RBX: 00007fc2fe22f7a1 RCX: 00007fc2fe1ae169 [ 36.684450][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 36.698466][ T724] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.707284][ T287] RBP: 0000000000000028 R08: 00007ffd9ebaf126 R09: 00007ffd9ebb2640 [ 36.741501][ T287] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd9ebb2640 [ 36.749419][ T287] R13: 00007fc2fe22f77c R14: 0000000000008cb3 R15: 00007ffd9ebb3710 [ 36.757730][ T287] ---[ end trace bfdf80516d4f89bc ]--- [ 36.763809][ T287] ------------[ cut here ]------------ [ 36.769318][ T287] WARNING: CPU: 0 PID: 287 at fs/overlayfs/util.c:453 ovl_dir_modified+0x2f4/0x3e0 [ 36.784588][ T287] Modules linked in: [ 36.788363][ T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G W 5.10.234-syzkaller-00157-ge0b88ee5f09c #0 [ 36.800594][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.810961][ T287] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 36.816816][ T287] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 93 38 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0c 99 63 ff <0f> 0b e9 14 ff ff ff e8 00 99 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 36.833402][ T622] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 36.845001][ T287] RSP: 0018:ffffc90000b979c8 EFLAGS: 00010293 [ 36.846046][ T622] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 36.852204][ T287] RAX: ffffffff82072664 RBX: 0000000000000000 RCX: ffff888124998000 [ 36.859876][ T622] usb 5-1: Product: syz [ 36.867910][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.871858][ T622] usb 5-1: Manufacturer: syz [ 36.879857][ T287] RBP: ffffc90000b97a10 R08: ffffffff82072571 R09: ffffed1025714ad1 [ 36.884106][ T622] usb 5-1: SerialNumber: syz [ 36.892207][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810fef7e00 [ 36.900879][ T622] usb 5-1: config 0 descriptor?? [ 36.904590][ T287] R13: 1ffff11021fdefc0 R14: ffff88812b8a55e0 R15: dffffc0000000000 [ 36.917591][ T287] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.927677][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.935392][ T287] CR2: 00007f1e315eac48 CR3: 00000001244ca000 CR4: 00000000003506a0 [ 36.975294][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.983498][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.996894][ T287] Call Trace: [ 37.000076][ T287] ? show_regs+0x58/0x60 [ 37.004091][ T287] ? __warn+0x160/0x2f0 [ 37.008157][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 37.013033][ T287] ? report_bug+0x3d9/0x5b0 [ 37.017403][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 37.022791][ T287] ? handle_bug+0x41/0x70 [ 37.027110][ T287] ? exc_invalid_op+0x1b/0x50 [ 37.032037][ T287] ? asm_exc_invalid_op+0x12/0x20 [ 37.036904][ T287] ? ovl_dir_modified+0x201/0x3e0 [ 37.043156][ T732] netlink: 'syz.1.100': attribute type 12 has an invalid length. [ 37.050838][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 37.055778][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 37.061139][ T287] ? ovl_dir_modified+0x2f4/0x3e0 [ 37.065989][ T287] ovl_do_remove+0x656/0xc90 [ 37.070410][ T287] ? ovl_set_redirect+0x630/0x630 [ 37.075778][ T287] ? down_write+0xd7/0x150 [ 37.080041][ T287] ? down_read_killable+0x220/0x220 [ 37.085498][ T287] ? selinux_inode_rmdir+0x22/0x30 [ 37.090490][ T287] ovl_rmdir+0x1a/0x20 [ 37.094794][ T287] vfs_rmdir+0x2b7/0x3f0 [ 37.098916][ T287] incfs_kill_sb+0x1a2/0x220 [ 37.104208][ T287] deactivate_locked_super+0xad/0x110 [ 37.109448][ T287] deactivate_super+0xbe/0xf0 [ 37.114588][ T287] cleanup_mnt+0x45c/0x510 [ 37.118940][ T287] __cleanup_mnt+0x19/0x20 [ 37.123287][ T287] task_work_run+0x129/0x190 [ 37.127941][ T287] do_exit+0xc83/0x2a50 [ 37.132035][ T287] ? put_task_struct+0x80/0x80 [ 37.136815][ T287] ? __kasan_check_read+0x11/0x20 [ 37.141684][ T287] ? __fdget_pos+0x209/0x3a0 [ 37.146103][ T287] ? ksys_write+0x24f/0x2c0 [ 37.150861][ T287] ? __ia32_sys_read+0x90/0x90 [ 37.155564][ T287] ? debug_smp_processor_id+0x17/0x20 [ 37.166303][ T287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 37.179100][ T287] do_group_exit+0x141/0x310 [ 37.185194][ T287] ? debug_smp_processor_id+0x17/0x20 [ 37.191261][ T287] __x64_sys_exit_group+0x3f/0x40 [ 37.203191][ T622] usb 5-1: USB disconnect, device number 3 [ 37.223480][ T287] do_syscall_64+0x34/0x70 [ 37.231179][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.233016][ T740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.103'. [ 37.237299][ T287] RIP: 0033:0x7fc2fe1ae169 [ 37.250362][ T287] Code: Unable to access opcode bytes at RIP 0x7fc2fe1ae13f. [ 37.257724][ T287] RSP: 002b:00007ffd9ebb1388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.264035][ T292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.266659][ T287] RAX: ffffffffffffffda RBX: 00007fc2fe22f7a1 RCX: 00007fc2fe1ae169 [ 37.291915][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 37.300104][ T287] RBP: 0000000000000028 R08: 00007ffd9ebaf126 R09: 00007ffd9ebb2640 [ 37.308881][ T287] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd9ebb2640 [ 37.326648][ T287] R13: 00007fc2fe22f77c R14: 0000000000008cb3 R15: 00007ffd9ebb3710 [ 37.336912][ T287] ---[ end trace bfdf80516d4f89bd ]--- [ 37.377597][ T750] fuse: Bad value for 'fd' [ 37.527497][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.542052][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.553321][ T753] device bridge_slave_0 entered promiscuous mode [ 37.566648][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.575836][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.583305][ T753] device bridge_slave_1 entered promiscuous mode [ 37.637178][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.644042][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.651149][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.657912][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.675313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.682765][ T292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.703630][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.711449][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.728104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.736668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.744817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.751784][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.759130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.767728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.776191][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.783062][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.803584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.811735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.820556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.828500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.860434][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.873847][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.886629][ T753] device veth0_vlan entered promiscuous mode [ 37.894857][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.902951][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.911021][ T292] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.911494][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.927033][ T292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.927682][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.935068][ T292] usb 1-1: Product: syz [ 37.947343][ T292] usb 1-1: Manufacturer: syz [ 37.952075][ T292] usb 1-1: SerialNumber: syz [ 37.959121][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.967580][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.976724][ T753] device veth1_macvtap entered promiscuous mode [ 38.072455][ T292] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 38.096109][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.126805][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.138076][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.208754][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.230716][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.247934][ T308] device bridge_slave_1 left promiscuous mode [ 38.253925][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.261920][ T308] device bridge_slave_0 left promiscuous mode [ 38.270166][ T292] usb 1-1: USB disconnect, device number 2 [ 38.277535][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.288204][ T308] device veth1_macvtap left promiscuous mode [ 38.294101][ T308] device veth0_vlan left promiscuous mode [ 39.678201][ T787] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.114: casefold flag without casefold feature [ 39.691541][ T787] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.114: missing EA_INODE flag [ 39.703944][ T787] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.114: error while reading EA inode 12 err=-117 [ 39.717382][ T787] EXT4-fs (loop4): 1 orphan inode deleted [ 39.723043][ T787] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 40.485303][ T807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 40.506160][ T807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=807 comm=syz.4.121 [ 40.672643][ T803] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 40.687044][ T822] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 40.703572][ T803] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 40.718189][ T817] EXT4-fs (loop5): Ignoring removed nobh option [ 40.727264][ T803] F2FS-fs (loop1): invalid crc value [ 40.846151][ T803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.855052][ T817] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,resuid=0x0000000000000000,max_batch_time=0x0000000000010000,resuid=0x000000000000ee01,discard,noblock_validity,nobh,,errors=continue [ 40.944051][ T803] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 40.954312][ T830] 9pnet: Could not find request transport: rdma [ 40.966402][ T830] tipc: Started in network mode [ 40.971981][ T830] tipc: Own node identity ac14140f, cluster identity 4711 [ 40.979400][ T830] tipc: New replicast peer: 255.255.255.255 [ 40.985545][ T830] tipc: Enabled bearer , priority 10 [ 40.998005][ T803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.151168][ T816] 9pnet: Insufficient options for proto=fd [ 41.204439][ T817] 9pnet: Insufficient options for proto=fd [ 41.303254][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 41.303261][ T24] audit: type=1326 audit(2000000000.617:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaeb730169 code=0x7fc00000 [ 41.394083][ T840] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 41.404209][ T24] audit: type=1400 audit(2000000000.720:553): avc: denied { relabelto } for pid=802 comm="syz.1.120" name="bus" dev="loop1" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 41.736211][ T845] FAT-fs (loop4): bogus number of FAT sectors [ 41.743368][ T845] FAT-fs (loop4): Can't find a valid FAT filesystem [ 42.011923][ T851] xt_TCPMSS: Only works on TCP SYN packets [ 42.115759][ T24] audit: type=1400 audit(2000000001.375:554): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.135583][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 42.145262][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 42.196707][ T912] tipc: 32-bit node address hash set to f1414ac [ 42.543694][ T917] exfat: Unknown parameter '' [ 42.887831][ T919] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.978888][ T919] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 43.227885][ T926] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.236984][ T926] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.335181][ T934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 43.625015][ T24] audit: type=1400 audit(2000000002.544:555): avc: denied { create } for pid=928 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.644436][ T24] audit: type=1400 audit(2000000002.553:556): avc: denied { setopt } for pid=928 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.745083][ T24] audit: type=1400 audit(2000000002.553:557): avc: denied { map } for pid=928 comm="syz.1.132" path="socket:[16951]" dev="sockfs" ino=16951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.746329][ T919] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 43.773515][ T24] audit: type=1400 audit(2000000002.553:558): avc: denied { read accept } for pid=928 comm="syz.1.132" path="socket:[16951]" dev="sockfs" ino=16951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.801382][ T24] audit: type=1400 audit(2000000002.909:559): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.861324][ T24] audit: type=1400 audit(2000000002.909:560): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.883391][ T919] netlink: 'syz.0.130': attribute type 3 has an invalid length. [ 43.883540][ T24] audit: type=1400 audit(2000000002.909:561): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.890972][ T919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.130'. [ 43.973973][ T942] EXT4-fs (loop5): Ignoring removed orlov option [ 43.998203][ T942] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 44.101336][ T963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 44.532031][ T967] incfs: Backing dir is not set, filesystem can't be mounted. [ 44.555245][ T967] incfs: mount failed -2 [ 44.610515][ T980] : renamed from pim6reg1 [ 44.621764][ T974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.920768][ T995] fuse: Bad value for 'rootmode' [ 45.246906][ T998] syz.0.145[998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.247367][ T998] syz.0.145[998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.576466][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.604702][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.612388][ T1001] device bridge_slave_0 entered promiscuous mode [ 45.620360][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.627314][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.634690][ T1001] device bridge_slave_1 entered promiscuous mode [ 45.661208][ T1014] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 45.677436][ T912] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.694213][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.701658][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.708714][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.715640][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.738916][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.747346][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.754959][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.774915][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.824957][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.832168][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.846807][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.856107][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.862985][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.876131][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.876710][ T1017] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.884455][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.893505][ T1017] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #3: comm syz.4.149: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 45.934189][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.956528][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.962619][ T1017] EXT4-fs error (device loop4): ext4_quota_enable:6426: comm syz.4.149: Bad quota inode: 3, type: 0 [ 45.964551][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.983636][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.992594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.004401][ T1001] device veth0_vlan entered promiscuous mode [ 46.010629][ T1017] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.020049][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.034605][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.046336][ T1001] device veth1_macvtap entered promiscuous mode [ 46.059628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.068054][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.077144][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.079656][ T1017] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 46.094209][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.102839][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.125860][ T1017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 46.157278][ T912] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 46.157295][ T912] usb 6-1: can't read configurations, error -61 [ 46.214473][ T1033] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.214482][ T1033] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 46.240546][ T1033] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 46.308223][ T912] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.491866][ T308] device bridge_slave_1 left promiscuous mode [ 46.491924][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.492769][ T308] device bridge_slave_0 left promiscuous mode [ 46.492826][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.493911][ T308] device veth1_macvtap left promiscuous mode [ 46.493943][ T308] device veth0_vlan left promiscuous mode [ 46.516220][ T1044] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 46.686618][ T1048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 46.708649][ T1048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=1048 comm=syz.4.157 [ 46.816122][ T912] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 46.816137][ T912] usb 6-1: can't read configurations, error -61 [ 46.816454][ T912] usb usb6-port1: attempt power cycle [ 47.048944][ T906] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 47.366742][ T912] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.441711][ T906] usb 5-1: config index 0 descriptor too short (expected 149, got 148) [ 47.468840][ T906] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 47.538102][ T906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.631185][ T1056] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (18359!=20869) [ 47.657667][ T912] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 47.665060][ T912] usb 6-1: can't read configurations, error -61 [ 47.682716][ T1056] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 47.697823][ T1056] EXT4-fs (loop0): write access will be enabled during recovery [ 47.716771][ T1056] JBD2: no valid journal superblock found [ 47.726802][ T1056] EXT4-fs (loop0): error loading journal [ 47.752029][ T906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 47.772030][ T906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.782694][ T906] usb 5-1: SerialNumber: syz [ 47.837728][ T906] usb 5-1: 0:2 : does not exist [ 47.842940][ T912] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 47.851870][ T906] usb 5-1: unit 211 not found! [ 48.052539][ T906] usb 5-1: USB disconnect, device number 4 [ 48.062655][ T1060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.092548][ T1060] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.098979][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 48.098990][ T24] audit: type=1400 audit(2000000006.967:578): avc: denied { read write } for pid=1067 comm="syz.6.163" name="uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.100612][ T1060] EXT4-fs (loop1): 1 truncate cleaned up [ 48.132159][ T912] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 48.135587][ T1060] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000d40,noblock_validity,,errors=continue [ 48.147582][ T24] audit: type=1400 audit(2000000006.967:579): avc: denied { open } for pid=1067 comm="syz.6.163" path="/dev/uinput" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.181595][ T912] usb 6-1: can't read configurations, error -61 [ 48.188457][ T912] usb usb6-port1: unable to enumerate USB device [ 48.397835][ T24] audit: type=1400 audit(2000000007.257:580): avc: denied { create } for pid=1080 comm="syz.5.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.404931][ T1084] syz.6.164 uses obsolete (PF_INET,SOCK_PACKET) [ 48.461744][ T435] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.767038][ T435] usb 1-1: Using ep0 maxpacket: 16 [ 49.126955][ T24] audit: type=1400 audit(2000000007.940:581): avc: denied { shutdown } for pid=1091 comm="syz.4.168" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.202348][ T24] audit: type=1400 audit(2000000008.005:582): avc: denied { read } for pid=1098 comm="syz.6.169" dev="nsfs" ino=4026532619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.226512][ T24] audit: type=1400 audit(2000000008.005:583): avc: denied { open } for pid=1098 comm="syz.6.169" path="net:[4026532619]" dev="nsfs" ino=4026532619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.252947][ T24] audit: type=1400 audit(2000000008.005:584): avc: denied { listen } for pid=1098 comm="syz.6.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.261539][ T435] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 49.284213][ T435] usb 1-1: config 0 has no interface number 0 [ 49.297879][ T435] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 49.305551][ T1097] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 49.307968][ T435] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.317186][ T1097] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.326646][ T435] usb 1-1: config 0 interface 41 has no altsetting 0 [ 49.435209][ T1109] device syzkaller0 entered promiscuous mode [ 49.455524][ T1103] netlink: 84 bytes leftover after parsing attributes in process `syz.1.171'. [ 49.465328][ T24] audit: type=1400 audit(2000000008.258:585): avc: denied { setopt } for pid=1096 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.516972][ T435] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 49.531126][ T24] audit: type=1400 audit(2000000008.258:586): avc: denied { write } for pid=1096 comm="syz.4.170" path="socket:[17329]" dev="sockfs" ino=17329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.555260][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.563616][ T435] usb 1-1: Product: syz [ 49.567698][ T435] usb 1-1: Manufacturer: syz [ 49.572640][ T435] usb 1-1: SerialNumber: syz [ 49.582709][ T24] audit: type=1400 audit(2000000008.295:587): avc: denied { create } for pid=1112 comm="syz.1.173" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.609099][ T435] usb 1-1: config 0 descriptor?? [ 49.633007][ T1066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.645270][ T1066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.665659][ T1127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1127 comm=syz.5.177 [ 49.888610][ T1133] SELinux: security_context_str_to_sid(E) failed for (dev sysfs, type sysfs) errno=-22 [ 49.915721][ T1066] udc-core: couldn't find an available UDC or it's busy [ 49.922532][ T912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.927167][ T1066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.975572][ T435] dm9601: probe of 1-1:0.41 failed with error -71 [ 50.007197][ T435] sr9700: probe of 1-1:0.41 failed with error -71 [ 50.034714][ T435] usb 1-1: USB disconnect, device number 3 [ 50.245029][ T1139] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.181: inode #1: comm syz.4.181: iget: illegal inode # [ 50.258157][ T1139] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.181: error while reading EA inode 1 err=-117 [ 50.271386][ T1139] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.284350][ T1139] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.181: inode #1: comm syz.4.181: iget: illegal inode # [ 50.297797][ T1139] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.181: error while reading EA inode 1 err=-117 [ 50.310556][ T1139] EXT4-fs (loop4): 1 orphan inode deleted [ 50.316557][ T1139] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 50.317214][ T912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.351769][ T1139] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.181: invalid indirect mapped block 234881024 (level 0) [ 50.355373][ T912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.380709][ T912] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 50.389663][ T912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.398715][ T912] usb 7-1: config 0 descriptor?? [ 50.802586][ T1171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.183'. [ 50.811437][ T1171] device gre0 entered promiscuous mode [ 51.224751][ T1170] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.232120][ T1170] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value [ 51.283144][ T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 51.364849][ T912] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 51.717632][ T15] usb 1-1: device descriptor read/64, error -71 [ 51.828041][ T1179] netlink: 'syz.1.190': attribute type 16 has an invalid length. [ 51.893238][ T1179] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.190'. [ 52.133687][ T1181] tipc: Started in network mode [ 52.145286][ T15] usb 1-1: device descriptor read/64, error -71 [ 52.183474][ T1181] tipc: Own node identity ac14140f, cluster identity 4711 [ 52.269588][ T1181] tipc: New replicast peer: 255.255.255.255 [ 52.307068][ T1181] tipc: Enabled bearer , priority 10 [ 52.434254][ T15] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.530113][ T912] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 52.537565][ T912] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 52.544782][ T912] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 52.552261][ T912] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 52.570457][ T912] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 52.754186][ T15] usb 1-1: device descriptor read/64, error -71 [ 52.818790][ T912] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -71 [ 52.828325][ T912] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -71 [ 52.837723][ T912] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 52.846484][ T912] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 52.854937][ T912] playstation: probe of 0003:054C:0DF2.0002 failed with error -71 [ 52.865609][ T912] usb 7-1: USB disconnect, device number 2 [ 52.936614][ T1168] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 53.443214][ T1204] syz.1.195 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.763453][ T468] tipc: 32-bit node address hash set to f1414ac [ 53.792982][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 53.792994][ T24] audit: type=1400 audit(2000000012.308:653): avc: denied { create } for pid=1215 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.834354][ T15] usb 1-1: device descriptor read/64, error -71 [ 53.867240][ T1223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.202'. [ 53.963252][ T15] usb usb1-port1: attempt power cycle [ 54.219325][ T912] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.286824][ T1233] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.381553][ T1233] device syzkaller0 entered promiscuous mode [ 54.388612][ T1243] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.420110][ T24] audit: type=1400 audit(2000000012.888:654): avc: denied { create } for pid=1241 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.486504][ T912] usb 7-1: Using ep0 maxpacket: 32 [ 54.544277][ T24] audit: type=1400 audit(2000000013.009:655): avc: denied { bind } for pid=1241 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.598496][ T1252] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.209: casefold flag without casefold feature [ 54.611389][ T1252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.209: missing EA_INODE flag [ 54.623473][ T1252] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.209: error while reading EA inode 12 err=-117 [ 54.635813][ T912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.647195][ T1252] EXT4-fs (loop1): 1 orphan inode deleted [ 54.653218][ T912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.660037][ T1252] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.663443][ T912] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 54.681808][ T24] audit: type=1400 audit(2000000013.140:656): avc: denied { mounton } for pid=1251 comm="syz.1.209" path="/56/file0/file0" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.704505][ T912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.713335][ T912] usb 7-1: config 0 descriptor?? [ 54.715205][ T24] audit: type=1400 audit(2000000013.140:657): avc: denied { write } for pid=1251 comm="syz.1.209" name="file0" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.741861][ T24] audit: type=1400 audit(2000000013.140:658): avc: denied { add_name } for pid=1251 comm="syz.1.209" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.762610][ T24] audit: type=1400 audit(2000000013.140:659): avc: denied { setattr } for pid=1251 comm="syz.1.209" name="work" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.785848][ T24] audit: type=1400 audit(2000000013.140:660): avc: denied { remove_name } for pid=1251 comm="syz.1.209" name="#5" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.808983][ T24] audit: type=1400 audit(2000000013.140:661): avc: denied { rename } for pid=1251 comm="syz.1.209" name="#5" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.851533][ T24] audit: type=1400 audit(2000000013.140:662): avc: denied { unlink } for pid=1251 comm="syz.1.209" name="#5" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.284752][ T912] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 55.456542][ T1283] netlink: 'syz.0.218': attribute type 16 has an invalid length. [ 55.465079][ T1283] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.218'. [ 55.880358][ T435] usb 7-1: USB disconnect, device number 3 [ 55.985316][ T1290] EXT4-fs (loop0): Test dummy encryption mode enabled [ 56.371513][ T1290] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 57.065080][ T1301] input: syz1 as /devices/virtual/input/input5 [ 57.585421][ T1310] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 57.638220][ T1310] EXT4-fs (loop6): 1 truncate cleaned up [ 57.650939][ T1310] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue [ 57.788506][ T1317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1317 comm=syz.1.226 [ 57.801177][ T15] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 58.372051][ T15] usb 1-1: device descriptor read/64, error -71 [ 58.378207][ T435] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.524742][ T1333] device pim6reg1 entered promiscuous mode [ 58.655842][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 58.794903][ T435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.804877][ T435] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 58.814024][ T435] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.823205][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.831478][ T15] usb 1-1: device descriptor read/64, error -71 [ 58.839281][ T435] usb 5-1: config 0 descriptor?? [ 58.901793][ T903] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.095682][ T1321] ip_tunnel: non-ECT from 172.20.20.35 with TOS=0x3 [ 59.137111][ T15] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 59.286687][ T903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.297660][ T903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.307207][ T903] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 59.316242][ T903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.324776][ T903] usb 7-1: config 0 descriptor?? [ 59.378180][ T1344] syz.5.233[1344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.378214][ T1344] syz.5.233[1344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.457654][ T15] usb 1-1: device descriptor read/64, error -71 [ 59.523344][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 59.523358][ T24] audit: type=1400 audit(2000000017.668:694): avc: denied { lock } for pid=1352 comm="syz.1.235" path="socket:[19545]" dev="sockfs" ino=19545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 59.704035][ T1357] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 59.711001][ T1357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.719005][ T1357] F2FS-fs (loop1): Unrecognized mount option "noinline_xatt>0active_logsɓ=oĉM{=4" or missing value [ 59.895959][ T15] usb 1-1: device descriptor read/64, error -71 [ 60.035007][ T15] usb usb1-port1: attempt power cycle [ 60.076692][ T24] audit: type=1326 audit(2000000018.173:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.100130][ T24] audit: type=1326 audit(2000000018.173:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.123679][ T24] audit: type=1326 audit(2000000018.192:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.147810][ T24] audit: type=1326 audit(2000000018.192:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.171476][ T24] audit: type=1326 audit(2000000018.192:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.195899][ T435] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 60.203535][ T24] audit: type=1326 audit(2000000018.192:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.226709][ T24] audit: type=1326 audit(2000000018.210:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.250583][ T24] audit: type=1326 audit(2000000018.210:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.296853][ T24] audit: type=1326 audit(2000000018.266:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd482169 code=0x7ffc0000 [ 60.505334][ T15] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 60.591361][ T906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 60.602139][ T435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.697890][ T15] usb 1-1: device descriptor read/8, error -71 [ 60.704757][ T435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.858077][ T906] usb 6-1: Using ep0 maxpacket: 8 [ 60.858167][ T435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.954485][ T435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.986420][ T15] usb 1-1: device descriptor read/8, error -71 [ 60.986462][ T906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 61.018384][ T906] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.032586][ T1322] usb 5-1: USB disconnect, device number 5 [ 61.082681][ T435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.096135][ T435] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 61.105808][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.121664][ T435] usb 2-1: config 0 descriptor?? [ 61.210983][ T906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.223385][ T906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.307935][ T906] usb 6-1: Product: syz [ 61.315260][ T906] usb 6-1: Manufacturer: syz [ 61.325293][ T906] usb 6-1: SerialNumber: syz [ 61.386688][ T898] usb 2-1: USB disconnect, device number 3 [ 61.585364][ T1372] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 61.959510][ T903] usbhid 7-1:0.0: can't add hid device: -71 [ 61.965873][ T903] usbhid: probe of 7-1:0.0 failed with error -71 [ 61.977943][ T903] usb 7-1: USB disconnect, device number 4 [ 62.076193][ T1406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 62.145091][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.194486][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.205335][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.212532][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.237197][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.244614][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.256835][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.283215][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.291255][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.298612][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.306384][ T1372] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 62.365594][ T903] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 62.380572][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.395733][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.405701][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.414027][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.423398][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.431022][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.438727][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.446356][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.475691][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.482983][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.518662][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.534981][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.548859][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.567116][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.587937][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.594615][ T1425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 62.600745][ T906] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 62.604797][ T1425] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.620667][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.628690][ T906] cdc_ncm 6-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 62.638621][ T903] usb 7-1: Using ep0 maxpacket: 16 [ 62.658253][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.681229][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.703830][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.725259][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.746840][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.768431][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.788093][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.808828][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.824220][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.832921][ T435] usb 6-1: USB disconnect, device number 6 [ 62.842206][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.843380][ T435] cdc_ncm 6-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 62.857448][ T903] usb 7-1: config 1 interface 0 has no altsetting 0 [ 62.869355][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.927572][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.966629][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.982686][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.985760][ T1436] bridge0: port 3(veth0) entered blocking state [ 62.996648][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 62.996926][ T1436] bridge0: port 3(veth0) entered disabled state [ 63.011537][ T1436] device veth0 entered promiscuous mode [ 63.018353][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.018373][ T1436] bridge0: port 3(veth0) entered blocking state [ 63.031834][ T1436] bridge0: port 3(veth0) entered forwarding state [ 63.037947][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.063087][ T903] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 63.081736][ T903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.089959][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.113921][ T903] usb 7-1: Product: 쿕皲瀸㗴ᚴ몒塲貔龇ᒠ䘹置䕃ծ穜≩ች䵽悷䣎跸쬽灓쩧⪖攁䩙縗྆했很ꯂ༪⸺沈䜵ꩇ㣁轊빫쳷ﱺ왇凜鉼⯻꣝鹀謪突肷⼏醥磭愋ᓴƐ鵯⚙箱烪莨姜ᙑﯙኑ몮炌艄䋸綰ꋋ琒凗胺켑䟂ႇڐ⤈᭡㥋笰䮢揳骠綐寑ប蛯ܻ뽱궡욹䠑愚脷⋜༥ᙅ䡂봕狂痉眉◎蟳 [ 63.149857][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.157860][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.158611][ T1443] 9pnet: Insufficient options for proto=fd [ 63.165112][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.165138][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.199334][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.206738][ T895] hid-generic 0000:0007:0009.0004: unknown main item tag 0x0 [ 63.214119][ T903] usb 7-1: Manufacturer: ݙ룻㐽餇౥﬉妣爃ా亃ご漐⼣⒧穡릝찍研Ⱑ䐧鞡⭛䝁웄ꢈٽ⺗곈壭功靈鷹䃣⼢몀쐰튣弮␰쨶⾩꽉늞炒膫焗省闻䎔⺧价晪冂氧፲鉶Օ哜鴬蔀迟㊫铞ဒȪ䚼쇈㴓鲝录谯ヮ⠴룚溔 [ 63.243289][ T1445] EXT4-fs (loop5): Test dummy encryption mode enabled [ 63.250593][ T1445] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 63.274939][ T895] hid-generic 0000:0007:0009.0004: hidraw0: HID vffffff.f7 Device [syz1] on syz0 [ 63.295687][ T903] usb 7-1: SerialNumber: Э [ 63.304705][ T906] ================================================================== [ 63.312618][ T906] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 63.320419][ T906] Read of size 8 at addr ffff888113056c68 by task kworker/1:58/906 [ 63.328215][ T906] [ 63.330422][ T906] CPU: 1 PID: 906 Comm: kworker/1:58 Tainted: G W 5.10.234-syzkaller-00157-ge0b88ee5f09c #0 [ 63.341586][ T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.351499][ T906] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 63.357814][ T906] Call Trace: [ 63.360956][ T906] dump_stack_lvl+0x1e2/0x24b [ 63.365454][ T906] ? printk+0xd1/0x111 [ 63.369356][ T906] ? bfq_pos_tree_add_move+0x43b/0x43b [ 63.374648][ T906] ? wake_up_klogd+0xb8/0xf0 [ 63.379080][ T906] ? panic+0x812/0x812 [ 63.382983][ T906] print_address_description+0x81/0x3b0 [ 63.388361][ T906] kasan_report+0x179/0x1c0 [ 63.392794][ T906] ? __list_del_entry_valid+0xa6/0x120 [ 63.398087][ T906] ? __list_del_entry_valid+0xa6/0x120 [ 63.403386][ T906] __asan_report_load8_noabort+0x14/0x20 [ 63.409067][ T906] __list_del_entry_valid+0xa6/0x120 [ 63.414167][ T906] process_one_work+0x43f/0xbd0 [ 63.418868][ T906] worker_thread+0xaea/0x1510 [ 63.423453][ T906] kthread+0x34b/0x3d0 [ 63.427639][ T906] ? worker_clr_flags+0x180/0x180 [ 63.432837][ T906] ? kthread_blkcg+0xd0/0xd0 [ 63.437541][ T906] ret_from_fork+0x1f/0x30 [ 63.441782][ T906] [ 63.443948][ T906] Allocated by task 906: [ 63.448042][ T906] ____kasan_kmalloc+0xdb/0x110 [ 63.452729][ T906] __kasan_kmalloc+0x9/0x10 [ 63.457061][ T906] __kmalloc+0x1aa/0x330 [ 63.461150][ T906] kvmalloc_node+0x82/0x130 [ 63.465486][ T906] alloc_netdev_mqs+0x8e/0xcd0 [ 63.470092][ T906] alloc_etherdev_mqs+0x33/0x40 [ 63.474774][ T906] usbnet_probe+0x1fc/0x28b0 [ 63.479196][ T906] usb_probe_interface+0x5b6/0xa90 [ 63.484147][ T906] really_probe+0x3eb/0xaf0 [ 63.488473][ T906] driver_probe_device+0xfd/0x260 [ 63.493339][ T906] __device_attach_driver+0x29b/0x410 [ 63.498853][ T906] bus_for_each_drv+0x183/0x200 [ 63.503518][ T906] __device_attach+0x30a/0x500 [ 63.508291][ T906] device_initial_probe+0x1a/0x20 [ 63.513265][ T906] bus_probe_device+0xbe/0x1e0 [ 63.517957][ T906] device_add+0x889/0xbc0 [ 63.522440][ T906] usb_set_configuration+0x19a5/0x1f30 [ 63.528957][ T906] usb_generic_driver_probe+0x8b/0x150 [ 63.534330][ T906] usb_probe_device+0x144/0x260 [ 63.539002][ T906] really_probe+0x3eb/0xaf0 [ 63.543342][ T906] driver_probe_device+0xfd/0x260 [ 63.548300][ T906] __device_attach_driver+0x29b/0x410 [ 63.553515][ T906] bus_for_each_drv+0x183/0x200 [ 63.558305][ T906] __device_attach+0x30a/0x500 [ 63.563085][ T906] device_initial_probe+0x1a/0x20 [ 63.567928][ T906] bus_probe_device+0xbe/0x1e0 [ 63.572530][ T906] device_add+0x889/0xbc0 [ 63.576786][ T906] usb_new_device+0xbbc/0x1760 [ 63.581477][ T906] hub_event+0x2d3b/0x47c0 [ 63.585899][ T906] process_one_work+0x6dc/0xbd0 [ 63.590578][ T906] worker_thread+0xaea/0x1510 [ 63.595172][ T906] kthread+0x34b/0x3d0 [ 63.599112][ T906] ret_from_fork+0x1f/0x30 [ 63.603333][ T906] [ 63.605507][ T906] Freed by task 435: [ 63.609254][ T906] kasan_set_track+0x4b/0x70 [ 63.614550][ T906] kasan_set_free_info+0x23/0x40 [ 63.619512][ T906] ____kasan_slab_free+0x121/0x160 [ 63.624523][ T906] __kasan_slab_free+0x11/0x20 [ 63.629118][ T906] slab_free_freelist_hook+0xc0/0x190 [ 63.634324][ T906] kfree+0xc3/0x270 [ 63.638165][ T906] kvfree+0x35/0x40 [ 63.642243][ T906] netdev_freemem+0x3f/0x60 [ 63.646576][ T906] netdev_release+0x7f/0xb0 [ 63.651000][ T906] device_release+0x95/0x1c0 [ 63.655504][ T906] kobject_put+0x178/0x260 [ 63.659752][ T906] put_device+0x1f/0x30 [ 63.663743][ T906] free_netdev+0x384/0x470 [ 63.668113][ T906] usbnet_disconnect+0x242/0x3a0 [ 63.673006][ T906] usb_unbind_interface+0x1fa/0x8c0 [ 63.678290][ T906] device_release_driver_internal+0x506/0x7c0 [ 63.684276][ T906] device_release_driver+0x19/0x20 [ 63.689229][ T906] bus_remove_device+0x2f8/0x360 [ 63.693998][ T906] device_del+0x68b/0xf00 [ 63.698163][ T906] usb_disable_device+0x380/0x720 [ 63.703029][ T906] usb_disconnect+0x32a/0x890 [ 63.707541][ T906] hub_event+0x1e73/0x47c0 [ 63.711793][ T906] process_one_work+0x6dc/0xbd0 [ 63.716478][ T906] worker_thread+0xaea/0x1510 [ 63.721041][ T906] kthread+0x34b/0x3d0 [ 63.724908][ T906] ret_from_fork+0x1f/0x30 [ 63.729338][ T906] [ 63.731500][ T906] Last potentially related work creation: [ 63.737063][ T906] kasan_save_stack+0x3b/0x60 [ 63.741571][ T906] __kasan_record_aux_stack+0xd3/0x100 [ 63.746868][ T906] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.752507][ T906] insert_work+0x56/0x310 [ 63.756779][ T906] __queue_work+0x970/0xd10 [ 63.761121][ T906] queue_work_on+0x105/0x160 [ 63.765548][ T906] usbnet_link_change+0xeb/0x100 [ 63.770499][ T906] usbnet_probe+0x1e1a/0x28b0 [ 63.774973][ T906] usb_probe_interface+0x5b6/0xa90 [ 63.779927][ T906] really_probe+0x3eb/0xaf0 [ 63.784273][ T906] driver_probe_device+0xfd/0x260 [ 63.789214][ T906] __device_attach_driver+0x29b/0x410 [ 63.794499][ T906] bus_for_each_drv+0x183/0x200 [ 63.799477][ T906] __device_attach+0x30a/0x500 [ 63.804084][ T906] device_initial_probe+0x1a/0x20 [ 63.808940][ T906] bus_probe_device+0xbe/0x1e0 [ 63.813615][ T906] device_add+0x889/0xbc0 [ 63.818069][ T906] usb_set_configuration+0x19a5/0x1f30 [ 63.823342][ T906] usb_generic_driver_probe+0x8b/0x150 [ 63.828644][ T906] usb_probe_device+0x144/0x260 [ 63.833322][ T906] really_probe+0x3eb/0xaf0 [ 63.837659][ T906] driver_probe_device+0xfd/0x260 [ 63.842518][ T906] __device_attach_driver+0x29b/0x410 [ 63.847724][ T906] bus_for_each_drv+0x183/0x200 [ 63.852413][ T906] __device_attach+0x30a/0x500 [ 63.857013][ T906] device_initial_probe+0x1a/0x20 [ 63.861871][ T906] bus_probe_device+0xbe/0x1e0 [ 63.866564][ T906] device_add+0x889/0xbc0 [ 63.870736][ T906] usb_new_device+0xbbc/0x1760 [ 63.875344][ T906] hub_event+0x2d3b/0x47c0 [ 63.879591][ T906] process_one_work+0x6dc/0xbd0 [ 63.884283][ T906] worker_thread+0xaea/0x1510 [ 63.888796][ T906] kthread+0x34b/0x3d0 [ 63.892692][ T906] ret_from_fork+0x1f/0x30 [ 63.896954][ T906] [ 63.899125][ T906] The buggy address belongs to the object at ffff888113056000 [ 63.899125][ T906] which belongs to the cache kmalloc-4k of size 4096 [ 63.913181][ T906] The buggy address is located 3176 bytes inside of [ 63.913181][ T906] 4096-byte region [ffff888113056000, ffff888113057000) [ 63.926452][ T906] The buggy address belongs to the page: [ 63.931929][ T906] page:ffffea00044c1400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113050 [ 63.942083][ T906] head:ffffea00044c1400 order:3 compound_mapcount:0 compound_pincount:0 [ 63.950336][ T906] flags: 0x4000000000010200(slab|head) [ 63.955627][ T906] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 63.964164][ T906] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 63.972631][ T906] page dumped because: kasan: bad access detected [ 63.979056][ T906] page_owner tracks the page as allocated [ 63.984618][ T906] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 420, ts 26398923587, free_ts 26376807577 [ 64.005118][ T906] prep_new_page+0x166/0x180 [ 64.009523][ T906] get_page_from_freelist+0x2d8c/0x2f30 [ 64.014913][ T906] __alloc_pages_nodemask+0x435/0xaf0 [ 64.020138][ T906] new_slab+0x80/0x400 [ 64.024014][ T906] ___slab_alloc+0x302/0x4b0 [ 64.028439][ T906] __slab_alloc+0x63/0xa0 [ 64.032614][ T906] __kmalloc+0x204/0x330 [ 64.036701][ T906] kernfs_fop_read_iter+0x15b/0x470 [ 64.041739][ T906] vfs_read+0x990/0xba0 [ 64.045724][ T906] ksys_read+0x199/0x2c0 [ 64.049935][ T906] __x64_sys_read+0x7b/0x90 [ 64.054243][ T906] do_syscall_64+0x34/0x70 [ 64.058764][ T906] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 64.064483][ T906] page last free stack trace: [ 64.069084][ T906] __free_pages_ok+0x82c/0x850 [ 64.073678][ T906] free_the_page+0x76/0x370 [ 64.078105][ T906] __free_pages+0x67/0xc0 [ 64.082269][ T906] __free_slab+0xcf/0x190 [ 64.086523][ T906] discard_slab+0x29/0x40 [ 64.090698][ T906] __slab_free+0x30d/0x3a0 [ 64.094940][ T906] ___cache_free+0x111/0x130 [ 64.099366][ T906] qlink_free+0x50/0x90 [ 64.103359][ T906] qlist_free_all+0x47/0xb0 [ 64.107802][ T906] kasan_quarantine_reduce+0x15a/0x170 [ 64.113322][ T906] __kasan_slab_alloc+0x2f/0xe0 [ 64.117999][ T906] slab_post_alloc_hook+0x61/0x2f0 [ 64.122945][ T906] kmem_cache_alloc+0x168/0x2e0 [ 64.127822][ T906] getname_flags+0xba/0x520 [ 64.132241][ T906] getname+0x19/0x20 [ 64.136142][ T906] do_sys_openat2+0xd7/0x710 [ 64.140738][ T906] [ 64.142908][ T906] Memory state around the buggy address: [ 64.148703][ T906] ffff888113056b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.156755][ T906] ffff888113056b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.164958][ T906] >ffff888113056c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.172906][ T906] ^ [ 64.180808][ T906] ffff888113056c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.188713][ T906] ffff888113056d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.196595][ T906] ================================================================== [ 64.204482][ T906] Disabling lock debugging due to kernel taint [ 64.217512][ T903] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 64.226203][ T903] usb 7-1: no configuration chosen from 1 choice [ 64.370792][ T1445] FAT-fs (loop5): Unrecognized mount option " }Wy/:ID3WoWDܾ5~̭lkdOj?}1TR]im1yd`5 ߷bGkIf" or missing value [ 65.159010][ T906] usb 7-1: USB disconnect, device number 5