last executing test programs: 8.784492647s ago: executing program 0 (id=56): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="ddb993442266cb64873823b5948532cae3f8c8b1316ab25b459eacabbfc5d5139d252a74c66b87aad8238bf0e2f23b5fe74030804dcb92cd"], 0x1, 0x295, &(0x7f0000000380)="$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") writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b", 0xb}], 0x1) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000080000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d4448d49850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x6, 0x0, &(0x7f00000002c0)="d2ff03076003", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x8000000010, 0x2, 0x0) dup(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) write(r4, &(0x7f00000002c0)="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", 0xfc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="2af2a31c95f41993cebe07009bdcce36635a1356028dd42e2a47f0b7251e7b81d35e9fdb424be9ee61abc5fc3758f0782609fa265e8c613cf63d9a5d262f017745bc39b4d593f9128785131bb083abb303c9982b78d0d59b326057245b6e5e9dea1c85d7e930e7b72c896b0c8825ff9b5134f088ded9935de64e2cc2d84725e4b9c335a77f0c36f88008adb77a2d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.623394182s ago: executing program 4 (id=58): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000020000040b118370000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) (async) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200)={0xa000000a}) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) (async) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 8.585515037s ago: executing program 0 (id=60): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) read$FUSE(r2, &(0x7f000000d080)={0x2020}, 0xff82) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1264"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) write$UHID_INPUT2(r3, &(0x7f0000004240)=ANY=[], 0x1001) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.696089462s ago: executing program 4 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 5.582288141s ago: executing program 3 (id=73): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xd, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 5.545744145s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb002000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200"/81], 0xfc}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) 5.409863558s ago: executing program 2 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000f000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 5.170628562s ago: executing program 0 (id=77): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000040)="7bca993012f68d97a4983c1af3402690192ada96c3a74936", 0x0, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x28, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x10400, 0x43950}, [@IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x2}]) 4.255275722s ago: executing program 1 (id=79): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020008000000010000ff076c66ce9eb45a5ad300", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="180800003f000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff741b00000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000005000000b700000000000000950000000000000030e539ca8a39c08bb8945607c0c4f1879f5a5fb79393ac89cd3c4074f23b1bbf11a1e802f4ce862e607ce28dba77432b41c45d0e55f90f3ed941916b33d643bc115b6b7ff82a40819a18a95ac26c073b04103021d0852955f78b2219f63f2fdba0bbc9e83019074bc63e7968e1ba5fda7b1c719c4b91860c12c056164c225de147ef0f19968e9d87b897acc45b9f326a84e9f15d476271b87ec310bf91ee43bd74335e20e8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) (async) r2 = getpid() accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x3, 0x4002) (async) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400b59500000000000000000a100000", @ANYRES32=r9, @ANYBLOB="14000200000000000000000b1000ffff0000000014000100fe8000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.238510133s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_kthread_stop_ret\x00', r2}, 0x18) r3 = signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000700000000b85ad67d1490092e8f80bede088f08e8514afa6dcfe768ad866cad78fc2b89be8a1c172521f30dc28849d1b42b7d2e5098b0fd85119eda4d81a392d446775f1d828439331d584380b765ced9c2c81ecec279aaa556b1de92f877dcbf67d4d8b149dd1b650a0b9d500c606bb4daed12445cccac33aa255383804a73c5bfb99cc163d696048a08be4a30b219159d8cfdefa8000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x3c, &(0x7f00000001c0)=""/60, 0x41100, 0x11, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x1, 0x2, 0xf2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) geteuid() r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r10, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) 4.046629782s ago: executing program 3 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x20000047, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe65) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x3810380, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x21c, 0x0, @loopback, @loopback, 0x700}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x70bd26, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0x4, 0xfff8}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000800100001042cbd7000fbdbdf2500000000997a72cd08748cd745b6f7b4ae7be36238efc1cf81af6d54823418c2978aa8e8adb00453f7157d8e41ff", @ANYRES32=r9, @ANYBLOB="1000000014310000280012800b000100697036746e6c00001800028014000200fc020000000000000000000000000001"], 0x48}}, 0x4000) 4.046142662s ago: executing program 0 (id=82): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x8}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}, {{&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000640)=""/187, 0xbb}], 0x6, &(0x7f0000000780)=""/42, 0x2a}, 0xffff}], 0x2, 0x40, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYRESOCT=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(r1, &(0x7f00000004c0), 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000047f4d60000850000000300000085000000d00000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 3.277713358s ago: executing program 1 (id=83): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x2}, 0x8) 2.774909097s ago: executing program 4 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xd, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 2.676534157s ago: executing program 4 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ae, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x12) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000053099dbe1eed7d5db71810a7666164f3a4898e4c4f8503ec15b40dee9706"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r10}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.620440632s ago: executing program 0 (id=86): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000040)=@framed={{}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @exit, @exit, @jmp={0x5, 0x1, 0x8, 0x9, 0x8, 0x10, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x5c, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x32, 0x1, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r2, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) 2.550513709s ago: executing program 0 (id=87): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', r4, 0x4, 0x1, 0x4, 0x2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x10, 0x1, 0x6}}) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x66, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYRES8=r2, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="41000000000000001c0012800b0001006d616373656300000c00028005000f000000000008000500", @ANYRES32=r8, @ANYBLOB="7d6477d4ad16e81d86191ae46379f557afabcc688bb8e6de973c28a9811e1d669c030c7a7695390a8d3c6ea841a9522991f3816d573c5e1eb35cdc0deb279b0d7b7dd289d3e84dd853c996094ead0d6249104da394839f"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 2.419462382s ago: executing program 3 (id=88): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') (async) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000180)='./file1\x00', 0x2008000, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x2, 0x1502, &(0x7f0000002ec0)="$eJzs3QuYjtXaOPB1r7UexjTxJjkM6173w5sGyyRJDklySJIkSXJKSJokSUgMOSUhCTlOksMQksPEpHE+H3I+NdmSJMkpp7D+19Ru2/vr+y57//f+Pvvac/+ua13vuq/13OtZ672Z93meaw4/dBlWs3Gtag2JSPxT4LeXZCFEjBBioBAijxAiEEKUy1sub9Z4LgXJ/9xJ2L/W46nXewXseuL6Z29c/+yN65+9cf2zN65/9sb1z964/tkb15+x7GzLjEI3ccu+7Z9//h/z2ws///93EvP3Hcaf/9kb1/8/zZlc/8jRXP//JFe89/9YBtc/e+P6Z29c/+yN65+9cf2zN64/Y9nZ9X7+zO36tuv9748xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw3l+lhRC/96/3uhhjjDHGGGOMMfav43Ne7xUwxhhjjDHGGGPsfx8IKZTQIhA5RE4RI3KJWHGDiBM3itwij4iIm0RecbPIJ24R+UUBUVAUEvGisCgijEBhBYlQFBXFRFTcKoqL20SCKCFKilLCidIiUdwuyog7RFlxpygn7hLlxd2igqgoKonK4h5RRdwrqor7RDVxv6guaoiaopZ4QNQWD4o64iFRVzws6olHRH3xqGggHhMNxeOikXhCNBZPiibiKdFUNBPNRQvR8v8r/zXRQ7wueopeIln0Fn3EG6Kv6Cf6iwFioHhTDBJvicHibTFEDBXDxDtiuHhXjBDviZFilBgt3hdjxFgxTowXE8REkSI+EJPEh2Ky+EhMEVPFNDFdpIoZYqb4WMwSs8Uc8YmYKz4V88R8sUAsFGniM7FILBbp4nOxRHwhMsRSsUwsFyvESrFKrBZrxFqxTqwXG8RGsUlsFlvEl2Kr2Ca2ix1ip9gldos9Yq/YJ/aLr0Sm+PofzD/3X/K7ggABEiRo0JADckAMxEAsxEIcxEFuyA0RiEBeyAv5IB/kh/xQEApCPMRDESgCCAgEBEWhKEQhCsWhOCRAApSEkuDAQSIkQhm4A8pCWSgH5aA8lIcKUBEqQmWoDFWgClSFqlANqkF1qA41oSY8AA/Ag1AH6kBdqAv1oB7Uh/rQABpAQ2gIjaARNIbG0ASaQFNoCs2hObSEltAKWkFraA1toS20g3bQHtpDEiRBB+gAHaEjdIJO0Bk6QxfoAl2hG3SD1+A1eB1eh15QXfaGPtAH+kJf6A8DYAC8CYPgLXgL3oYhMBSGwTvwDrwLI+AsjIRRMBpGQxU5FsbBeCA5EVIgBSbBJJgMk2EKTIWpMB1SYQbMhJkwC2bDbPgE5sKn8CnMh/mwENIgDRbBYkiHdFgC5yADlsIyWA4rYCWsgNWwBlbDOlgP62AjbITNsBm+hC9hG2yDHbADdsEu2AN7YB/sgyGQCZlwAA7AQTgIh+AQHIbDcASOwFE4CsfgGByH43ACTsIpOAln4AychXNwHs7DRbgIl+ASXIErWf/5ZRYttcwhc8gYGSNjZayMk3Eyt8wtIzIi88q8Mp/MJ/PL/LKgLCjjZbwsIotIlChJhrKoLCqjMiqLy+IyQSbIkrKkdNLJRJkoy8gysqwsK8vJu2R5ebesICvKNq6yrCyryLauqrxPVpPVZHVZQ9aUtWQtWVvWlnVkHVlX1pX1ZD1ZXz4qG8je0B8el1mVaSyHQhM5DJrKZrK5bCHfhadlKzkCWss2sq18Vo6CkdBetnJJ8gXZQY6DjvIlOR5elp3lROgiX5VdZTfZXb4me8jWrqfsJadAb9lHToe+sp/sLwfIWVBDZlWspnxbDpFD5TD5jlwI78oR8j05Uo6So+X7cowcK8fJ8XKCnChT5AdykvxQTpYfySlyqpwmp8tUOUPOlB/LWXK2nCM/kXPlp3KenC8XyIUyTX4mF8nFMl1+LpfIL2SGXCqXyeVyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi/xSbpXb5Ha5Q+6Uu+RuuUfulfvkfvmVzJRfywPyT/Kg/EYekt/Kw/I7eUR+L4/KH+Qx+aM8Ln+SJ+RJeUqelmfkz/KsPCfPywvyovxFXpKX5RXppVCgpFJKq0DlUDlVjMqlYtUNKk7dqHKrPCqiblJ51c0qn7pF5VcFVEFVSMWrwqqIMgqVVaRCVVQVU1F1qyqublMJqoQqqUopp0qrRHW7KqPuUGXVnaqcukuVV3erCqqiqqQqq3tUFXWvqqruU9XU/aq6qqFqqlrqAVVbPajqqIdUXfWwqqceUfXVo6qBekw1VI+rRuoJ1Vg9qZqop1RT1Uw1Vy1US/W0aqWeUa1VG9VWPavaqedUe/W8SlIvqA7qRdVRvaQ6qZdVZ/WK6qJeVV1VN9VdXVZXlFc9VS+VrHqrPuoN1Vf1U/3VADVQvakGqbfUYPW2GqKGqmHqHTVcvatGqPfUSDVKjVbvqzFqrBqnxqsJaqJKUR+oSepDNVl9pKaoqWqamq5S1QzV/88zzfk78j/Myo/8bf7gX8++WW1RX6qtapvarnaonWqX2q12q71qr9qv9qtMlakOqAPqoDqoDqlD6rA6rI6oI+qoOqqOqWPquDquTqiT6oI6rc6on9VZdU6dUxfURXVRXfrzeyA0aKmV1jrQOXROHaNz6Vh9g47TN+rcOo+O6Jt0Xn2zzqdv0fl1AV1QF9LxurAuoo1GbTXpUBfVxXRU36qL69t0gi6hS+pS2unSOlHf/k/nX2t9LXVL3Uq30q11a91Wt9XtdDvdXrfXSTpJd9AddEfdUXfSnXRn3Vl30V10V91Vd9fddQ/dQ3shRLJO1n30G7qv7qf76wF6oH5TD9KD9GA9WA/RQ/QwPUwP18P1CD1Cj9Qj9Wg9Wo/RY/Q4PU5P0BN0ik7Rk/QkPVlP1lP0FD1NT9OpOlXP1DP1LD1Lz9Fz9Fw9V8/T8/QCvUCn6TS9SC/S6TpdL9FLdIZeqpfq5Xq5XqlX6tV6tV6r1+r1er3eqDfqDP37N2hu19v1Tr1T79a79V69V+/X+3WmztQH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfUqf0mf0GX1Wn9Xn9Xl9UV/Ul/QlfUVfybrsC2QgAx3oIEeQI4gJYoLYIDaIC+KC3EHuIBJEgrxB3iBfcEuQPygQFAwKBfFB4aBIYAIMbEBBGBQNigXR4NageHBbkBCUCEoGpQIXlA4Sg9uDMsEdQdngzqBccFdQPrg7qBBUDCoFlYN7girBvUHV4L6gWnB/UD2oEdQMagUPBLWDB4M6wUNB3eDhoF7wSFA/eDRoEDwWNAweDxoFTwSNgyeDJsFTQdOgWdA8aBG0/JfO7/3ZAs+4nqaXSTa9TR/zhulr+pn+ZoAZaN40g8xbZrB52wwxQ80w844Zbt41I8x7ZqQZZUab980YM9aMM+PNBDPRpJgPzCTzoZlsPjJTzFQzzUw3qWaGmWk+NrPMbDPHfGLmmk/NPDPfLDALTZr5zCwyi026+dwsMV+YDLPULDPLzQqz0qwyq80as9asM+vNBrPRbDKbzRbzpdlqtpntZofZaXaZ3WaP2Wv2mf3mK5NpvjYHzJ/MQfONOWS+NYfNd+aI+d4cNT+YY+ZHc9z8ZE6Yk+aUOW3OmJ/NWXPOnDcXzEXzi7lkLpsrxmdd3Gd9vKNGjTkwB8ZgDMZiLMZhHObG3BjBCObFvJgP82F+zI8FsSDGYzwWwSKYhZCwKBbFKEaxOBbHBEzAklgSHTpMxEQsg2WwLJbFclgOy2N5rIAVsBJm3Y/cg/fivXgf3of34/1YA2tgLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2IjbISNsTE2wSbYFJtic2yOLbEltsJW2BpbY1tsi+2wHbbH9piESdgBO2BH7IidsBN2xs7YBbtgV+yK3bE79sAe2BN7YjImYx/sg32xL/bH/jgQB+IgHISDcTAOwSE4DIfhcByOI3AEjsRROBrfxzE4FsfheJyAEzEFU3ASTsLJOBmn4BSchtMwFVNxJs7EWTgL5+AcnItzcR7OwwW4ANMwDRfhIkzHdFyCSzADM3AZLsMVuAJX4Spcg2twHa7DDbgBN+Em3IJbcCtuxe24HXfiTtyNu3Ev7sX9uB8zMRMP4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTiFp/AMnsGzeBbP43m8iL/gJbyMV9BjjM1lY+0NNs7eaHPbPDbG5uolhPhLXNAWsvG2sC1ijc1vC/xNjNbaBFvClrSlrLOlbaK9/Q9xBVvRVrKV7T22ir3XVv1DXNs+aOvYh2xd+7CtZR/4m7iefcTWt0/aBvYp29A2s41sC9vYPmmb2KdsU9vMNrctbDv7nG1vn7dJ9gXbwb74h3iRXWzX2LV2nV1v99p99ry9YI/aH+xF+4vtaXvZgfZNO8i+ZQfbt+0QO/QP8Wj7vh1jx9pxdrydYCf+IZ5mp9tUO8POtB/bWXb2H+I0+5mda9PtPDvfLrALf42z1pRuP7dL7Bc2wy61y+xyu8KutKvs6r+sdbndaDfZzXa33WO32m12u91hd9pdv8ZZ+9hvv7KZ9mt7xH5vD9pv7CF7zB623/0aZ+3vmP3RHrc/2RP2pD1lT9sz9md71p77df9Zez9tL9sr1ltBQJIUaQooB+WkGMpFsXQDxdGNlJvyUIRuorx0M+WjWyg/FaCCVIjiqTAVIUNIlohCKkrFKEq3UnG6jRKoBJWkUuSoNCXS7VSG7qCydCeVo7uoPN1NFagiVaLKdA9VoXupKt1H1eh+qk41qCbVogeoNj1IdeghqksPUz16hOrTo9SAHqOG9Dg1oieoMT1JTegpakrNqDm1oJb0NLWiZ6g1taG29Cy1o+eoPT1PSfQCdaAXqSO9RJ3oZepMr1AXepW6UjfqTq9RD3qdelIvSqbe1IfeoL7Uj/rTABpIb9IgeosG09s0hIbSMHqHhtO7NILeo5E0ikbT+zSGxtI4Gk8TaCKl0Ac0iT6kyfQRTaGpNI2mUyrNoJn0Mc2i2TSHPqG59CnNo/m0gBZSGn1Gi2gxpdPntIS+oAxaSstoOa2glbSKVtMaWkvraD1toI20iTbTFvqSttI22k47aCftot20h/bSPtpPX1EmfU0H6E90kL6hQ/QtHabv6Ah9T0fpBzpGP9Jx+olO0Ek6RafpDP1MZ+kcnacLdJF+oUt0ma6QJxFCKEMV6jAIc4Q5w5gwVxgb3hDGhTeGucM8YSS8CYQQYb7wljB/WCAsGBYK48PCYZHQhBjakMIwLBoWC6PhrWHx8LYwISwRlgxLhS4sHSaGt4dlwjvCsuGdYbnwrrB8eHdYIawYVgorh/eEVcJ7w6rhfWG18P6welgjrBnWCh8Ia4cPhnXCh8K64cNh2fCRsH74aNggfCxsGD4eNgqfCBuHT4ZNwqfCpmGzsHnYImwZPh22Cp8JW4dtwrbhs2G78Lmwffh8mBS+EHYIX7zmeHLYO+wTvhG+EXr/kFoQXRhNi34WXRRdHE2Pfh5dEv0imhFdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3Rz1vlZO4cBJp5x2gcvhcroYl8vFuhtcnLvR5XZ5XMTd5PK6m10+d4vL7wq4gq6Qi3eFXRFnHDrryIWuqCvmou5WV9zd5hJcCVfSlXLOlXaJroVr6Vq6Vu4Z19q1cW3ds+5Z95x7zj3vnncvuA7uRdfRveQ6uZddZ/eKe8W96rq6bq67e831cK+7nq6XS3bJro/r4/q6vq6/6+8GuoFukBvkBrvBbogb4oa5YW64G+5GuBFupBvpRrvRbowb48a5cW6Cm+BSXIqb5Ca5yW6ym+KmuGlumkt1qW6mm+lmuVlujpvj5rq5bp6b5xa4BS7NpblFbpFLd+luiVviMlyGW+aWuRVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vqtrrtbrvb6Xa63W632+v2uv1uv8t0me6AO+AOuoPukPvWHXbfuSPue3fU/eCOuR/dcfeTO+FOulPutDvjfnZn3Tl33l1wF90v7pK77K4471IiH0QmRT6MTI58FJkSmRqZFpkeSY3MiMyMfByZFZkdmRP5JDI38mlkXmR+ZEFkYSQt8llkUWRxJD3yeWRJ5ItIRmRpZFlkeWRFZGXE+8JbQ1/UF/NRf6sv7m/zCb6EL+lLeedL+0R/uy/j7/Bl/Z2+nL/Ll/d3+wq+oq/kn/JNfTPf3LfwLf3TvpV/xrf2bXxb/6xv55/z7f3zPsm/4Dv4F31H/5Lv5F/2nf0rvot/1Xf13Xx3/5rv4V/3PX0vn+x7+z7+Dd/X9/P9/QA/0L/pB/m3/GD/th/ih/ph/h0/3L/rR/j3/Eg/yo/27/sxfqwf58f7CX6iT/Ef+En+Qz/Zf+Sn+Kl+mp/uU/0MP9N/7Gf52X6O/8TP9Z/6eX6+X+AX+jT/mV/kF/t0/7lf4r/wGX6pX+aX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y3+S7/Vb/Pb/Q6/0+/yu/0ev9fv8/v9Vz7Tf+0P+D/5g/4bf8h/6w/77/wR/70/6n/wx/yP/rj/yZ/wJ/0pf9qf8T/7s/6cP+8v+Iv+F3/JX/ZX+GfWGGOMMcb+Luoa473/hxz5534fIcSN2wod/q/jG/L/1u8XF98uIoR4oVeXx39v1asnJyf/+dgMJYJi84UQkav5OcTVeKloK54TSaKNKPOX8Zi/Olc/2e0iXWP+6F1CxP5VTlb+7/HV+e/4b/ffT46de8355wuRUOxqTi5xNb46f9n/Yf4Cra4xf65vUoRo/Vc5ceJqfHX+RPGMeFEk/c2RjDHGGGOMMcbYb/rJSp2udX+bdX8er6/m5BRX4//u/pwxxhhjjDHGGGP/Xl7u1v35p5OS2nTizv9Wx+f57a3+d1kPd7jzd3Su91cmxhhjjDHG2L/a1Yv+670SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs+/q/+HViv5/rWn9rkDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGPtP9f8CAAD//6CiOsY=") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(r1, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) (async) listen(r3, 0xffffffff) (async) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$inet6(0xa, 0x4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000da00", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678", 0x3, r5, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r5}, 0x38) (async) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002d2f36ad36d25321290000000b000000d86c000000000000"], 0x18}}], 0x1, 0x0) (async) gettid() (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) (async) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.418380892s ago: executing program 1 (id=89): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) close(r3) socket(0x10, 0x3, 0x0) 2.412173433s ago: executing program 3 (id=90): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x35d5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4080090}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r7 = inotify_init() r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) close_range(r7, 0xffffffffffffffff, 0x0) 2.017365492s ago: executing program 4 (id=91): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)=""/56) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x588, 0x2a, 0xd27, 0x81ffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x558, 0x2, [@TCA_ROUTE4_ACT={0x544, 0x6, [@m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5a48}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc05, 0x8, 0x0, 0xfffeffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x168, 0x13, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0xa, 0x9}}, @TCA_DEF_DATA={0x1a, 0x3, 'freezer.self_freezing\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'gid_map\x00'}, @TCA_DEF_DATA={0x19, 0x3, '/.$&&!+]x-.}\x1f[{@%,{)\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x4, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x7, 0x4, 0x5, 0x401}}]}, {0xa5, 0x6, "c5a7bbf0c26ddfc0e4046129d264ff4e9794a78a57520848f23e6c7db37349d269fcc0b925b9cd5aae2f28ee8bc9bd2a7afe9098d37dda57d4afecb44115c70cb5ec08f98c29355c37b0c46b5e030f173ea4e1504bdfaac0ccc16b0f55cdc3c7369fd11cf4044f37814dd77e1580a3be3be8e43477cca18e70922b7365473676b25012c743fe5db16c0ce373a1036aa2aac69f5518fc14f43ec33bb8090f9ab697"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xf8, 0x3, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x949, 0x2400000, 0x7, 0x0, 0x9}}]}, {0x89, 0x6, "c72f5c151f01c116ba0e9ee482d6806b8319e5ed0128eb47de3cf09d6b080fcad8ba048d5a686351449c19cf7405bbc1495541d5f830db0097a483cfa8d1dcd036c14f5944c3b73e754b8991a55cec2b865ec1027ac49fbcaf713333b9b89895a626412b1050490b4322337098ef84f7c9caa096c729c52689237ea323ea1daec5fe9960b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x7c, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x30000005, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x87b, 0x0, 0x7, 0x4}}]}, {0x7, 0x6, "c4501a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbedit={0x58, 0x5, 0x0, 0x0, {{0xc}, {0x4}, {0x2a, 0x6, "12a2c9349328f62deb0305502c8ad8a2fdf6bf91c28ccf3863cdb6433dd218dccb5b10fea4e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x14c, 0xb, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x674f}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x80000001, 0x7, 0x67457525, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3e4e}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x1000, 0x72}}]}, {0xbd, 0x6, "5b5a75805ca875bd2f5af73c262d528535f0385511ee47bdc22a57c9607cb10696722979fd65f7594f78bec641958948951ad96685e84f4ce6cdfc7c1d87a0eec8b82dbcb369c57104c39f73efab0e9a0c65057e11b79d4f9bdbbf2b8683aa916caef2f534cf6846bafe0588f3aeed621bf672ea467f15dae3fec1ac1ba2ab8f4751c41f9160866e9c6aac0e9142f1b9b8085c21a98d147ae7ec831415938393bdb33ecc59dd3cc1a7106ed8fc0fa3dc978f63f30cb1eef2c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x3c, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a1e, 0x10000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xff}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) 1.61993029s ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x5f) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.12224826s ago: executing program 2 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.11459521s ago: executing program 1 (id=94): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfffffffffffff1b3}}, {@auto_da_alloc}, {@lazytime}, {@bsdgroups}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x289}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe24) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES8=r4, @ANYRESOCT, @ANYRES32, @ANYRES32=r2, @ANYBLOB="62a2f01c3196883ef445e27399785fbb223c76d7f8a88b0724ebceee83c0d1b1ff77d505f6c5bdde58b939299401d5160579ba8d715245649bcfd510221b20590304eca4181f4be663e623d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0x2, 0x1, 0xffffffff, 0x3, 0x86ac8}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 207.863789ms ago: executing program 1 (id=95): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 184.240731ms ago: executing program 2 (id=96): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001000010100000000fedbdf250700000008000000060000080c00e88008003100", @ANYRES32=r0, @ANYRES64=r0], 0x28}}, 0x8880) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095", @ANYRESOCT=r0], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r6, 0x0, 0xa8d}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800290000000001000000000000000071103b000000a61c219b27b8b5e48599f6ab1dd200e0950042f4000006c0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000d88776d9801b"], 0x48) (async) r9 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x31) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x23, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000073457516c9c500000000000000000000000018120000", @ANYRES32=r8, @ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc4457921e869f9ff, 0x0) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000000040)=0x1) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000200025a7fffffffffddbdf250a0000cdff00000102000101000100004e234e23"], 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async) r13 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) 96.75237ms ago: executing program 2 (id=97): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4feff00000000000000f2ff00"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 93.468621ms ago: executing program 2 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000240)=0xfb6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000022000000000000000000000000cc96552758391cb0ca6fe865e91c4da813d0a62ab04300af0c71c01c7f790aa550651cd10c257c7e564dd0c675964ab0399fa1a7d8c95674a5bdf36bb6edb88a29ace0c35694776775af65e1aa6dd9d0c6117430f5ad9ecdeb109126e24f69f18d629860e383", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000240), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r6, 0x601, 0x40, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0x22, 0x0, &(0x7f0000000280)="a979d76acc8b1ad4c8007b5b08001f9ee8ce7e7d8b3a24f037e8c1b0ab71dcb9f26d", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) write$selinux_attr(r7, &(0x7f0000000300)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31) (async) close(r2) inotify_init1(0x800) (async) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x800) 10.415538ms ago: executing program 2 (id=99): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 0s ago: executing program 4 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000940)=[@rthdr={{0x18, 0x29, 0x39, {0x6, 0x0, 0x2, 0x6}}}], 0x18}}], 0x1, 0x4c0c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = accept4(r1, &(0x7f0000000740)=@qipcrtr, &(0x7f0000000500)=0x80, 0x0) connect$can_bcm(r6, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x3) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0359672dd80da35ca63a8d4c124000000100"/28], 0x48) r7 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 21.290489][ T28] audit: type=1400 audit(1761458900.897:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.292136][ T275] cgroup: Unknown subsys name 'net' [ 21.313207][ T28] audit: type=1400 audit(1761458900.897:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.341414][ T28] audit: type=1400 audit(1761458900.947:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.341547][ T275] cgroup: Unknown subsys name 'devices' [ 21.485230][ T275] cgroup: Unknown subsys name 'hugetlb' [ 21.490885][ T275] cgroup: Unknown subsys name 'rlimit' [ 21.596718][ T28] audit: type=1400 audit(1761458901.207:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.620115][ T28] audit: type=1400 audit(1761458901.207:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.635772][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.645127][ T28] audit: type=1400 audit(1761458901.207:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.676570][ T28] audit: type=1400 audit(1761458901.267:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.693964][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.702045][ T28] audit: type=1400 audit(1761458901.267:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.736355][ T28] audit: type=1400 audit(1761458901.297:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.761940][ T28] audit: type=1400 audit(1761458901.297:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.576569][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.583717][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.591146][ T284] device bridge_slave_0 entered promiscuous mode [ 23.599810][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.607061][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.614697][ T284] device bridge_slave_1 entered promiscuous mode [ 23.674614][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.681706][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.689321][ T283] device bridge_slave_0 entered promiscuous mode [ 23.713909][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.720988][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.728649][ T283] device bridge_slave_1 entered promiscuous mode [ 23.756355][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.763562][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.770990][ T285] device bridge_slave_0 entered promiscuous mode [ 23.796079][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.803180][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.810601][ T285] device bridge_slave_1 entered promiscuous mode [ 23.910855][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.918066][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.925602][ T286] device bridge_slave_0 entered promiscuous mode [ 23.933884][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.940936][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.948426][ T287] device bridge_slave_0 entered promiscuous mode [ 23.955530][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.962775][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.970259][ T287] device bridge_slave_1 entered promiscuous mode [ 23.977067][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.984175][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.991595][ T286] device bridge_slave_1 entered promiscuous mode [ 24.088604][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.095701][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.103030][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.110327][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.167842][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.174930][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.182218][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.189276][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.198101][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.205184][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.212468][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.219511][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.256497][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.263598][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.270873][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.277927][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.314988][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.322307][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330008][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.337471][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.344839][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.352116][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.359996][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.367339][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.375857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.383431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.405569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.413723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.421911][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.428961][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.436965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.445706][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.452751][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.460271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.468536][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.475584][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.482972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.491125][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.498177][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.527531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.535675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.543934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.551890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.573941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.582319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.595049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.602711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.623277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.631736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.640199][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.647377][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.655525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.663083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.673797][ T284] device veth0_vlan entered promiscuous mode [ 24.682697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.691447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.699816][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.706910][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.714459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.722330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.744799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.752402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.760064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.768461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.776951][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.784025][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.791514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.800141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.808377][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.815526][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.823177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.831534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.839799][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.846850][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.854383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.862919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.871089][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.878182][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.885706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.893969][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.901914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.910388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.918807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.926958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.935158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.956691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.964874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.974753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.982888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.990894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.999410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.012061][ T284] device veth1_macvtap entered promiscuous mode [ 25.023832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.032020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.040319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.048856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.057157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.070977][ T285] device veth0_vlan entered promiscuous mode [ 25.084504][ T283] device veth0_vlan entered promiscuous mode [ 25.093420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.102013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.110852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.118623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.126138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.134702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.143219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.151077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.159313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.167793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.176436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.184062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.200674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.209100][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.218648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.235360][ T285] device veth1_macvtap entered promiscuous mode [ 25.244415][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 25.244922][ T287] device veth0_vlan entered promiscuous mode [ 25.258037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.266188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.273921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.282174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.290637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.302332][ T286] device veth0_vlan entered promiscuous mode [ 25.322446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.336444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.344828][ T336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.345714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.369209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.377630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.387598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.397087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.405522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.417633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.430928][ T286] device veth1_macvtap entered promiscuous mode [ 25.438332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.446867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.458110][ T283] device veth1_macvtap entered promiscuous mode [ 25.466450][ T287] device veth1_macvtap entered promiscuous mode [ 25.478800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.486738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.495446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.535247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.539269][ T346] loop1: detected capacity change from 0 to 16 [ 25.545040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.558961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.561630][ T346] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 6000000, please upgrade kernel version [ 25.567744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.588818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.597435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.609586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.618162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.650941][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.666304][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.683749][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.719698][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.746173][ T363] loop2: detected capacity change from 0 to 128 [ 25.753729][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.789019][ T363] ======================================================= [ 25.789019][ T363] WARNING: The mand mount option has been deprecated and [ 25.789019][ T363] and is ignored by this kernel. Remove the mand [ 25.789019][ T363] option from the mount to silence this warning. [ 25.789019][ T363] ======================================================= [ 25.826127][ T363] FAT-fs (loop2): Unrecognized mount option "nLdots" or missing value [ 26.104117][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.282615][ T349] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.293854][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.312965][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 26.353363][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 26.382907][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.408312][ T6] usb 2-1: SerialNumber: syz [ 26.434856][ T6] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 26.441700][ T6] usb-storage 2-1:1.0: USB Mass Storage device detected [ 26.465775][ T349] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 26.477383][ T6] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 26.492616][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.506886][ T6] scsi host1: usb-storage 2-1:1.0 [ 26.528778][ T349] usb 3-1: Product: syz [ 26.533354][ T297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.545064][ T349] usb 3-1: Manufacturer: syz [ 26.549735][ T349] usb 3-1: SerialNumber: syz [ 26.712784][ T297] usb 5-1: Using ep0 maxpacket: 32 [ 26.719300][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.754682][ T24] usb 4-1: config index 0 descriptor too short (expected 51, got 10) [ 26.755931][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.772621][ T24] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 26.775082][ T297] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.789404][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.789749][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.799079][ T297] usb 5-1: config 0 descriptor?? [ 26.814857][ T297] hub 5-1:0.0: USB hub found [ 26.840476][ T24] usb 4-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=ab.07 [ 26.850334][ T379] syz.0.1 (379) used greatest stack depth: 21952 bytes left [ 26.860082][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.878676][ T24] usb 4-1: Product: syz [ 26.883099][ T24] usb 4-1: Manufacturer: syz [ 26.887744][ T24] usb 4-1: SerialNumber: syz [ 26.909283][ T24] usb 4-1: config 0 descriptor?? [ 26.976344][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.987812][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.996811][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.005509][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.015837][ T297] hub 5-1:0.0: 1 port detected [ 27.145180][ T24] usb 4-1: USB disconnect, device number 2 [ 27.265493][ T349] rtl8150 3-1:1.0: couldn't reset the device [ 27.286273][ T349] rtl8150: probe of 3-1:1.0 failed with error -5 [ 27.299126][ T349] usb 3-1: USB disconnect, device number 2 [ 27.745990][ T24] usb 2-1: USB disconnect, device number 2 [ 27.972659][ T407] loop0: detected capacity change from 0 to 2048 [ 28.001478][ T297] hub 5-1:0.0: activate --> -90 [ 28.023447][ T407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.047182][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 28.047197][ T28] audit: type=1400 audit(1761458907.657:119): avc: denied { mount } for pid=406 comm="syz.0.17" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.047206][ T407] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.112351][ T28] audit: type=1400 audit(1761458907.717:120): avc: denied { create } for pid=406 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.145313][ T28] audit: type=1400 audit(1761458907.747:121): avc: denied { create } for pid=406 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 28.178781][ T397] kvm [396]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 28.192591][ T28] audit: type=1400 audit(1761458907.787:122): avc: denied { write } for pid=396 comm="syz.2.14" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.236854][ T399] loop3: detected capacity change from 0 to 40427 [ 28.253523][ T399] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 28.274592][ T399] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.434946][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.452759][ T28] audit: type=1400 audit(1761458907.937:123): avc: denied { setopt } for pid=406 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.522859][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.546738][ T399] F2FS-fs (loop3): invalid crc value [ 28.587090][ T417] loop1: detected capacity change from 0 to 512 [ 28.610057][ T417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.619276][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.631725][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.632052][ T399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.646626][ T24] usb 5-1: USB disconnect, device number 2 [ 28.700193][ T28] audit: type=1400 audit(1761458908.307:124): avc: denied { create } for pid=416 comm="syz.1.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.771265][ T28] audit: type=1400 audit(1761458908.337:125): avc: denied { map } for pid=416 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.795581][ T28] audit: type=1400 audit(1761458908.337:126): avc: denied { read write } for pid=416 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.835876][ T285] EXT4-fs (loop1): unmounting filesystem. [ 28.844129][ T399] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.851219][ T399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.890409][ T283] EXT4-fs (loop0): unmounting filesystem. [ 28.911383][ T28] audit: type=1400 audit(1761458908.517:127): avc: denied { write } for pid=398 comm="syz.3.15" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.942475][ T28] audit: type=1400 audit(1761458908.517:128): avc: denied { add_name } for pid=398 comm="syz.3.15" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.968057][ T437] overlayfs: failed to resolve './file0': -2 [ 28.975601][ T437] overlayfs: failed to resolve './file0/file0': -2 [ 29.012263][ T442] loop0: detected capacity change from 0 to 4422 [ 29.020404][ T442] ext4: Unknown parameter './file0' [ 29.034351][ T447] syz.3.15: attempt to access beyond end of device [ 29.034351][ T447] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.051967][ T447] loop2: detected capacity change from 0 to 7 [ 29.059026][ T335] loop2: [ 29.067674][ T447] loop2: [ 29.106566][ T442] loop0: detected capacity change from 0 to 4422 [ 29.109926][ T445] incfs: Can't find or create .index dir in ./file0 [ 29.114670][ T442] ext4: Unknown parameter './file0' [ 29.121752][ T445] incfs: mount failed -14 [ 29.195122][ T442] loop0: detected capacity change from 0 to 4422 [ 29.209178][ T442] ext4: Unknown parameter './file0' [ 29.276035][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 29.425412][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 30.062723][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.348586][ T458] loop4: detected capacity change from 0 to 4096 [ 30.372029][ T458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.623572][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.652896][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.794395][ T349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.812713][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.825137][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.837551][ T24] usb 3-1: config 0 descriptor?? [ 30.983888][ T349] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.990635][ T349] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 31.000142][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.011631][ T349] usb 2-1: config 0 descriptor?? [ 31.121137][ T286] EXT4-fs (loop4): unmounting filesystem. [ 31.202135][ T478] loop4: detected capacity change from 0 to 512 [ 31.263383][ T341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.499302][ T481] loop4: detected capacity change from 0 to 128 [ 31.713096][ T349] usbhid 2-1:0.0: can't add hid device: -71 [ 31.719106][ T349] usbhid: probe of 2-1:0.0 failed with error -71 [ 31.726873][ T481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.735589][ T481] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.751310][ T349] usb 2-1: USB disconnect, device number 3 [ 32.283324][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 32.289768][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 32.291014][ T286] EXT4-fs (loop4): unmounting filesystem. [ 32.298682][ T24] usb 3-1: USB disconnect, device number 3 [ 32.380608][ T496] capability: warning: `syz.3.35' uses deprecated v2 capabilities in a way that may be insecure [ 32.391956][ T496] 9pnet_fd: p9_fd_create_tcp (496): problem binding to privport [ 32.562845][ T501] loop1: detected capacity change from 0 to 1024 [ 32.569637][ T501] EXT4-fs: Ignoring removed i_version option [ 32.585094][ T501] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.38: Invalid block bitmap block 0 in block_group 0 [ 32.598798][ T501] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.38: Failed to acquire dquot type 0 [ 32.610189][ T501] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.38: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.625025][ T501] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.38: Invalid inode bitmap blk 0 in block_group 0 [ 32.666076][ T501] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 32.675255][ T501] EXT4-fs (loop1): 1 orphan inode deleted [ 32.681028][ T501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.694690][ T8] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 0 [ 32.982943][ T508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.39'. [ 33.009624][ T484] loop0: detected capacity change from 0 to 131072 [ 33.025451][ T484] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 33.044727][ T484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.070684][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 33.070699][ T28] audit: type=1400 audit(1761458912.677:158): avc: denied { create } for pid=505 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.103471][ T484] F2FS-fs (loop0): invalid crc value [ 33.118733][ T28] audit: type=1400 audit(1761458912.717:159): avc: denied { setopt } for pid=505 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.142490][ T484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.164954][ T28] audit: type=1400 audit(1761458912.717:160): avc: denied { bind } for pid=505 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.218720][ T28] audit: type=1400 audit(1761458912.717:161): avc: denied { listen } for pid=505 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.239309][ T484] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.246690][ T484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 33.281145][ T28] audit: type=1400 audit(1761458912.717:162): avc: denied { connect } for pid=505 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.319261][ T28] audit: type=1400 audit(1761458912.717:163): avc: denied { write } for pid=505 comm="syz.2.40" path="socket:[16988]" dev="sockfs" ino=16988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.350757][ T501] syz.1.38 (501) used greatest stack depth: 20856 bytes left [ 33.360068][ T285] EXT4-fs (loop1): unmounting filesystem. [ 33.405759][ T28] audit: type=1400 audit(1761458912.917:164): avc: denied { read write } for pid=483 comm="syz.0.33" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.449561][ T28] audit: type=1400 audit(1761458912.917:165): avc: denied { open } for pid=483 comm="syz.0.33" path="/10/bus/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.951964][ T526] Zero length message leads to an empty skb [ 33.959147][ T28] audit: type=1400 audit(1761458913.567:166): avc: denied { read write } for pid=524 comm="syz.3.44" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.094619][ T541] loop3: detected capacity change from 0 to 1024 [ 34.101418][ T541] EXT4-fs: Ignoring removed orlov option [ 34.107304][ T541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.115177][ T28] audit: type=1400 audit(1761458913.567:167): avc: denied { open } for pid=524 comm="syz.3.44" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.143812][ T538] loop0: detected capacity change from 0 to 2048 [ 34.176592][ T541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.218987][ T538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.238759][ T538] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.267870][ T537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters [ 34.327477][ T283] EXT4-fs (loop0): unmounting filesystem. [ 34.396209][ T564] loop4: detected capacity change from 0 to 256 [ 34.442516][ T564] FAT-fs (loop4): Directory bread(block 64) failed [ 34.451985][ T564] FAT-fs (loop4): Directory bread(block 65) failed [ 34.458829][ T564] FAT-fs (loop4): Directory bread(block 66) failed [ 34.465745][ T564] FAT-fs (loop4): Directory bread(block 67) failed [ 34.472355][ T564] FAT-fs (loop4): Directory bread(block 68) failed [ 34.500266][ T564] FAT-fs (loop4): Directory bread(block 69) failed [ 34.507859][ T564] FAT-fs (loop4): Directory bread(block 70) failed [ 34.514537][ T564] FAT-fs (loop4): Directory bread(block 71) failed [ 34.521108][ T564] FAT-fs (loop4): Directory bread(block 72) failed [ 34.527858][ T564] FAT-fs (loop4): Directory bread(block 73) failed [ 34.534602][ T579] bridge0: port 3(syz_tun) entered blocking state [ 34.544676][ T579] bridge0: port 3(syz_tun) entered disabled state [ 34.556388][ T579] device syz_tun entered promiscuous mode [ 34.575639][ T579] bridge0: port 3(syz_tun) entered blocking state [ 34.582149][ T579] bridge0: port 3(syz_tun) entered forwarding state [ 34.597594][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.629206][ T585] loop4: detected capacity change from 0 to 512 [ 34.633460][ T583] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 34.639942][ T585] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.655465][ T585] EXT4-fs error (device loop4): __ext4_fill_super:5391: inode #2: comm syz.4.55: iget: special inode unallocated [ 34.669461][ T585] EXT4-fs (loop4): get root inode failed [ 34.676816][ T582] netlink: 68 bytes leftover after parsing attributes in process `syz.1.54'. [ 34.690470][ T585] EXT4-fs (loop4): mount failed [ 34.706253][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.716859][ T284] EXT4-fs (loop3): unmounting filesystem. [ 34.718468][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.731215][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.744736][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.752062][ T588] loop0: detected capacity change from 0 to 512 [ 34.766686][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.776056][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.784538][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.802391][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.814985][ T588] FAT-fs (loop0): Unrecognized mount option "ݹD"fd8#2ȱ1j[E%*tk#;_@0M˒" or missing value [ 34.897831][ T588] netlink: 'syz.0.56': attribute type 12 has an invalid length. [ 35.055587][ T606] loop0: detected capacity change from 0 to 1024 [ 35.063858][ T606] EXT4-fs: Ignoring removed nobh option [ 35.069674][ T606] EXT4-fs: Ignoring removed bh option [ 35.089396][ T606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.155297][ T297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.176151][ T606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.345810][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.363944][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.374756][ T614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 35.374987][ T297] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 35.393073][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.405413][ T297] usb 5-1: config 0 descriptor?? [ 35.888414][ T622] loop1: detected capacity change from 0 to 16 [ 35.916052][ T622] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 36.150115][ T297] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 36.157873][ T297] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 36.166169][ T297] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 36.174574][ T297] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 36.181922][ T297] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 36.194933][ T297] petalynx 0003:18B1:0037.0001: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 36.496805][ T297] usb 5-1: USB disconnect, device number 3 [ 36.933049][ T335] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.965584][ T635] loop3: detected capacity change from 0 to 512 [ 36.974341][ T335] udevd[335]: failed to send result of seq 4551 to main daemon: Connection refused [ 37.003262][ T635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.012851][ T635] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.050912][ T284] EXT4-fs (loop3): unmounting filesystem. [ 37.154387][ T645] 9pnet_fd: Insufficient options for proto=fd [ 37.160934][ T645] bridge: RTM_NEWNEIGH with invalid ether address [ 37.216816][ T649] loop3: detected capacity change from 0 to 512 [ 37.243661][ T649] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.275970][ T649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 37.294866][ T649] binder: 648:649 ioctl c0306201 0 returned -14 [ 37.305490][ T623] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 37.328448][ T652] device ip6gretap0 entered promiscuous mode [ 37.351556][ T649] loop3: detected capacity change from 0 to 16 [ 37.364849][ T649] erofs: (device loop3): mounted with root inode @ nid 36. [ 37.503668][ T623] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 37.516968][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.534566][ T623] usb 5-1: config 0 descriptor?? [ 37.939218][ T58] usb 5-1: USB disconnect, device number 4 [ 37.991369][ T658] loop1: detected capacity change from 0 to 512 [ 38.024637][ T658] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.75: casefold flag without casefold feature [ 38.045871][ T658] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.75: couldn't read orphan inode 15 (err -117) [ 38.057988][ T658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.089895][ T283] EXT4-fs (loop0): unmounting filesystem. [ 38.097786][ T660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.74'. [ 38.304753][ T285] EXT4-fs (loop1): unmounting filesystem. [ 38.347028][ T666] loop0: detected capacity change from 0 to 512 [ 38.355743][ T666] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.77: inode #1: comm syz.0.77: iget: illegal inode # [ 38.369013][ T666] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.77: error while reading EA inode 1 err=-117 [ 38.381648][ T666] EXT4-fs (loop0): 1 orphan inode deleted [ 38.387532][ T666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.397340][ T666] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 38.407454][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 38.407468][ T28] audit: type=1400 audit(1761458918.027:197): avc: denied { relabelto } for pid=665 comm="syz.0.77" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 39.204528][ T671] syz.1.78 (671) used greatest stack depth: 20088 bytes left [ 39.220197][ T28] audit: type=1400 audit(1761458918.057:198): avc: denied { create } for pid=667 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.287229][ T28] audit: type=1400 audit(1761458918.067:199): avc: denied { setopt } for pid=667 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.352746][ T28] audit: type=1400 audit(1761458918.507:200): avc: denied { read } for pid=665 comm="syz.0.77" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.376210][ T283] EXT4-fs (loop0): unmounting filesystem. [ 39.432617][ T28] audit: type=1400 audit(1761458918.507:201): avc: denied { open } for pid=665 comm="syz.0.77" path="net:[4026532293]" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.582351][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 40.187974][ T694] loop3: detected capacity change from 0 to 128 [ 40.195230][ T694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.201931][ T694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.209980][ T694] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.341625][ T694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.351411][ T694] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.383747][ T695] tipc: Can't bind to reserved service type 0 [ 40.618469][ T28] audit: type=1400 audit(1761458918.527:202): avc: denied { create } for pid=665 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.697814][ T28] audit: type=1400 audit(1761458918.617:203): avc: denied { bind } for pid=665 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.787918][ T28] audit: type=1400 audit(1761458918.697:204): avc: denied { write } for pid=665 comm="syz.0.77" path="socket:[17283]" dev="sockfs" ino=17283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.894107][ T28] audit: type=1400 audit(1761458918.927:205): avc: denied { ioctl } for pid=683 comm="syz.1.80" path="socket:[16253]" dev="sockfs" ino=16253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.983131][ T28] audit: type=1400 audit(1761458919.027:206): avc: denied { setopt } for pid=688 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.014832][ T284] EXT4-fs (loop3): unmounting filesystem. [ 41.044929][ T716] loop3: detected capacity change from 0 to 256 [ 41.065693][ T716] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 41.434529][ T724] device ip6gretap0 entered promiscuous mode [ 42.015443][ T732] loop4: detected capacity change from 0 to 4096 [ 42.380857][ T732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.405745][ T737] loop1: detected capacity change from 0 to 1024 [ 42.491432][ T737] EXT4-fs: Ignoring removed i_version option [ 42.499407][ T737] ext4: Bad value for 'auto_da_alloc' [ 42.867196][ T747] loop1: detected capacity change from 0 to 2048 [ 42.881502][ T749] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.895847][ T749] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.998676][ T747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.007485][ T747] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.289284][ T285] EXT4-fs (loop1): unmounting filesystem. [ 43.499339][ T286] EXT4-fs (loop4): unmounting filesystem. [ 43.566062][ T772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 43.617168][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 43.617184][ T28] audit: type=1400 audit(1761458929.226:263): avc: denied { write } for pid=768 comm="syz.2.99" name="001" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.680786][ T769] ================================================================== [ 43.688913][ T769] BUG: KASAN: use-after-free in ipt_do_table+0x6e1/0x15d0 [ 43.696074][ T769] Read of size 8 at addr ffff888130b64000 by task syz.2.99/769 [ 43.703812][ T769] [ 43.706150][ T769] CPU: 0 PID: 769 Comm: syz.2.99 Not tainted syzkaller #0 [ 43.713278][ T769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.723361][ T769] Call Trace: [ 43.726659][ T769] [ 43.729619][ T769] __dump_stack+0x21/0x24 [ 43.733986][ T769] dump_stack_lvl+0xee/0x150 [ 43.738608][ T769] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.743675][ T769] ? __cfi___switch_to+0x10/0x10 [ 43.748737][ T769] ? ipt_do_table+0x6e1/0x15d0 [ 43.753538][ T769] print_address_description+0x71/0x200 [ 43.759149][ T769] print_report+0x4a/0x60 [ 43.763526][ T769] kasan_report+0x122/0x150 [ 43.768063][ T769] ? ipt_do_table+0x6e1/0x15d0 [ 43.772856][ T769] __asan_report_load8_noabort+0x14/0x20 [ 43.778536][ T769] ipt_do_table+0x6e1/0x15d0 [ 43.783160][ T769] ? ipt_do_table+0x2ae/0x15d0 [ 43.787950][ T769] ? __cfi_ipt_do_table+0x10/0x10 [ 43.793001][ T769] ? preempt_schedule_thunk+0x16/0x18 [ 43.798411][ T769] iptable_mangle_hook+0x196/0x4d0 [ 43.803552][ T769] ? dev_loopback_xmit+0x3a6/0x5b0 [ 43.808707][ T769] ? __cfi_iptable_mangle_hook+0x10/0x10 [ 43.814374][ T769] nf_hook_slow+0xca/0x210 [ 43.818828][ T769] ip_mc_output+0x5a8/0x7f0 [ 43.823374][ T769] ? __cfi_ip_mc_output+0x10/0x10 [ 43.828431][ T769] ? __cfi_ip_finish_output+0x10/0x10 [ 43.833830][ T769] ? __ip_local_out+0x3b4/0x3c0 [ 43.838718][ T769] ? __cfi___ip_local_out+0x10/0x10 [ 43.843940][ T769] ? __cfi_ip_mc_finish_output+0x10/0x10 [ 43.849603][ T769] ip_send_skb+0xc3/0x150 [ 43.853963][ T769] udp_send_skb+0xa83/0x1480 [ 43.858586][ T769] udp_sendmsg+0x1748/0x20c0 [ 43.863209][ T769] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 43.868800][ T769] ? __cfi_udp_sendmsg+0x10/0x10 [ 43.873785][ T769] ? inet_send_prepare+0x60/0x4d0 [ 43.878843][ T769] ? __this_cpu_preempt_check+0x13/0x20 [ 43.884450][ T769] inet_sendmsg+0xb6/0xd0 [ 43.888840][ T769] ? __cfi_inet_sendmsg+0x10/0x10 [ 43.893906][ T769] ____sys_sendmsg+0x5a9/0x990 [ 43.898715][ T769] ? __sys_sendmsg_sock+0x40/0x40 [ 43.903778][ T769] ? import_iovec+0x7c/0xb0 [ 43.908329][ T769] ___sys_sendmsg+0x21c/0x290 [ 43.913046][ T769] ? __sys_sendmsg+0x270/0x270 [ 43.917840][ T769] ? up_read+0x56/0x1d0 [ 43.922044][ T769] __sys_sendmmsg+0x274/0x460 [ 43.926755][ T769] ? __cfi___sys_sendmmsg+0x10/0x10 [ 43.932004][ T769] ? fpregs_restore_userregs+0x128/0x260 [ 43.937673][ T769] __x64_sys_sendmmsg+0xa0/0xb0 [ 43.942580][ T769] x64_sys_call+0x3f5/0x9a0 [ 43.947132][ T769] do_syscall_64+0x4c/0xa0 [ 43.951584][ T769] ? clear_bhb_loop+0x30/0x80 [ 43.956292][ T769] ? clear_bhb_loop+0x30/0x80 [ 43.961029][ T769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.966956][ T769] RIP: 0033:0x7f9a1db8efc9 [ 43.971409][ T769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.991048][ T769] RSP: 002b:00007f9a1e9cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 43.999502][ T769] RAX: ffffffffffffffda RBX: 00007f9a1dde5fa0 RCX: 00007f9a1db8efc9 [ 44.007507][ T769] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 44.015507][ T769] RBP: 00007f9a1dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 44.023513][ T769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.031513][ T769] R13: 00007f9a1dde6038 R14: 00007f9a1dde5fa0 R15: 00007ffc6c0a42b8 [ 44.039526][ T769] [ 44.042572][ T769] [ 44.044921][ T769] The buggy address belongs to the physical page: [ 44.051344][ T769] page:ffffea0004c2d900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130b64 [ 44.061623][ T769] flags: 0x4000000000000000(zone=1) [ 44.066872][ T769] raw: 4000000000000000 ffffea00044eb808 ffff8881f703c8d8 0000000000000000 [ 44.075482][ T769] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 44.084087][ T769] page dumped because: kasan: bad access detected [ 44.090533][ T769] page_owner tracks the page as freed [ 44.095926][ T769] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 287, tgid 287 (syz-executor), ts 23777846117, free_ts 43680604386 [ 44.117324][ T769] post_alloc_hook+0x1f5/0x210 [ 44.122215][ T769] prep_new_page+0x1c/0x110 [ 44.126756][ T769] get_page_from_freelist+0x2c7b/0x2cf0 [ 44.132336][ T769] __alloc_pages+0x1c3/0x450 [ 44.136955][ T769] __kmalloc_large_node+0xa1/0x1c0 [ 44.142086][ T769] __kmalloc_node+0xdf/0x1e0 [ 44.146710][ T769] kvmalloc_node+0x294/0x480 [ 44.151320][ T769] alloc_netdev_mqs+0x8d/0xf90 [ 44.156116][ T769] tun_set_iff+0x55f/0xe90 [ 44.160553][ T769] __tun_chr_ioctl+0x806/0x1e70 [ 44.165439][ T769] tun_chr_ioctl+0x2a/0x40 [ 44.169872][ T769] __se_sys_ioctl+0x12f/0x1b0 [ 44.174596][ T769] __x64_sys_ioctl+0x7b/0x90 [ 44.179204][ T769] x64_sys_call+0x58b/0x9a0 [ 44.183729][ T769] do_syscall_64+0x4c/0xa0 [ 44.188206][ T769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.194142][ T769] page last free stack trace: [ 44.198828][ T769] free_unref_page_prepare+0x742/0x750 [ 44.204323][ T769] free_unref_page+0x8f/0x530 [ 44.209038][ T769] __free_pages+0x67/0x100 [ 44.213481][ T769] free_large_kmalloc+0xae/0xf0 [ 44.218354][ T769] kfree+0x8b/0xf0 [ 44.222110][ T769] kvfree+0x35/0x40 [ 44.225948][ T769] netdev_freemem+0x3f/0x60 [ 44.230483][ T769] netdev_release+0x7f/0xb0 [ 44.235018][ T769] device_release+0xa4/0x1d0 [ 44.239642][ T769] kobject_put+0x19d/0x280 [ 44.244089][ T769] netdev_run_todo+0xb26/0xc00 [ 44.248892][ T769] rtnetlink_rcv_msg+0xb44/0xcf0 [ 44.253905][ T769] netlink_rcv_skb+0x1f2/0x440 [ 44.258703][ T769] rtnetlink_rcv+0x1c/0x20 [ 44.263162][ T769] netlink_unicast+0x8ab/0xa30 [ 44.268048][ T769] netlink_sendmsg+0x8aa/0xbc0 [ 44.272841][ T769] [ 44.275194][ T769] Memory state around the buggy address: [ 44.280844][ T769] ffff888130b63f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.288920][ T769] ffff888130b63f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.297025][ T769] >ffff888130b64000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.305108][ T769] ^ [ 44.309210][ T769] ffff888130b64080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.317299][ T769] ffff888130b64100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.325374][ T769] ================================================================== [ 44.333501][ T769] Disabling lock debugging due to kernel taint [ 44.336464][ T28] audit: type=1400 audit(1761458929.946:264): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.550418][ T28] audit: type=1400 audit(1761458929.946:265): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.773997][ T28] audit: type=1400 audit(1761458929.946:266): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.817906][ T28] audit: type=1400 audit(1761458929.946:267): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.858765][ T28] audit: type=1400 audit(1761458929.946:268): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.899558][ T28] audit: type=1400 audit(1761458929.946:269): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.931759][ T28] audit: type=1400 audit(1761458929.946:270): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.954431][ T28] audit: type=1400 audit(1761458930.006:271): avc: denied { write } for pid=770 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.973655][ T28] audit: type=1400 audit(1761458930.076:272): avc: denied { accept } for pid=770 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1