last executing test programs: 8m56.466960286s ago: executing program 32 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) close(r0) 8m54.960276137s ago: executing program 33 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40002, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 8m37.811828231s ago: executing program 34 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') pipe2$9p(&(0x7f00000000c0), 0x80000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 8m34.92888783s ago: executing program 35 (id=76): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000150000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 8m34.153051301s ago: executing program 6 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x20000042}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 8m34.001815613s ago: executing program 7 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x20000042}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 8m32.252175797s ago: executing program 6 (id=81): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') munmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 8m32.177119288s ago: executing program 7 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') pipe2$9p(&(0x7f00000000c0), 0x80000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 8m29.542574184s ago: executing program 7 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x20000042}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 8m29.214008689s ago: executing program 7 (id=92): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x12, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x192) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000180)) sendmsg(r4, 0x0, 0x4004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 8m28.999434412s ago: executing program 6 (id=93): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466", 0x48, 0x0, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bda000/0x4000)=nil, 0xfffffffffffffea3, &(0x7f00000000c0)='\x00#\x0f\x01bK\xd1\xd8\xc8\xe3Z(\x03\xa1\x8b\x19#\x8fZ\x10Gk\x01\xd5\xc6r\x88\x97\xbb\xd9\xca=\xffa\xeb\b\xb2\x90\x1a\x03;\xae\xddc\nI\xcd\xf59>\xc4ZE\xac\xd3\x1f\xe7\xc5\xe5(\xed\xbb+\xfd\xe3\xb2\xf8\x9d\xf1\b\xff9\".Be\xf6\xb0\x0e\x86\xa3\x1c\x10\x88\xf4\xa2\xa0\x81\vN2N\xf1\xa5\x96\x94\x91\xa2S\x96@\xf1\x15\x9a{\xb9O{\x01*\xe98\xea\xcd\xcd\x04Y\x03\xf5>\x93\xb8') io_setup(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000002ee4abd3cbb83f040095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r6, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 8m28.804094824s ago: executing program 36 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000280)=ANY=[], 0x361, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_delete(r5) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x5}]}, 0x2c, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 8m28.37135577s ago: executing program 7 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 8m27.67924808s ago: executing program 7 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x20000042}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 8m27.62107058s ago: executing program 37 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x20000042}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 8m26.259988549s ago: executing program 6 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x65, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x4, 0x4}}}}}]}}]}}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x12, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x175d9003) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000180)) sendmsg(r5, 0x0, 0x4004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 8m23.473207727s ago: executing program 6 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 8m22.843167885s ago: executing program 6 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 8m22.829488436s ago: executing program 38 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 7m17.482557578s ago: executing program 9 (id=419): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001001a000900000001", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') read$FUSE(r9, &(0x7f0000000a80)={0x2020}, 0x2020) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r10) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') 7m16.291693305s ago: executing program 9 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc0c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 7m15.382990797s ago: executing program 9 (id=437): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 1) 7m13.757395429s ago: executing program 9 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x12, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x192) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000180)) sendmsg(r4, 0x0, 0x4004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 7m10.710517291s ago: executing program 9 (id=460): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bda000/0x4000)=nil, 0xfffffffffffffea3, &(0x7f00000000c0)='\x00#\x0f\x01bK\xd1\xd8\xc8\xe3Z(\x03\xa1\x8b\x19#\x8fZ\x10Gk\x01\xd5\xc6r\x88\x97\xbb\xd9\xca=\xffa\xeb\b\xb2\x90\x1a\x03;\xae\xddc\nI\xcd\xf59>\xc4ZE\xac\xd3\x1f\xe7\xc5\xe5(\xed\xbb+\xfd\xe3\xb2\xf8\x9d\xf1\b\xff9\".Be\xf6\xb0\x0e\x86\xa3\x1c\x10\x88\xf4\xa2\xa0\x81\vN2N\xf1\xa5\x96\x94\x91\xa2S\x96@\xf1\x15\x9a{\xb9O{\x01*\xe98\xea\xcd\xcd\x04Y\x03\xf5>\x93\xb8') io_setup(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000002ee4abd3cbb83f040095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r6, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 7m10.425303095s ago: executing program 9 (id=465): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x28ec, 0xf, 0x80, 0x200}, {0x7f, 0x5, 0x4, 0xaa}, {0x1, 0x0, 0x1, 0x401}, {0x4, 0xf8, 0x7, 0x4}, {0x0, 0x5, 0x7, 0x9}, {0x0, 0x6, 0x9, 0x78f}]}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000073212200000000009500f26333"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x3, r1, 0x3}) syz_usb_connect(0x2, 0x66, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0x93, 0x59, 0x40, 0x15ba, 0x2a, 0x902b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x3, 0x4, 0x3, 0x80, 0x6, [{{0x9, 0x4, 0x1, 0xee, 0x1, 0xa0, 0x4e, 0x60, 0xd, [], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0xa, 0x81, 0x1}}]}}, {{0x9, 0x4, 0x68, 0x3, 0x2, 0xf9, 0x66, 0xa2, 0x4, [], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0x7, 0x1, 0x2}}, {{0x9, 0x5, 0x86, 0x0, 0x20, 0x2, 0x81, 0xc9}}]}}, {{0x9, 0x4, 0x6b, 0xb8, 0x2, 0xff, 0x5, 0x18, 0x0, [], [{{0x9, 0x5, 0x0, 0x4, 0x10, 0x1, 0x2, 0x3, [@generic={0x3, 0x9, "e3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x6, 0x3}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) 7m10.05462254s ago: executing program 39 (id=465): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x28ec, 0xf, 0x80, 0x200}, {0x7f, 0x5, 0x4, 0xaa}, {0x1, 0x0, 0x1, 0x401}, {0x4, 0xf8, 0x7, 0x4}, {0x0, 0x5, 0x7, 0x9}, {0x0, 0x6, 0x9, 0x78f}]}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) finit_module(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000073212200000000009500f26333"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x3, r1, 0x3}) syz_usb_connect(0x2, 0x66, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0x93, 0x59, 0x40, 0x15ba, 0x2a, 0x902b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x3, 0x4, 0x3, 0x80, 0x6, [{{0x9, 0x4, 0x1, 0xee, 0x1, 0xa0, 0x4e, 0x60, 0xd, [], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0xa, 0x81, 0x1}}]}}, {{0x9, 0x4, 0x68, 0x3, 0x2, 0xf9, 0x66, 0xa2, 0x4, [], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0x7, 0x1, 0x2}}, {{0x9, 0x5, 0x86, 0x0, 0x20, 0x2, 0x81, 0xc9}}]}}, {{0x9, 0x4, 0x6b, 0xb8, 0x2, 0xff, 0x5, 0x18, 0x0, [], [{{0x9, 0x5, 0x0, 0x4, 0x10, 0x1, 0x2, 0x3, [@generic={0x3, 0x9, "e3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x6, 0x3}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) 6m10.853872319s ago: executing program 5 (id=799): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') request_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\bD0\x00'/18, 0x0) (fail_nth: 1) lseek(r6, 0x10001, 0x0) 6m10.05005897s ago: executing program 5 (id=803): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b000000000001000100ecff2192d3eea145e58a1b31634fbca3cfdcc9a23da37819f9bc439ad0aab70c959059f90b07a332e8fad021c449b343c3ca154317110a0b5b106af710ff23647299eec7f0964effa9c5c5969d4e564b59d2fc13a74727d790bcd33cd4d8f20f23f5405fcb4e4b715679e8b72b2b0e3f1f6db3123d8698935bf2c0d165a4e505f296fcf50d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) 6m9.035171794s ago: executing program 5 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0xffff}, 0x12, [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2ec, 0x9, 0x0, 0x0, 0xfffffffc, 0xce77, 0x1, 0x1096, 0x2], [0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xeb, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x40, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async, rerun: 64) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") (rerun: 64) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) (async) timer_delete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fdatasync(0xffffffffffffffff) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) (async) mkdirat(r2, &(0x7f0000000500)='./bus\x00', 0x12) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 6m8.890609026s ago: executing program 5 (id=811): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20089e, &(0x7f00000002c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@data_err_abort}]}, 0x3, 0x508, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000004c0)=@v2={0x2, @aes128, 0x1, '\x00', @b}) 6m7.372307116s ago: executing program 5 (id=819): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x711698f4d3b7b9f7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x60, 0xe, 0x1, {0x22, 0xe55}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/igmp6\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004440), r2) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000004600)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f0000004480)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c080}, 0x20000001) 6m6.263073021s ago: executing program 5 (id=820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x141aca, 0x0, 0xff, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r2, &(0x7f0000000040)="c292dfb4929a5e25909ded", 0xb, 0x7, 0x0, 0x2}]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) 6m6.219479792s ago: executing program 40 (id=820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x141aca, 0x0, 0xff, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r2, &(0x7f0000000040)="c292dfb4929a5e25909ded", 0xb, 0x7, 0x0, 0x2}]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)) 20.170062984s ago: executing program 3 (id=2943): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x2, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0xffc, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000240)='^(!}\x00', &(0x7f0000000280)='w@](^\x00']}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 18.123710323s ago: executing program 3 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') pipe2$9p(&(0x7f00000000c0), 0x80000) munmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 14.852837747s ago: executing program 3 (id=2973): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x607, &(0x7f0000001080)=ANY=[@ANYBLOB], &(0x7f0000000500)={0x1, 0x2, [0x763, 0xce5, 0x28, 0xf72]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 14.759585629s ago: executing program 3 (id=2974): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0xfffd, @rand_addr=0x64010100}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}, 'ip6gre0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1e, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000000b00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000080)=""/22, 0x16, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r6 = syz_open_pts(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000240)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in=@private=0xa010100, 0x2, 0x6, 0x10}}, @proto={0x5, 0x19, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040800) fchown(r8, 0x0, 0xee01) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) dup3(r6, r1, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) 13.839223921s ago: executing program 3 (id=2979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r2 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000302000000"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') pipe2$9p(&(0x7f00000000c0), 0x80000) munmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 13.382236057s ago: executing program 3 (id=2983): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b000000000001000100ecff2192d3eea145e58a1b31634fbca3cfdcc9a23da37819f9bc439ad0aab70c959059f90b07a332e8fad021c449b343c3ca154317110a0b5b106af710ff23647299eec7f0964effa9c5c5969d4e564b59d2fc13a74727d790bcd33cd4d8f20f23f5405fcb4e4b715679e8b72b2b0e3f1f6db3123d8698935bf2c0d165a4e505f296fcf5", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 13.305297578s ago: executing program 41 (id=2983): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b000000000001000100ecff2192d3eea145e58a1b31634fbca3cfdcc9a23da37819f9bc439ad0aab70c959059f90b07a332e8fad021c449b343c3ca154317110a0b5b106af710ff23647299eec7f0964effa9c5c5969d4e564b59d2fc13a74727d790bcd33cd4d8f20f23f5405fcb4e4b715679e8b72b2b0e3f1f6db3123d8698935bf2c0d165a4e505f296fcf5", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 5.419959896s ago: executing program 0 (id=3025): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x13}]}}]}, 0x38}}, 0x0) 5.411007656s ago: executing program 0 (id=3026): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r1, 0x20, &(0x7f0000000840)={&(0x7f0000000780), 0x0, 0x0, &(0x7f00000007c0)=""/92, 0x5c}}, 0x10) close_range(r0, r1, 0x2) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x64000881) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x84000100) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001200970225bd7000020000000700", @ANYBLOB='k'], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 4.475725419s ago: executing program 0 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8ab8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/190) 4.37228193s ago: executing program 0 (id=3034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9}, 0x10) 4.285245411s ago: executing program 1 (id=3035): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000008000000000000000000b2a2544d2850854ba5df12d2059f4d9d5e970a069af824645843d811fe068e7d0695269e9656b5b2379b86ee84612badf48b8f710f269871eefc1736ee3bba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01020000000000000000020000000000000002000000000088392afa60a01f40bd53f1ca3dd09fcda26b3fe889a56f04f73c59af1d2e6acfd2a9833c69fb2784e0de89003d549047f3702114f28c21ddcbf4a1ce204e3aa803f8f88d51964e485c0f1b4b2d4330d7fef90300003807df87af80b989d936fe1b1d151e0f234b00c849cb027ccedda9539ca14b49616b1a3302e54ae59206a18f9594438e629d28688e1b752f2e0000000000000000000000000000000000000029178027", @ANYRESDEC=0x0, @ANYRESOCT], 0xffffffffffffffff, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000006d000100000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00T\x004'], 0x74}}, 0x0) 4.098305044s ago: executing program 1 (id=3038): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 3.462909002s ago: executing program 0 (id=3039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d517e94f6b65f3a4dc8ea88d41ab19980bd11b02b3a2fdab5580b7066eec4e145f1f775290201edaa814d77d7a7e3"], 0x10}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4495) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') pipe2$9p(&(0x7f00000000c0), 0x80000) munmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x6f9f2000) 3.265662975s ago: executing program 2 (id=3040): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x607, &(0x7f0000001080)=ANY=[@ANYBLOB], &(0x7f0000000500)={0x1, 0x2, [0x763, 0xce5, 0x28, 0xf72]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 3.265225185s ago: executing program 2 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9}, 0x10) 3.177939576s ago: executing program 1 (id=3043): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x4840) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x5, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast2}}}}) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x2000200b}) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r6, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) 3.165821747s ago: executing program 4 (id=3044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8ab8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/190) 3.110379057s ago: executing program 4 (id=3045): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.728730093s ago: executing program 1 (id=3047): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getscheduler(r5) fcntl$setsig(r4, 0xa, 0x13) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r8, &(0x7f0000000400)="0000000000000000c9", 0x9, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x10000, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) 2.306882518s ago: executing program 4 (id=3048): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000008000000000000000000b2a2544d2850854ba5df12d2059f4d9d5e970a069af824645843d811fe068e7d0695269e9656b5b2379b86ee84612badf48b8f710f269871eefc1736ee3bba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01020000000000000000020000000000000002000000000088392afa60a01f40bd53f1ca3dd09fcda26b3fe889a56f04f73c59af1d2e6acfd2a9833c69fb2784e0de89003d549047f3702114f28c21ddcbf4a1ce204e3aa803f8f88d51964e485c0f1b4b2d4330d7fef90300003807df87af80b989d936fe1b1d151e0f234b00c849cb027ccedda9539ca14b49616b1a3302e54ae59206a18f9594438e629d28688e1b752f2e0000000000000000000000000000000000000029178027", @ANYRESDEC=0x0, @ANYRESOCT], 0xffffffffffffffff, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000006d000100000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00T\x004'], 0x74}}, 0x0) 2.24682788s ago: executing program 2 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9}, 0x10) 2.151700661s ago: executing program 4 (id=3050): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40002, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e69023000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000000000000000070000", @ANYRES32=r7, @ANYBLOB="4000aa000a00"], 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 1.885677804s ago: executing program 8 (id=3051): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x2010000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.597316408s ago: executing program 1 (id=3052): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000001c0), 0x0}, 0x20) 1.358498461s ago: executing program 2 (id=3053): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.161630615s ago: executing program 8 (id=3054): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x607, &(0x7f0000001080)=ANY=[@ANYBLOB], &(0x7f0000000500)={0x1, 0x2, [0x763, 0xce5, 0x28, 0xf72]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.055222105s ago: executing program 8 (id=3055): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8ab8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/190) 1.054721636s ago: executing program 8 (id=3056): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x2010000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 877.386638ms ago: executing program 4 (id=3057): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x4840) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x5, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast2}}}}) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x2000200b}) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r6, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) 790.275639ms ago: executing program 4 (id=3058): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') getdents64(r0, &(0x7f0000003f80)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000100)={0x2, 0xffffffff, 0xa, 0x0, 0x5, 0x8000008}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x1fe) close(r6) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x13}]}}]}, 0x38}}, 0x0) 717.31057ms ago: executing program 1 (id=3059): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109"], 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f00000002c0)=""/28}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(&(0x7f0000000d00)={[0x4]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="ab00000000000004060001c0"]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={0x0, 0xae5, 0x8, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000dc0)={r9, 0xbd}) fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) 480.167734ms ago: executing program 2 (id=3060): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000008000000000000000000b2a2544d2850854ba5df12d2059f4d9d5e970a069af824645843d811fe068e7d0695269e9656b5b2379b86ee84612badf48b8f710f269871eefc1736ee3bba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01020000000000000000020000000000000002000000000088392afa60a01f40bd53f1ca3dd09fcda26b3fe889a56f04f73c59af1d2e6acfd2a9833c69fb2784e0de89003d549047f3702114f28c21ddcbf4a1ce204e3aa803f8f88d51964e485c0f1b4b2d4330d7fef90300003807df87af80b989d936fe1b1d151e0f234b00c849cb027ccedda9539ca14b49616b1a3302e54ae59206a18f9594438e629d28688e1b752f2e0000000000000000000000000000000000000029178027", @ANYRESDEC=0x0, @ANYRESOCT], 0xffffffffffffffff, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000006d000100000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00T\x004'], 0x74}}, 0x0) 425.274714ms ago: executing program 0 (id=3061): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000001c0), 0x0}, 0x20) 415.059084ms ago: executing program 2 (id=3062): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1908464, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) pause() execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 328.789105ms ago: executing program 8 (id=3063): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1a081a, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x4200, 0x4, 0x10}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r6, &(0x7f0000000000)=""/50, 0x32) stat(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003440), &(0x7f0000003480), &(0x7f00000034c0)=0x0) sendmmsg$unix(r1, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000580)="54c83d7f22c7e5573019648781ddb2cb3c0b2c99a5fa9fa8df3f5a38e0782a021de9b79f7d7842040202c0e43f745568792052b3e388efaa3fd6da8a3ff5cce199b94e4d49b9e892841c38e57fbfbefbb3253fce04ae91b12efd6a76e8d4d9c2f2ec8b767be15eebde903c088fe5e6fb32dc915fe96a8efe43054f1427a009ec674014adb35c2344719d0ca3a40e6ed3c535a30eb62c47cae127b70cd4679f5a1e85fff593d63b65ce75e62d99aee6de0aeb1e68a6f6a3aa30540640499b8c59da0472063601e0ef2b4a38463c7069db4ad2e879b1e6044415017cce4978a16a714f8308e663700574", 0xe9}], 0x2, &(0x7f0000000480)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r3, r3, r3]}}], 0x28, 0x110}}, {{&(0x7f0000002e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001800)="ed4b683e766a109f806e41272426f454405697b5c586867d4a7e8dd2e85426650f328e92255f25dfbf11213212612b54c214cdc7070855d74cbc5ebf648cfd46da60946b35f86e7e54c02511e208bd67b4da34330ee226dec3f99c5c1bf0c13394f183d93996f7a204f5f39b9ef1452c9dd9f0fa38e5279a0d74724b232360646008eae92181d756ecdd9cd1fe91", 0x8e}, {&(0x7f0000000680)="f028605bebf5b21b1b80c4d17dfab7ac54a9b73cf75fa7b39ed36b422e63091d5618d40c82bf", 0x26}, {&(0x7f00000018c0)="379a9ff41ca22abdd5d5ec004b0b47b90a5e240169998b66b528dbbadb9e06c35d75cddde764536bcd6a11b4f171318087630f3e3352a638f906cd46f1576e22b243a59aab9a2229e0c6f1c64698f12e9ca9b2384bd117d7b26c60a5646780077f215ac3367c1814558433b5eeb0a863e952cadd6b3e17a9ca78bc2d36a548bffa21b98a8d59a61ff3e72a7f4051c1a1849b3e8753e29d0a79f9f2b7d5204990cb51aa88035c10941a8e6cee5a50e1e0e354fc9868043897f343be780a4c0a7e15454e827934d6ddafca8578daf37ba62dc0986ddd49f7e42523cfa1419551a003dba0033fe83455ee92d643bfcf", 0xee}, {&(0x7f0000001780)="0c3a4c5e58a38be4aaa19d008493414a006baa65d2688601fd9030f819b012b141fa7c", 0x23}], 0x4}}, {{&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001ac0)="23c9af1a2e4c4753503fe79b5ae279910fbade0ceeae6ddb2eb0636c8d6d35af217af825485c6b61b423c921e1b498aa62d8503b", 0x34}, {&(0x7f0000001b00)="b535d7fdd78dff4617e27db14927244adb9b8c894e73180d2d37b0733c018522641f50152cd92f3aa91d06d1f256032a4127a6818cb3657bd7704592e9e181d2bd66219b155237a3c44d541f156cc17c85ac11979e21ba196eaa4f6c222474bea616412e0649ef640257568e8ab7ef789fdc44b2a749df15f26ba5cf6eb3cca822fd7737c72919a3e358ca5d2cb127a67ad73c49a4a4b7d3da4f27b0d965924c96b3b7a98c4f5b1c3d1f965576b1e5e45d6af4c36888fc75fd2282c9106b23fcfc80f34a26651e7cb66ee1", 0xcb}, {&(0x7f0000001c00)="1956105836ccf85b944d10ce303d21665270a7b8b148d1857c6450e8fb987adeed3fc45e55a18bcde9582a613d9679ea1ad96618617773d81eabf752167724a7aed42fbf522d15ab9a8205d9956be9e3c719667dc6495f23601959387e697d9a25878cfdaab7cb55b5e9154824c92f6824e112a67a114ff7c4196d49a1c5194cf1", 0x81}, {&(0x7f0000001cc0)="0d5a941c207d951cbc77d158115c28", 0xf}, {&(0x7f0000001d00)="776412815f069c7d09cbd7ac0a782e19e172a995c86ad75d0eac12b3ae1bf458082c7c9503a31308b9c17eaa14601521013fe546d989a089584d6ab134d37d5b3d8bcf36132c11c83475a419a07951c222864112f15e682721c85c6de7ba7b88ddf7f5ebcf4e0363ac6467bb6500b98a3d6a23978702795f50dbd09cd0442f147bc2e10c28044ad76ae1ffbf4df1af956df5541da6e5399b9b557ff17eac92aa8f1ea42c17fad54b9e85246738bebbec5c5a98e9873df4fcf28972da6d21c6b3897d94cea6cf88af9a352a1a6aa66461a4429df22813178b582b0700b53c611745388b640b90404a128bd38595356f9cf3038f6f7b4699dd30bf18a6f6dc0ce4e89462375f12cd059ef6a3edf7b4aa1dae907240b8107ad87e8eee3ccb5a8d5af210ac53b3cf3ccab412d653da549d810b6da754054935fdea3b933b1135fb2b7438e3aa942da9b5f519caf05e466b1c7df7a53ee0629933eda9334a30e1a8580b12ea446948edf2df1140fb4a2b6d22d1bd0ce856751d7216790d89b8dd3881b4570d07f05260a51078824a730c8ed4b83395bb5c50b4233dfd2e9573059a3ce4c911923c3c3bb04c8139dc5c736ffa338b93a14f9ac3e6b6c18220e72b09e2527ad64f5868788a7e0bdf8233a3edbf0f1dcba59dd60ca915eca5d2d31bee36e720a6eeda24ab916a466bcb5e0adeece42e90b5c64826ba342c64399ef7ace37411ae87c192bdbd85de934765490a229082176810f47eb6e865100a6bbdfd09410fa9cb793779f772a4157a39761258b0a7f9c29bd8986b32d8f4e8f95466ec79d086159da60e4e4adbfc984b1e90904794b678c750a47b0e0776f2102d81e3808f7804457de0a2ffc5553ec35efa89cab5a8b3af41a5fc9ef1c4ef173e84754e4e52108b6a7dd633952321eacefe39c0999de79090dbb9f27b2ab71df168cb608869a9e86d18e999e117ce0ec5c7bdc225dc03f0a5635c78a9ee2197d7fb4cf1287663ef52fd704b1e7ce721a1b6464c75125e52d1c7c9664ea8b0c762b86981f02af4a9e7ae778b15acf2c483b05c2c3b3e4dd313bf47e6e937ea78f1b46d0b885ba8af9b94c44058939cf85ae4093d0dfb35c4b68faf47f7b800692cfd93a02451bd3799a418eb12807ab0d01fa14cde01d2df90c3d22379a5cab79a8d58903b0c0552dc22abf6055d8a1e69f05aef0840025b37843e0e6282f27558037824a9cc158a94554371b2f46da6bb4b3074f3d03114bf555f30ed01219950b9ed9a77095c82eb0b590f75459f44b5c090e3f6a25759c0686711c6d13557e5f97371a44431143a46d1d3bd6b88fd890de5c205c64a0c81a00692cd2c47b0b61ed3d0ad6a454bde97426db9a4394d04f9cc09fe10cdd80dc414e959a735c559226a9d5a7d02b0b376d841e9991bbc5537719c17ac86445e0beb74b9aa20f85ebf94253dcd7b890fc40cc820c6935de7ebe7f89f2aaa4373824a86c2797bc8013c3684145c539e3c410dbb2779eca456eb0cb16bc9ee944343ba0591e553959f0707c2f3ccdbf68a212d188e4504d59587728621f1d24d799757d85b3ffc81cb4c656b9e8f029419f5091da1aae73b7f7a93fb3c12dc0a094b3da882bc602ba3c58c3f1dbe4a688eb7c80446683b97aba969959439a5351b573d31035e3ff3aaa13961690b3ffe680fb2420d5f1d53e8764107271d0b82b9b555d949af7cb67f6c8e753b090bc7ed23a0cbe80befa6ab40e88979601987f1da363432a9bc78d17a481b5c0f9c3856e4f8aa0d7b9204c492e3043b410e938c6c69536ba0b70c242097f906c194f45d47a4cd8c88b8e6bf1c81ba0140be20ed6b3db5b7415e6a5834dd106f0319fd40e3ce6902aa9b1d7e4889ac9672af246606a75c63d7404e5cbf6dfcdb5f73d542bbcecfb183a9d646fb33420040a0efb6d208175078bdf58a0393fbe2caa16ee13ed7b06bf8385765d48a7367d454b824c93c00d6a2131439131ab84df94976af21375029fc6c304b45116b41f09dda2b60da42a91120d625033aa5a1998c8258c64e438f8d7ca9e4059142a16c677782a71e15c400d57557619bead33da7a0d7fc2707ceb6553701afe081456d1eca1d4c548ecd09a4405f99da5f93d5e304934ae9ab7ad1ed7138615d3ebdb3695ca0bdf6bf7b42d378fd370487486d5648d95e3f26bff49d40190ae39cbf51ce159564da72fad3396f0493ec2f24478c9cb730d9f75af08f6264253edc213cdc27c255cc2810386ff540e9e6e4299822629a3e4790f57f949685cd5c85a962a4d1e02e308879d27b0895da2170107bcaafb4c29a29dde3d5a5e172fb33258d0d14f02cc49a29e7c03a939b589ed0ba7291f93285637ac2476a0045c486823b8d8db96926c8367c920b37520804371ce628fc59796987aee7b65e978a5c9674e60619af9ea9838c0e47f54a7030d2a301816c8cc4bfbfac3c55f0ea5dd7fdb048b1eb15a5a9c32ee2f9fc8deffe3f8fd5ad81e5509bf608a150eac82e6e99390afe5cd17ced09b9c5981371c3c74afdb1d16c5200041e9896bbee3f3f2ca454ef0ffd2f3788d53bab1dada77f1fa6ca19bb393530c37de979e5afec1d658f3dcf7d77ed640ba0166860ddad409aebbd74320bbaffd9a3a33c348823ed2125372bafce0492b330ad8bb9b71dc762473d56021985fbbc1032b83b24179523b1cf9bb71bf178516b3b4e2ed9bf826b363e8a4ef7bf95c745c5053f821d48ee107fdfd897a08ee93bbb11a4296e429fe6f511d0488839d84cdf53d8076b940845d80c9dfa0570c9e244a371b9f1926c2637e2c844f05f0aa2bbe3741b80bed804265c254aa88d9a62d3c175680ba3aad14627f7d22365cea5305f2d3e0ef830efdd6a010d5c27faad17dec654256dd00726bb62c4aa140c7a8562a99da5b46433b27434788a67c504f40ded1c8929136a4cf4c70c2437063f2a72accc8e28c48cc59536088ec3fdcd222ad97e894cb03b724262c86099dedc8e88a0c23bebfd4d551914f001797b1c761b3a6b8cab368f7b80050d0e2a51a8ceeda5c39ab986b41553eb66f4f7f58f4aa1bdcf1146b96b3e6b53e7f4e8d241fa9eb353179ba3a712664ca3c4e7a6ffb5ba45296801718633e17a17df318468cf51977185f3eb028ac6f2ff7810b3abc8e7e9b229dca5840f88c05f952e4eacb7e984e3b524b7fa334bd3f4098b89f263f57710731e8e9376b75557cf0c075da93dc1bb2c9125e65fd4e161f9eb9b4b373c977f4612304cd606675a86c5aea894cd3d5dde810444ee2cd4126354989889cd58f40ed586083533e0c03c4a27724149fed8796026c3b2fde0dcb1cdfa3421236f3abb8c68546272161c5829ba066e7315a2adf8e6ea46719e33444da298a1269b12850236faff268667f0059813b2320979aab94f8b7e8b7d344596ff8d53eb9b4c42ba6051cdd08c2196b775df092f50aaed76d6f73abbe3414c0088e9aa5b7c6093b287601c447107a39d8a493be94268178a27a9b2e2b07ea9926231f48809b439e83a29588de078fa3521e564040c00474d8e7420c6a3b2d7e69a8afbe6c34365205bf68481439289d0d04ef7a2789458612e0e724f4ef6e6b947c36e4d6730fdcc781af72f1d699ad2387b9e0f4402144f58085973016ccb50a7f34c05862ff04ba73b27b670c5716ef6547cfee8d8b3e7daad645a7d894dd7acfb33b6b2097b24326deba9d0044180732b944f627d33eb7c46bf647f734353d6d1e534c73a107d000ca5a936484850c828fb4bc440c7ea36e86e339f10cfb6098d21a04f92a2bd239c804598a26c4bd62aff00b82975074625e604d81ae49385980ae2addaf69eb249399d8343da2bdc17714a1db74c9100dc7a313472811eba01647554cf134d19a329b8f0bea9fb3b301f994ca36ebf9c507c44f3d470f0c46b8721d41d4701b8cce073ae989aaa289428af39dbdf09c76d5cd125077a30cf85093ccce096c9e861f0ed662e276b21171505bfed23e9ce03e1ea2e967a4d7d006387c26ddebad467901ad2969b19fd5fddd1e83b54a745db87faab7a50fb605949f30e5bf6417a5064bab24d9655345639f572de9aa00a9142cc0ac9f0ddcbaa672bcfa9906338524c27be0638f2fb6a9e2292a5bc14c2ee387abb999ce0e952f55340d3164df26b1c4ff4db5bf6284bd61f78c9f3c981d59a61224a6f6680f84e6f3a73b6de5ca997fd2031449f99f30b20855ad2dc88f8bad7d1c8917dc37e3d0c5da3ba838bff03019825771a326d346deefe8863d8972ea7ed3555a9888f1bbae58e5ecf116a210965898ce5d0ce9bd8cbc1941ef8f388c3b5fa982393d2efa50fcd8d666ae4b2cdd9c8a504790b6e4ba5e36bbd739b44a06c10c0899d16a01ebaf8d55e122790c26229cb9b33e1046f880abb6c2ff42e34ccaa7d35a3f845a0144e5baf9eca5cca8d344a214958fcc28866bd2550eda0b3b09906dd19a3a4a02570ab12ba02c15f35a59b28586abaac2de4f9e86c92c54d938a56e0e64770255182f16450eaa5a93f2d0792346650de2cf3baf0fb57c699d842b307f25b018928f4ed25376c7f6a6563cae2921447b1ed6d5f32241c0d177064841a707f27d35a95d8d2e92da2f02019195aa6bec9024d248ef06cfa32a21267db81a7530d840091bcab0059ddc64959802bd4888fd4e45b96a5f4f86efa244a1d117edbb149b2c25f466731900c078f26753a041d0d5c5c5e8d43e515e6405ae75f06de80c21ab83084609d53345f150bfcbabcafecc228b872af8f6b8396d21a9007ba02d98cd00b73390f68dccd6755a5cacca77f7cf457231cfb9b81d207651aa65294c8a31f30a68740da06e1d80428f52ea8638d49597a159ceceff5aff21929bbf17c190c9ecd50fdac98e42fa3533fc3185860a529373fd7e45023902868ec7e595e3a233534415f1178e76e97e85e2b517468c394f8b779388a345540968dfa40175a7dd198847143cc1ea95680850fa1ba7917a99bc121a75d8abdfa03ad9c1209d56472815c8849267e6d5e03cc7e73864df45b3d809abaff11b9c0002322f7ca479a39f24e8cf68f2b68e9b7058afb36a4859fe83f220961d4990deaf378107ab016dfe98d46e6ae0cb77519cc3b4c6ec1a31c091c8f444069b4bf938bd677957b20f7c9ddd098d10c23b8ea5ea293ce9a21ee0466c1d31dd7668be878b971b74c0a5bc108cfc8744a770cde25149e39ab0edda342cbe14616a262a13e954d635c63a86ca1a55e4e19c04b26fa2e2a7a87d479cec17e3279436165474c85642da7bc54c8019ca272856eb172c0e940e2c5f8488521e113c212ee4cb18b02cc76e413d64ffa78d86e2fd07e990047a66efb53663d2b49bed75675893cc8f534f23c6a7bf98566cae78b924f2f69fd7a3ffc90546dd8222222683175515fce079c7a3b1a93aa00051f63db9c52156bd3e537a7cc5d0f5ca466f3b0835a362d5d56cb7c588815e2122a7beef4b4a8bd7b5e9f3e074be4bfe8f816e7391d6ddabf4d007e4e1c63fa568e99eadf931c1aaa5bf012c6ecc14ccabd1b2a3536c610ec4690fa685636f7cedbadfddbc6ec95c7ce13aa979ea71eb609cf32d613bda5d7b9f2dc923e409600405c219f1d5eed82108b14d657fb0d29f521335052e0fd07b74a9348b2dd2a5affe198072f13f404e022fedf71c39d1e7479ea8858c555b1e401f59fd0c6fce7f59b161642e034665ac03e8eecebe668ce1d21e9a754f2c4c07a9a20b63bd7e2a306fac8c900e14e949865a1bad16ab7ee78b3fa3caec25cb46232c596", 0x1000}, {&(0x7f0000002d00)="0991001ad37cb0426f5f0e34d10ce38a3975a472294c55832e62094050ce5228c21049310969d7e7d66d751819a9bd409ce775f1a150bbc650c212bf63d32ee6676575ea069be1600d415bbccfb71dfa67475aeb03b514e5f2f629051479b7dbf62605e13ac0c14690cb2fe2a8783f58a275bbe7cf3efd1077e5f39424e48dccc2c0454ca34e0914995c0fe6afcd85d66af41bb52af3d683fe3083", 0x9b}], 0x6, &(0x7f00000017c0), 0x0, 0x20040800}}, {{&(0x7f0000003180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003200)="62030f8c2775c5d7803e929851c491a4c45d2175e4cbaeed6b1d377a2cc5eefcf851735706134fbfb36cffe7d40885abb783f2bbd617c2aff9d6dd6b0f7f56a395749087f1f7ba0abb128175f9a0d5d488457c45", 0x54}], 0x1, &(0x7f0000002ec0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c0000000000000000000000000000008f92f3582de25b52abd8723205c2ee99d23ae4c429dc47e7fcf0661f4d0868d0a91a06f8777afcc0880bc5606dc7e9aa216e2bf13413cc804e4ebe55bc6675eb825d06", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x88}}], 0x4, 0x4800) stat(&(0x7f0000000600)='./file0/../file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r13, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r14, @ANYRESHEX=r12, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r14], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r16) r17 = getegid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x4}, [{0x2, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x2, r8}, {0x8, 0x1, r10}, {0x8, 0x1, r14}, {0x8, 0x6, r16}, {0x8, 0x5, r17}, {0x8, 0x5, r18}], {0x10, 0x3}, {0x20, 0x2}}, 0x84, 0x2) openat2(r0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x288100, 0x0, 0x20}, 0x18) 0s ago: executing program 8 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r8}, 0x10) kernel console output (not intermixed with test programs): bhid 4-1:0.0: can't add hid device: -71 [ 494.083359][ T513] usbhid: probe of 4-1:0.0 failed with error -71 [ 494.119148][ T513] usb 4-1: USB disconnect, device number 64 [ 494.219852][ T6] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 494.227947][ T6] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 494.240478][ T6] usb 3-1: config 0 has no interface number 0 [ 494.254514][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 494.263576][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.271445][ T6] usb 3-1: Product: syz [ 494.275549][ T6] usb 3-1: Manufacturer: syz [ 494.280015][ T6] usb 3-1: SerialNumber: syz [ 494.287517][ T6] usb 3-1: config 0 descriptor?? [ 494.445791][ T9283] loop4: detected capacity change from 0 to 256 [ 494.730434][ T353] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 495.136146][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 495.136163][ T28] audit: type=1400 audit(1743742330.307:3099): avc: denied { ioctl } for pid=9291 comm="syz.0.2715" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55275 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.171199][ T353] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 495.180913][ T353] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 495.191272][ T353] usb 5-1: config 0 has no interface number 0 [ 495.206986][ T353] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 495.220109][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.232158][ T353] usb 5-1: Product: syz [ 495.238132][ T353] usb 5-1: Manufacturer: syz [ 495.245773][ T353] usb 5-1: SerialNumber: syz [ 495.269753][ T353] usb 5-1: config 0 descriptor?? [ 495.334900][ T6] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 495.344077][ T6] usb 3-1: No valid video chain found. [ 495.354848][ T6] usb 3-1: USB disconnect, device number 54 [ 495.705453][ T28] audit: type=1400 audit(1743742330.617:3100): avc: denied { mount } for pid=9291 comm="syz.0.2715" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 495.777772][ T28] audit: type=1400 audit(1743742330.947:3101): avc: denied { write } for pid=9300 comm="syz.3.2717" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 495.801234][ T28] audit: type=1400 audit(1743742330.977:3102): avc: denied { open } for pid=9300 comm="syz.3.2717" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 495.825533][ T28] audit: type=1400 audit(1743742330.977:3103): avc: denied { block_suspend } for pid=9300 comm="syz.3.2717" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.616617][ T353] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 496.623036][ T353] usb 5-1: No valid video chain found. [ 496.629315][ T353] usb 5-1: USB disconnect, device number 66 [ 497.837822][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 497.862636][ T353] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 497.874190][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2729'. [ 498.018612][ T9340] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2730'. [ 498.060123][ T353] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 498.068044][ T353] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 498.106333][ T353] usb 4-1: config 0 has no interface number 0 [ 498.113740][ T353] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 498.122686][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.130502][ T353] usb 4-1: Product: syz [ 498.134460][ T353] usb 4-1: Manufacturer: syz [ 498.138909][ T353] usb 4-1: SerialNumber: syz [ 498.144404][ T353] usb 4-1: config 0 descriptor?? [ 498.328733][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 498.519861][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.530613][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.540156][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 498.549072][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.639671][ T387] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 498.659711][ T24] usb 5-1: config 0 descriptor?? [ 498.832762][ T387] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 498.856731][ T387] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 498.867631][ T387] usb 3-1: config 0 has no interface number 0 [ 498.891174][ T387] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 498.906629][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.926927][ T387] usb 3-1: Product: syz [ 498.931039][ T387] usb 3-1: Manufacturer: syz [ 498.935640][ T387] usb 3-1: SerialNumber: syz [ 498.963608][ T387] usb 3-1: config 0 descriptor?? [ 498.967397][ T353] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 498.975249][ T353] usb 4-1: No valid video chain found. [ 498.984322][ T353] usb 4-1: USB disconnect, device number 65 [ 499.004563][ T28] audit: type=1404 audit(1743742334.177:3104): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 499.033129][ T28] audit: type=1404 audit(1743742334.197:3105): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 499.077926][ T28] audit: type=1400 audit(1743742334.247:3106): avc: denied { bpf } for pid=9354 comm="syz.0.2734" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.112473][ T28] audit: type=1400 audit(1743742334.247:3107): avc: denied { map_create } for pid=9354 comm="syz.0.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.144209][ T28] audit: type=1400 audit(1743742334.287:3108): avc: denied { mounton } for pid=9354 comm="syz.0.2734" path="/485/file0" dev="tmpfs" ino=2614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 499.173753][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 499.179798][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 499.207915][ T24] usb 5-1: USB disconnect, device number 67 [ 499.779172][ T387] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 499.785386][ T387] usb 3-1: No valid video chain found. [ 499.808618][ T387] usb 3-1: USB disconnect, device number 55 [ 500.160706][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 500.160725][ T28] audit: type=1400 audit(1743742335.337:3135): avc: denied { read write } for pid=9373 comm="syz.4.2739" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.199094][ T28] audit: type=1400 audit(1743742335.367:3136): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 500.233460][ T28] audit: type=1400 audit(1743742335.367:3137): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.272412][ T9377] loop4: detected capacity change from 0 to 256 [ 500.273979][ T28] audit: type=1400 audit(1743742335.367:3138): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.342285][ T28] audit: type=1400 audit(1743742335.367:3139): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.396021][ T28] audit: type=1400 audit(1743742335.367:3140): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.427349][ T28] audit: type=1400 audit(1743742335.367:3141): avc: denied { open } for pid=9373 comm="syz.4.2739" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.466598][ T28] audit: type=1400 audit(1743742335.367:3142): avc: denied { create } for pid=9373 comm="syz.4.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 500.493840][ T28] audit: type=1400 audit(1743742335.367:3143): avc: denied { bind } for pid=9373 comm="syz.4.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 500.520963][ T28] audit: type=1400 audit(1743742335.367:3144): avc: denied { listen } for pid=9373 comm="syz.4.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 500.618738][ T387] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 500.728690][ T6] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 500.822811][ T387] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 500.830905][ T387] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 500.841069][ T387] usb 5-1: config 0 has no interface number 0 [ 500.860675][ T387] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 500.869944][ T387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.878176][ T387] usb 5-1: Product: syz [ 500.909950][ T6] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 500.918472][ T6] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 500.930149][ T6] usb 3-1: config 0 has no interface number 0 [ 500.943686][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 500.953012][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.963845][ T387] usb 5-1: Manufacturer: syz [ 500.968417][ T387] usb 5-1: SerialNumber: syz [ 500.982837][ T6] usb 3-1: Product: syz [ 500.989834][ T6] usb 3-1: Manufacturer: syz [ 500.991618][ T387] usb 5-1: config 0 descriptor?? [ 500.995585][ T6] usb 3-1: SerialNumber: syz [ 501.007633][ T6] usb 3-1: config 0 descriptor?? [ 502.028773][ T353] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 502.058070][ T6] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 502.064945][ T6] usb 3-1: No valid video chain found. [ 502.081811][ T6] usb 3-1: USB disconnect, device number 56 [ 502.219860][ T353] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 502.227869][ T353] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 502.234729][ T387] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 502.238251][ T353] usb 4-1: config 0 has no interface number 0 [ 502.245869][ T387] usb 5-1: No valid video chain found. [ 502.254090][ T353] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 502.259584][ T387] usb 5-1: USB disconnect, device number 68 [ 502.264648][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.289530][ T353] usb 4-1: Product: syz [ 502.293529][ T353] usb 4-1: Manufacturer: syz [ 502.297952][ T353] usb 4-1: SerialNumber: syz [ 502.306933][ T353] usb 4-1: config 0 descriptor?? [ 503.213963][ T353] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 503.226898][ T353] usb 4-1: No valid video chain found. [ 503.294350][ T353] usb 4-1: USB disconnect, device number 66 [ 503.727906][ T9448] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2761'. [ 503.779858][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 503.829258][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2757'. [ 504.108689][ T342] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 504.204417][ T9459] loop4: detected capacity change from 0 to 256 [ 504.289975][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.300713][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.310283][ T342] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 504.319112][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.345658][ T342] usb 2-1: config 0 descriptor?? [ 504.488720][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 504.661197][ T9463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2766'. [ 504.679899][ T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 504.695292][ T24] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 504.735679][ T24] usb 5-1: config 0 has no interface number 0 [ 504.747460][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 504.781352][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.792430][ T24] usb 5-1: Product: syz [ 504.796834][ T24] usb 5-1: Manufacturer: syz [ 504.803118][ T9467] incfs: Backing dir is not set, filesystem can't be mounted. [ 504.810456][ T9467] incfs: mount failed -2 [ 504.816050][ T24] usb 5-1: SerialNumber: syz [ 504.836873][ T24] usb 5-1: config 0 descriptor?? [ 505.105341][ T342] usbhid 2-1:0.0: can't add hid device: -71 [ 505.111531][ T513] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 505.119534][ T342] usbhid: probe of 2-1:0.0 failed with error -71 [ 505.136413][ T342] usb 2-1: USB disconnect, device number 55 [ 505.274433][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 505.274452][ T28] audit: type=1400 audit(1743742340.447:3252): avc: denied { read } for pid=9471 comm="syz.3.2769" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.334027][ T28] audit: type=1400 audit(1743742340.447:3253): avc: denied { open } for pid=9471 comm="syz.3.2769" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.361277][ T28] audit: type=1400 audit(1743742340.447:3254): avc: denied { ioctl } for pid=9471 comm="syz.3.2769" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.386482][ T28] audit: type=1400 audit(1743742340.447:3255): avc: denied { execmem } for pid=9471 comm="syz.3.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 505.409100][ T513] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 505.417032][ T513] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 505.428388][ T513] usb 3-1: config 0 has no interface number 0 [ 505.436619][ T513] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 505.447276][ T513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.456319][ T513] usb 3-1: Product: syz [ 505.460899][ T513] usb 3-1: Manufacturer: syz [ 505.465337][ T513] usb 3-1: SerialNumber: syz [ 505.471470][ T513] usb 3-1: config 0 descriptor?? [ 505.565216][ T24] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 505.572183][ T24] usb 5-1: No valid video chain found. [ 505.582795][ T24] usb 5-1: USB disconnect, device number 69 [ 505.801477][ T28] audit: type=1400 audit(1743742340.977:3256): avc: denied { create } for pid=9478 comm="syz.1.2770" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.826301][ T28] audit: type=1400 audit(1743742340.977:3257): avc: denied { ioctl } for pid=9478 comm="syz.1.2770" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=57606 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 506.342571][ T28] audit: type=1400 audit(1743742341.517:3258): avc: denied { unmount } for pid=756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 506.384180][ T28] audit: type=1400 audit(1743742341.557:3259): avc: denied { create } for pid=9483 comm="syz.3.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.404144][ T28] audit: type=1400 audit(1743742341.587:3260): avc: denied { setopt } for pid=9483 comm="syz.3.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.548716][ T513] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 506.560181][ T513] usb 3-1: No valid video chain found. [ 506.566169][ T513] usb 3-1: USB disconnect, device number 57 [ 506.584968][ T9493] loop4: detected capacity change from 0 to 256 [ 507.208824][ T28] audit: type=1400 audit(1743742342.377:3261): avc: denied { write } for pid=9496 comm="syz.1.2775" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 507.978964][ T9512] loop4: detected capacity change from 0 to 256 [ 507.999004][ T353] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 508.179977][ T353] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 508.188111][ T353] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 508.199001][ T353] usb 3-1: config 0 has no interface number 0 [ 508.206827][ T353] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 508.216927][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.258941][ T353] usb 3-1: Product: syz [ 508.262956][ T353] usb 3-1: Manufacturer: syz [ 508.267444][ T353] usb 3-1: SerialNumber: syz [ 508.278055][ T353] usb 3-1: config 0 descriptor?? [ 509.650498][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 509.698973][ T223] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 509.735619][ T9535] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2787'. [ 509.889907][ T223] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 509.897868][ T223] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 509.918723][ T223] usb 2-1: config 0 has no interface number 0 [ 509.930102][ T223] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 509.948697][ T223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.956705][ T223] usb 2-1: Product: syz [ 509.960970][ T223] usb 2-1: Manufacturer: syz [ 509.965424][ T223] usb 2-1: SerialNumber: syz [ 509.971153][ T223] usb 2-1: config 0 descriptor?? [ 510.058696][ T387] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 510.073836][ T353] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 510.080124][ T353] usb 3-1: No valid video chain found. [ 510.086050][ T353] usb 3-1: USB disconnect, device number 58 [ 510.249842][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.260794][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.270396][ T387] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 510.279289][ T387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.287753][ T387] usb 5-1: config 0 descriptor?? [ 510.618704][ T489] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 510.739195][ T223] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 510.745390][ T223] usb 2-1: No valid video chain found. [ 510.759576][ T223] usb 2-1: USB disconnect, device number 56 [ 510.842381][ T387] usbhid 5-1:0.0: can't add hid device: -71 [ 510.851236][ T387] usbhid: probe of 5-1:0.0 failed with error -71 [ 510.863040][ T387] usb 5-1: USB disconnect, device number 70 [ 510.869920][ T489] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 510.877830][ T489] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 510.935527][ T489] usb 4-1: config 0 has no interface number 0 [ 511.024682][ T489] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 511.033974][ T489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.544291][ T489] usb 4-1: Product: syz [ 511.703120][ T489] usb 4-1: Manufacturer: syz [ 511.707657][ T489] usb 4-1: SerialNumber: syz [ 511.716654][ T489] usb 4-1: config 0 descriptor?? [ 511.979410][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 511.979440][ T28] audit: type=1400 audit(1743742347.147:3263): avc: denied { watch } for pid=9555 comm="syz.0.2792" path="/492/file0" dev="tmpfs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 512.057166][ T28] audit: type=1404 audit(1743742347.197:3264): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 512.073858][ T28] audit: type=1404 audit(1743742347.197:3265): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 512.099269][ T28] audit: type=1400 audit(1743742347.247:3266): avc: denied { bpf } for pid=9560 comm="syz.1.2793" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.154579][ T28] audit: type=1400 audit(1743742347.247:3267): avc: denied { prog_load } for pid=9560 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.179915][ T28] audit: type=1400 audit(1743742347.267:3268): avc: denied { perfmon } for pid=9560 comm="syz.1.2793" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.242092][ T28] audit: type=1400 audit(1743742347.277:3269): avc: denied { create } for pid=9560 comm="syz.1.2793" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 512.304238][ T28] audit: type=1400 audit(1743742347.287:3270): avc: denied { ioctl } for pid=9560 comm="syz.1.2793" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58558 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 512.335134][ T28] audit: type=1400 audit(1743742347.307:3271): avc: denied { execmem } for pid=9560 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 512.820889][ T28] audit: type=1400 audit(1743742347.387:3272): avc: denied { write } for pid=9538 comm="syz.3.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 513.024519][ T489] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 513.030919][ T489] usb 4-1: No valid video chain found. [ 513.082874][ T489] usb 4-1: USB disconnect, device number 67 [ 513.357829][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2798'. [ 514.218748][ T8920] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 514.649783][ T8920] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 514.657732][ T8920] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 514.667780][ T8920] usb 4-1: config 0 has no interface number 0 [ 514.675177][ T8920] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 514.684261][ T8920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.692130][ T8920] usb 4-1: Product: syz [ 514.696113][ T8920] usb 4-1: Manufacturer: syz [ 514.700596][ T223] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 514.708013][ T8920] usb 4-1: SerialNumber: syz [ 514.713905][ T8920] usb 4-1: config 0 descriptor?? [ 514.828698][ T489] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 514.889848][ T223] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 514.897890][ T223] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 514.908003][ T223] usb 2-1: config 0 has no interface number 0 [ 514.915443][ T223] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 514.944123][ T223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.952088][ T223] usb 2-1: Product: syz [ 514.956092][ T223] usb 2-1: Manufacturer: syz [ 514.960539][ T223] usb 2-1: SerialNumber: syz [ 514.973133][ T223] usb 2-1: config 0 descriptor?? [ 515.009869][ T489] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 515.017829][ T489] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 515.028550][ T489] usb 3-1: config 0 has no interface number 0 [ 515.036329][ T489] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 515.046117][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.054490][ T489] usb 3-1: Product: syz [ 515.059186][ T489] usb 3-1: Manufacturer: syz [ 515.063880][ T489] usb 3-1: SerialNumber: syz [ 515.069089][ T9608] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2805'. [ 515.092592][ T489] usb 3-1: config 0 descriptor?? [ 515.587847][ T8920] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 515.599035][ T8920] usb 4-1: No valid video chain found. [ 515.606872][ T8920] usb 4-1: USB disconnect, device number 68 [ 515.842095][ T223] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 515.848463][ T223] usb 2-1: No valid video chain found. [ 515.854895][ T223] usb 2-1: USB disconnect, device number 57 [ 516.086242][ T489] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 516.098667][ T489] usb 3-1: No valid video chain found. [ 516.114431][ T489] usb 3-1: USB disconnect, device number 59 [ 516.359391][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.366253][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.374043][ T9621] device bridge_slave_0 entered promiscuous mode [ 516.381006][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.387852][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.396340][ T9621] device bridge_slave_1 entered promiscuous mode [ 516.564096][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.571000][ T9621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.578068][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.584882][ T9621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.642510][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.658899][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.679483][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.705431][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.721102][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.727998][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.737661][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.746419][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.753320][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.775480][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.783771][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.803249][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.816706][ T9621] device veth0_vlan entered promiscuous mode [ 516.823798][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.832307][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.840401][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.857859][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.867793][ T9621] device veth1_macvtap entered promiscuous mode [ 516.879542][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.895732][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.944307][ T9638] loop4: detected capacity change from 0 to 256 [ 516.970279][ T10] device veth0 left promiscuous mode [ 516.975539][ T9636] loop3: detected capacity change from 0 to 8192 [ 516.977614][ T10] bridge0: port 3(veth0) entered disabled state [ 517.115431][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 517.115548][ T28] audit: type=1400 audit(1743742352.207:3356): avc: denied { map_create } for pid=9632 comm="syz.2.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.223059][ T10] device bridge_slave_1 left promiscuous mode [ 517.254545][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.257099][ T28] audit: type=1400 audit(1743742352.207:3357): avc: denied { map_read map_write } for pid=9632 comm="syz.2.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.281218][ T28] audit: type=1400 audit(1743742352.257:3358): avc: denied { mount } for pid=9632 comm="syz.2.2812" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 517.303758][ T10] device bridge_slave_0 left promiscuous mode [ 517.310174][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.318506][ T10] device veth1_to_batadv left promiscuous mode [ 517.324786][ T353] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 517.332786][ T10] device veth1_macvtap left promiscuous mode [ 517.338968][ T10] device veth0_vlan left promiscuous mode [ 517.406858][ T223] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 517.830638][ T28] audit: type=1400 audit(1743742353.007:3359): avc: denied { unmount } for pid=9621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 517.851040][ T353] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 517.868780][ T353] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 517.886493][ T353] usb 2-1: config 0 has no interface number 0 [ 517.893791][ T223] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 517.901996][ T223] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 517.912336][ T223] usb 5-1: config 0 has no interface number 0 [ 517.920575][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 517.929736][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.938403][ T353] usb 2-1: Product: syz [ 518.178847][ T342] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 518.199616][ T223] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 518.208495][ T223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.216466][ T353] usb 2-1: Manufacturer: syz [ 518.220850][ T353] usb 2-1: SerialNumber: syz [ 518.226416][ T353] usb 2-1: config 0 descriptor?? [ 518.231316][ T223] usb 5-1: Product: syz [ 518.235348][ T223] usb 5-1: Manufacturer: syz [ 518.240500][ T223] usb 5-1: SerialNumber: syz [ 518.245998][ T223] usb 5-1: config 0 descriptor?? [ 518.388703][ T342] usb 4-1: Using ep0 maxpacket: 16 [ 518.395045][ T342] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.406241][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 518.412705][ T342] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 518.421581][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.430326][ T342] usb 4-1: config 0 descriptor?? [ 518.830141][ T28] audit: type=1400 audit(1743742353.977:3360): avc: denied { read } for pid=9657 comm="syz.2.2818" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 518.860120][ T28] audit: type=1400 audit(1743742353.977:3361): avc: denied { open } for pid=9657 comm="syz.2.2818" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 518.943111][ T28] audit: type=1400 audit(1743742354.077:3362): avc: denied { read write } for pid=9657 comm="syz.2.2818" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 519.025446][ T28] audit: type=1400 audit(1743742354.077:3363): avc: denied { open } for pid=9657 comm="syz.2.2818" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 519.101936][ T28] audit: type=1400 audit(1743742354.087:3364): avc: denied { ioctl } for pid=9657 comm="syz.2.2818" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 519.206361][ T28] audit: type=1400 audit(1743742354.377:3365): avc: denied { setopt } for pid=9646 comm="syz.3.2815" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 519.236703][ T342] usbhid 4-1:0.0: can't add hid device: -71 [ 519.255066][ T342] usbhid: probe of 4-1:0.0 failed with error -71 [ 519.314575][ T342] usb 4-1: USB disconnect, device number 69 [ 519.457919][ T353] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 519.466239][ T353] usb 2-1: No valid video chain found. [ 519.475090][ T353] usb 2-1: USB disconnect, device number 58 [ 519.600412][ T223] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 519.608712][ T223] usb 5-1: No valid video chain found. [ 519.615136][ T223] usb 5-1: USB disconnect, device number 71 [ 520.005821][ T350] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 520.132158][ T9681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2824'. [ 520.189913][ T350] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 520.197889][ T350] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 520.207989][ T350] usb 3-1: config 0 has no interface number 0 [ 520.221284][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 520.230383][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.238427][ T350] usb 3-1: Product: syz [ 520.242416][ T350] usb 3-1: Manufacturer: syz [ 520.246805][ T350] usb 3-1: SerialNumber: syz [ 520.251906][ T350] usb 3-1: config 0 descriptor?? [ 520.436278][ T223] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 520.530769][ T9691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2826'. [ 520.619812][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.630780][ T223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.640703][ T223] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 520.650016][ T223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.662329][ T223] usb 2-1: config 0 descriptor?? [ 520.759527][ T350] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 520.765743][ T350] usb 3-1: No valid video chain found. [ 520.774340][ T350] usb 3-1: USB disconnect, device number 60 [ 521.131485][ T223] usbhid 2-1:0.0: can't add hid device: -71 [ 521.138171][ T223] usbhid: probe of 2-1:0.0 failed with error -71 [ 521.148936][ T223] usb 2-1: USB disconnect, device number 59 [ 521.188682][ T513] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 521.378717][ T513] usb 4-1: Using ep0 maxpacket: 16 [ 521.384898][ T513] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.395975][ T513] usb 4-1: config 0 interface 0 has no altsetting 0 [ 521.402459][ T513] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 521.411355][ T513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.421068][ T513] usb 4-1: config 0 descriptor?? [ 521.708697][ T223] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 521.915808][ T223] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 521.924024][ T223] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 521.935010][ T223] usb 3-1: config 0 has no interface number 0 [ 521.946045][ T223] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 521.955128][ T223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.963473][ T223] usb 3-1: Product: syz [ 522.322275][ T223] usb 3-1: Manufacturer: syz [ 522.346856][ T513] usbhid 4-1:0.0: can't add hid device: -71 [ 522.401036][ T223] usb 3-1: SerialNumber: syz [ 522.403986][ T513] usbhid: probe of 4-1:0.0 failed with error -71 [ 522.406745][ T223] usb 3-1: config 0 descriptor?? [ 522.437788][ T513] usb 4-1: USB disconnect, device number 70 [ 522.572561][ T9716] loop4: detected capacity change from 0 to 256 [ 522.696959][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 522.696977][ T28] audit: type=1400 audit(1743742357.867:3378): avc: denied { mount } for pid=9717 comm="syz.1.2835" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 522.753832][ T28] audit: type=1400 audit(1743742357.927:3379): avc: denied { remount } for pid=9717 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 522.779890][ T28] audit: type=1400 audit(1743742357.957:3380): avc: denied { unmount } for pid=696 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 522.856291][ T223] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 522.863107][ T223] usb 3-1: No valid video chain found. [ 522.868828][ T353] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 522.901920][ T223] usb 3-1: USB disconnect, device number 61 [ 523.272519][ T9730] loop3: detected capacity change from 0 to 8192 [ 523.299885][ T353] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 523.308051][ T353] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 523.318545][ T353] usb 5-1: config 0 has no interface number 0 [ 523.326460][ T353] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 523.336102][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.344173][ T353] usb 5-1: Product: syz [ 523.348333][ T353] usb 5-1: Manufacturer: syz [ 523.376376][ T353] usb 5-1: SerialNumber: syz [ 523.381756][ T353] usb 5-1: config 0 descriptor?? [ 523.848367][ T28] audit: type=1400 audit(1743742359.017:3381): avc: denied { watch } for pid=9737 comm="syz.1.2841" path="/595/file0" dev="tmpfs" ino=3271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 523.902247][ T28] audit: type=1404 audit(1743742359.067:3382): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 523.919561][ T28] audit: type=1404 audit(1743742359.097:3383): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 523.938694][ T6] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 523.947914][ T28] audit: type=1400 audit(1743742359.117:3384): avc: denied { read write } for pid=9742 comm="syz.3.2843" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 523.977754][ T28] audit: type=1400 audit(1743742359.117:3385): avc: denied { open } for pid=9742 comm="syz.3.2843" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 524.001202][ T28] audit: type=1400 audit(1743742359.117:3386): avc: denied { ioctl } for pid=9742 comm="syz.3.2843" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 524.026117][ T28] audit: type=1400 audit(1743742359.127:3387): avc: denied { ioctl } for pid=9733 comm="syz.2.2840" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.648721][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 524.654822][ T6] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.678684][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 524.688459][ T6] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 524.758976][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.783793][ T6] usb 3-1: config 0 descriptor?? [ 525.079213][ T9763] loop3: detected capacity change from 0 to 8192 [ 525.102566][ T353] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 525.115932][ T353] usb 5-1: No valid video chain found. [ 525.122585][ T353] usb 5-1: USB disconnect, device number 72 [ 525.234352][ T9771] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2849'. [ 525.936605][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 525.983601][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 525.992115][ T6] usb 3-1: USB disconnect, device number 62 [ 526.083995][ T9785] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2853'. [ 526.248686][ T1441] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 526.368714][ T223] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 526.449850][ T1441] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 526.457885][ T1441] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 526.467980][ T1441] usb 2-1: config 0 has no interface number 0 [ 526.475272][ T1441] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 526.484234][ T1441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.492324][ T1441] usb 2-1: Product: syz [ 526.496667][ T1441] usb 2-1: Manufacturer: syz [ 526.501171][ T1441] usb 2-1: SerialNumber: syz [ 526.508931][ T1441] usb 2-1: config 0 descriptor?? [ 526.549835][ T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.560604][ T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.570326][ T223] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 526.579286][ T223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.588100][ T223] usb 5-1: config 0 descriptor?? [ 527.069144][ T9793] loop3: detected capacity change from 0 to 256 [ 527.637213][ T223] usbhid 5-1:0.0: can't add hid device: -71 [ 527.643034][ T353] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 527.650455][ T223] usbhid: probe of 5-1:0.0 failed with error -71 [ 527.658930][ T1441] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 527.660923][ T223] usb 5-1: USB disconnect, device number 73 [ 527.667527][ T1441] usb 2-1: No valid video chain found. [ 527.679714][ T1441] usb 2-1: USB disconnect, device number 60 [ 527.839858][ T353] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 527.847756][ T353] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 527.857836][ T353] usb 4-1: config 0 has no interface number 0 [ 527.865121][ T353] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 527.874553][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.882427][ T353] usb 4-1: Product: syz [ 527.886348][ T353] usb 4-1: Manufacturer: syz [ 527.890816][ T353] usb 4-1: SerialNumber: syz [ 527.896089][ T353] usb 4-1: config 0 descriptor?? [ 528.060027][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 528.060046][ T28] audit: type=1400 audit(1743742363.237:3439): avc: denied { watch watch_reads } for pid=9801 comm="syz.2.2857" path="/404" dev="tmpfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 528.092061][ T28] audit: type=1404 audit(1743742363.267:3440): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 528.117256][ T28] audit: type=1404 audit(1743742363.287:3441): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 528.168799][ T28] audit: type=1400 audit(1743742363.287:3442): avc: denied { bpf } for pid=9792 comm="syz.3.2855" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.242475][ T28] audit: type=1400 audit(1743742363.287:3443): avc: denied { map_create } for pid=9792 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.302462][ T28] audit: type=1400 audit(1743742363.287:3444): avc: denied { prog_load } for pid=9792 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.353760][ T28] audit: type=1400 audit(1743742363.287:3445): avc: denied { perfmon } for pid=9792 comm="syz.3.2855" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.408719][ T28] audit: type=1400 audit(1743742363.287:3446): avc: denied { create } for pid=9792 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.439376][ T28] audit: type=1400 audit(1743742363.287:3447): avc: denied { write } for pid=9792 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.509943][ T9814] loop4: detected capacity change from 0 to 256 [ 528.528661][ T28] audit: type=1400 audit(1743742363.287:3448): avc: denied { read } for pid=9792 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.644227][ T353] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 528.658683][ T353] usb 4-1: No valid video chain found. [ 528.665475][ T353] usb 4-1: USB disconnect, device number 71 [ 528.747940][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.754935][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.762929][ T9815] device bridge_slave_0 entered promiscuous mode [ 528.774875][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.781814][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.789298][ T9815] device bridge_slave_1 entered promiscuous mode [ 528.838720][ T223] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 528.899668][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.906553][ T9815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.913714][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.920575][ T9815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.943783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.951683][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.959222][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.969883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 528.977984][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.984853][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.993323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.001549][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.008382][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.023977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.032872][ T223] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 529.034102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.041002][ T223] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 529.061674][ T223] usb 5-1: config 0 has no interface number 0 [ 529.062842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.069679][ T223] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 529.082711][ T9815] device veth0_vlan entered promiscuous mode [ 529.084702][ T223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.091373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.098279][ T223] usb 5-1: Product: syz [ 529.107488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.110161][ T223] usb 5-1: Manufacturer: syz [ 529.117191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.121382][ T223] usb 5-1: SerialNumber: syz [ 529.134565][ T223] usb 5-1: config 0 descriptor?? [ 529.143091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.152799][ T9815] device veth1_macvtap entered promiscuous mode [ 529.163958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.174320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.178779][ T342] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 529.191889][ T10] device bridge_slave_1 left promiscuous mode [ 529.197843][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.206178][ T10] device bridge_slave_0 left promiscuous mode [ 529.212386][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.220786][ T10] device veth1_macvtap left promiscuous mode [ 529.226632][ T10] device veth0_vlan left promiscuous mode [ 529.378691][ T342] usb 3-1: Using ep0 maxpacket: 16 [ 529.384811][ T342] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.395688][ T342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 529.402083][ T342] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 529.427385][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.443002][ T9827] loop3: detected capacity change from 0 to 256 [ 529.449688][ T342] usb 3-1: config 0 descriptor?? [ 529.720472][ T223] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 529.726680][ T223] usb 5-1: No valid video chain found. [ 529.732130][ T353] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 529.739071][ T513] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 529.741369][ T223] usb 5-1: USB disconnect, device number 74 [ 529.929893][ T353] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 529.937906][ T353] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 529.947897][ T353] usb 4-1: config 0 has no interface number 0 [ 529.955789][ T353] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 529.958730][ T513] usb 2-1: Using ep0 maxpacket: 16 [ 529.964952][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.972129][ T513] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.978466][ T353] usb 4-1: Product: syz [ 529.989284][ T513] usb 2-1: config 0 interface 0 has no altsetting 0 [ 529.992851][ T353] usb 4-1: Manufacturer: syz [ 529.999673][ T513] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 530.003820][ T353] usb 4-1: SerialNumber: syz [ 530.013106][ T513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.022157][ T353] usb 4-1: config 0 descriptor?? [ 530.026641][ T513] usb 2-1: config 0 descriptor?? [ 530.064722][ T342] usbhid 3-1:0.0: can't add hid device: -71 [ 530.070620][ T342] usbhid: probe of 3-1:0.0 failed with error -71 [ 530.080405][ T342] usb 3-1: USB disconnect, device number 63 [ 530.558693][ T8920] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 530.625141][ T353] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 530.634514][ T353] usb 4-1: No valid video chain found. [ 530.642141][ T353] usb 4-1: USB disconnect, device number 72 [ 530.663593][ T513] usbhid 2-1:0.0: can't add hid device: -71 [ 530.669450][ T513] usbhid: probe of 2-1:0.0 failed with error -71 [ 530.677327][ T513] usb 2-1: USB disconnect, device number 61 [ 530.738721][ T8920] usb 5-1: Using ep0 maxpacket: 16 [ 530.746847][ T8920] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.760699][ T8920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 530.767170][ T8920] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 530.776068][ T8920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.784417][ T8920] usb 5-1: config 0 descriptor?? [ 531.304143][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.368694][ T9855] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2872'. [ 531.395696][ T8920] usbhid 5-1:0.0: can't add hid device: -71 [ 531.402054][ T8920] usbhid: probe of 5-1:0.0 failed with error -71 [ 531.422859][ T8920] usb 5-1: USB disconnect, device number 75 [ 531.967118][ T9863] loop4: detected capacity change from 0 to 8192 [ 533.328560][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 533.328583][ T28] audit: type=1400 audit(1743742368.487:3541): avc: denied { read write } for pid=9872 comm="syz.1.2877" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.387030][ T28] audit: type=1400 audit(1743742368.487:3542): avc: denied { open } for pid=9872 comm="syz.1.2877" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.419169][ T28] audit: type=1400 audit(1743742368.487:3543): avc: denied { ioctl } for pid=9872 comm="syz.1.2877" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.434687][ T9877] loop4: detected capacity change from 0 to 8192 [ 533.478306][ T28] audit: type=1400 audit(1743742368.537:3544): avc: denied { unmount } for pid=756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 533.578759][ T8920] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 534.711918][ T28] audit: type=1400 audit(1743742369.887:3545): avc: denied { create } for pid=9885 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.737773][ T28] audit: type=1400 audit(1743742369.887:3546): avc: denied { write } for pid=9885 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.766907][ T28] audit: type=1400 audit(1743742369.887:3547): avc: denied { read } for pid=9885 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.828824][ T8920] usb 2-1: Using ep0 maxpacket: 16 [ 534.837332][ T8920] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.853098][ T9893] FAULT_INJECTION: forcing a failure. [ 534.853098][ T9893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.858722][ T28] audit: type=1400 audit(1743742369.887:3548): avc: denied { ioctl } for pid=9885 comm="syz.2.2881" path="socket:[60439]" dev="sockfs" ino=60439 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.885047][ T9893] CPU: 1 PID: 9893 Comm: syz.2.2883 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 534.892263][ T8920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 534.901066][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 534.901098][ T9893] Call Trace: [ 534.901106][ T9893] [ 534.901121][ T9893] dump_stack_lvl+0x151/0x1b7 [ 534.901165][ T9893] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 534.918157][ T8920] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 534.920510][ T9893] ? __sched_text_start+0x8/0x8 [ 534.920540][ T9893] dump_stack+0x15/0x18 [ 534.923672][ T8920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.927801][ T9893] should_fail_ex+0x3d0/0x520 [ 534.938678][ T28] audit: type=1400 audit(1743742369.887:3549): avc: denied { module_request } for pid=9885 comm="syz.2.2881" kmod="net-pf-16-proto-16-family-fou" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 534.941949][ T9893] should_fail+0xb/0x10 [ 534.948246][ T8920] usb 2-1: config 0 descriptor?? [ 534.950623][ T9893] should_fail_usercopy+0x1a/0x20 [ 534.950649][ T9893] _copy_from_user+0x1e/0xc0 [ 534.950676][ T9893] do_sys_poll+0x244/0x1220 [ 534.950695][ T9893] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 534.950724][ T9893] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 534.978696][ T28] audit: type=1400 audit(1743742369.907:3550): avc: denied { read } for pid=9889 comm="syz.0.2880" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 534.986070][ T9893] ? _parse_integer_limit+0x19b/0x1e0 [ 535.047405][ T9893] ? poll_select_finish+0x7b0/0x7b0 [ 535.052429][ T9893] ? _parse_integer+0x40/0x40 [ 535.056962][ T9893] ? __sched_text_start+0x8/0x8 [ 535.061630][ T9893] ? __kasan_check_write+0x14/0x20 [ 535.066577][ T9893] ? __switch_to+0x62c/0x1190 [ 535.071090][ T9893] ? __kasan_check_read+0x11/0x20 [ 535.075956][ T9893] ? sigprocmask+0x280/0x280 [ 535.080538][ T9893] ? __se_sys_ppoll+0xbd/0x330 [ 535.085131][ T9893] ? __se_sys_ppoll+0xf2/0x330 [ 535.089733][ T9893] __se_sys_ppoll+0x29c/0x330 [ 535.094252][ T9893] ? __x64_sys_ppoll+0xd0/0xd0 [ 535.098842][ T9893] ? __kasan_check_write+0x14/0x20 [ 535.103787][ T9893] ? fpregs_restore_userregs+0x130/0x290 [ 535.109256][ T9893] __x64_sys_ppoll+0xbf/0xd0 [ 535.113683][ T9893] x64_sys_call+0x721/0x9a0 [ 535.118020][ T9893] do_syscall_64+0x3b/0xb0 [ 535.122276][ T9893] ? clear_bhb_loop+0x55/0xb0 [ 535.126788][ T9893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.132514][ T9893] RIP: 0033:0x7eff5b58d169 [ 535.136772][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.156212][ T9893] RSP: 002b:00007eff5c3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 535.164454][ T9893] RAX: ffffffffffffffda RBX: 00007eff5b7a5fa0 RCX: 00007eff5b58d169 [ 535.172264][ T9893] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 535.180087][ T9893] RBP: 00007eff5c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 535.187890][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.195708][ T9893] R13: 0000000000000000 R14: 00007eff5b7a5fa0 R15: 00007ffc51d52998 [ 535.203523][ T9893] [ 535.256672][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 535.287894][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2879'. [ 535.989240][ T8920] usbhid 2-1:0.0: can't add hid device: -71 [ 535.995027][ T8920] usbhid: probe of 2-1:0.0 failed with error -71 [ 536.010024][ T8920] usb 2-1: USB disconnect, device number 62 [ 536.805989][ T9931] loop4: detected capacity change from 0 to 256 [ 537.284113][ T9943] FAULT_INJECTION: forcing a failure. [ 537.284113][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 537.296630][ T9943] CPU: 1 PID: 9943 Comm: syz.4.2895 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 537.306279][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.316176][ T9943] Call Trace: [ 537.319297][ T9943] [ 537.322067][ T9943] dump_stack_lvl+0x151/0x1b7 [ 537.326582][ T9943] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 537.331882][ T9943] dump_stack+0x15/0x18 [ 537.335881][ T9943] should_fail_ex+0x3d0/0x520 [ 537.340389][ T9943] ? getname_flags+0xba/0x520 [ 537.345014][ T9943] __should_failslab+0xaf/0xf0 [ 537.349618][ T9943] should_failslab+0x9/0x20 [ 537.353951][ T9943] kmem_cache_alloc+0x3b/0x320 [ 537.358554][ T9943] ? vfs_write+0x952/0xed0 [ 537.362809][ T9943] ? __kasan_slab_free+0x11/0x20 [ 537.367582][ T9943] getname_flags+0xba/0x520 [ 537.371923][ T9943] getname+0x19/0x20 [ 537.375661][ T9943] do_sys_openat2+0xe0/0x870 [ 537.380079][ T9943] ? bit_wait_io_timeout+0x120/0x120 [ 537.385202][ T9943] ? __mutex_lock_slowpath+0x10/0x10 [ 537.390322][ T9943] ? do_sys_open+0x220/0x220 [ 537.394746][ T9943] ? fput+0x15b/0x1b0 [ 537.398565][ T9943] ? ksys_write+0x260/0x2c0 [ 537.402926][ T9943] __x64_sys_open+0x221/0x270 [ 537.407421][ T9943] ? do_sys_openat2+0x870/0x870 [ 537.412106][ T9943] ? debug_smp_processor_id+0x17/0x20 [ 537.417318][ T9943] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 537.423217][ T9943] ? exit_to_user_mode_prepare+0x39/0xa0 [ 537.428683][ T9943] x64_sys_call+0x36/0x9a0 [ 537.432934][ T9943] do_syscall_64+0x3b/0xb0 [ 537.437191][ T9943] ? clear_bhb_loop+0x55/0xb0 [ 537.441700][ T9943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.447428][ T9943] RIP: 0033:0x7efe08f8d169 [ 537.451682][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.471129][ T9943] RSP: 002b:00007efe09d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 537.479372][ T9943] RAX: ffffffffffffffda RBX: 00007efe091a6160 RCX: 00007efe08f8d169 [ 537.487179][ T9943] RDX: 0000000000000044 RSI: 000000000014927e RDI: 0000200000000300 [ 537.494991][ T9943] RBP: 00007efe09d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 537.502801][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.510620][ T9943] R13: 0000000000000000 R14: 00007efe091a6160 R15: 00007ffe23c642b8 [ 537.518433][ T9943] [ 537.661001][ T9952] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2902'. [ 537.868675][ T489] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 537.900440][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2903'. [ 537.988658][ T342] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 538.049848][ T489] usb 2-1: unable to get BOS descriptor set [ 538.056453][ T489] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.069494][ T489] usb 2-1: config 1 interface 0 has no altsetting 0 [ 538.077560][ T489] usb 2-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 538.086973][ T489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.095035][ T489] usb 2-1: Product: 、 [ 538.099242][ T489] usb 2-1: SerialNumber: ૥댋ඖ沦軍铹೼샩躧꠵봛뱪뛜嬁됄轶댁礆띃偭뷭넻稝믏ⷑᶙᶱ䗾㞌辛誾➕桼䑝㪴쓡䀹꒻챸⹍ᬙ벅瀏侦㙑뛼ꆫ袇墺쬛촗洭䒐阼鍛ޞ种ꞹᾟ釉䮖怵嶟먖僘◐湏鉐※㔬꒜汦湍꤯춐ஆ陕珄캐桲ᔒ䟇㘠턭黂㱫ᘢ漰ෛၩ㫂䆞ꀵꃂ匳쉝秚驠녈 [ 538.179893][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.190949][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.200597][ T342] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 538.210041][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.230338][ T342] usb 4-1: config 0 descriptor?? [ 538.345422][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.353831][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.382222][ T489] usbhid 2-1:1.0: can't add hid device: -71 [ 538.387777][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 538.387797][ T28] audit: type=1400 audit(1743742373.557:3611): avc: denied { create } for pid=9960 comm="syz.1.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.388262][ T489] usbhid: probe of 2-1:1.0 failed with error -71 [ 538.398370][ T28] audit: type=1400 audit(1743742373.577:3612): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.419537][ T489] usb 2-1: USB disconnect, device number 63 [ 538.443062][ T28] audit: type=1400 audit(1743742373.577:3613): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.470749][ T28] audit: type=1400 audit(1743742373.577:3614): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 538.504182][ T28] audit: type=1400 audit(1743742373.577:3615): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.526751][ T28] audit: type=1400 audit(1743742373.577:3616): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 538.549488][ T1441] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 538.561450][ T28] audit: type=1400 audit(1743742373.577:3617): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 538.590145][ T28] audit: type=1400 audit(1743742373.577:3618): avc: denied { write } for pid=9960 comm="syz.1.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 538.611850][ T28] audit: type=1400 audit(1743742373.717:3619): avc: denied { create } for pid=9962 comm="syz.2.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.632948][ T28] audit: type=1400 audit(1743742373.717:3620): avc: denied { bind } for pid=9962 comm="syz.2.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.758769][ T1441] usb 5-1: Using ep0 maxpacket: 16 [ 538.766889][ T1441] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.796640][ T1441] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.827113][ T1441] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 538.867746][ T1441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.875769][ T489] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 538.919898][ T1441] usb 5-1: config 0 descriptor?? [ 538.962846][ T342] usbhid 4-1:0.0: can't add hid device: -71 [ 538.969689][ T342] usbhid: probe of 4-1:0.0 failed with error -71 [ 538.983828][ T342] usb 4-1: USB disconnect, device number 73 [ 539.137774][ T489] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 539.145797][ T489] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 539.155991][ T489] usb 2-1: config 0 has no interface number 0 [ 539.165519][ T489] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 539.174656][ T489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.182860][ T489] usb 2-1: Product: syz [ 539.186951][ T489] usb 2-1: Manufacturer: syz [ 539.191388][ T489] usb 2-1: SerialNumber: syz [ 539.196704][ T489] usb 2-1: config 0 descriptor?? [ 539.574573][ T1441] usbhid 5-1:0.0: can't add hid device: -71 [ 539.581828][ T1441] usbhid: probe of 5-1:0.0 failed with error -71 [ 539.595733][ T1441] usb 5-1: USB disconnect, device number 76 [ 540.289307][T10003] FAULT_INJECTION: forcing a failure. [ 540.289307][T10003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.304746][T10003] CPU: 1 PID: 10003 Comm: syz.3.2917 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 540.314500][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 540.324386][T10003] Call Trace: [ 540.327504][T10003] [ 540.330285][T10003] dump_stack_lvl+0x151/0x1b7 [ 540.334797][T10003] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 540.340091][T10003] ? path_openat+0x10fd/0x2d60 [ 540.344692][T10003] ? x64_sys_call+0x6bf/0x9a0 [ 540.349203][T10003] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.355109][T10003] dump_stack+0x15/0x18 [ 540.359097][T10003] should_fail_ex+0x3d0/0x520 [ 540.363613][T10003] should_fail+0xb/0x10 [ 540.367603][T10003] should_fail_usercopy+0x1a/0x20 [ 540.372463][T10003] _copy_from_user+0x1e/0xc0 [ 540.376885][T10003] binder_ioctl_write_read+0x153/0xb710 [ 540.382270][T10003] ? __kasan_check_write+0x14/0x20 [ 540.387217][T10003] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 540.392513][T10003] ? avc_has_perm+0x16f/0x260 [ 540.397035][T10003] ? 0xffffffffa0000918 [ 540.401015][T10003] ? is_bpf_text_address+0x172/0x190 [ 540.406135][T10003] ? stack_trace_save+0x1c0/0x1c0 [ 540.410997][T10003] ? binder_has_work_ilocked+0x500/0x500 [ 540.416461][T10003] ? __kernel_text_address+0xd/0x40 [ 540.421497][T10003] ? unwind_get_return_address+0x4d/0x90 [ 540.426968][T10003] ? arch_stack_walk+0xf3/0x140 [ 540.431668][T10003] ? _parse_integer_limit+0x19b/0x1e0 [ 540.436860][T10003] ? avc_has_extended_perms+0x90b/0x10f0 [ 540.442329][T10003] ? memcpy+0x56/0x70 [ 540.446149][T10003] ? avc_has_extended_perms+0xad7/0x10f0 [ 540.451618][T10003] ? memset+0x35/0x40 [ 540.455520][T10003] ? binder_debug+0x15b/0x1c0 [ 540.460034][T10003] ? binder_get_thread+0xe4/0x830 [ 540.464895][T10003] ? _binder_inner_proc_unlock+0x50/0x50 [ 540.470362][T10003] ? __kasan_check_write+0x14/0x20 [ 540.475307][T10003] ? _raw_spin_lock+0xa4/0x1b0 [ 540.479909][T10003] ? kstrtouint_from_user+0x124/0x180 [ 540.485118][T10003] ? _raw_spin_unlock+0x4c/0x70 [ 540.489806][T10003] ? binder_get_thread+0x185/0x830 [ 540.494750][T10003] binder_ioctl+0x3ff/0x22d0 [ 540.499179][T10003] ? ioctl_has_perm+0x3f0/0x560 [ 540.503866][T10003] ? binder_poll+0x2b0/0x2b0 [ 540.508289][T10003] ? has_cap_mac_admin+0x3c0/0x3c0 [ 540.513240][T10003] ? vfs_write+0x952/0xed0 [ 540.517493][T10003] ? selinux_file_ioctl+0x3cc/0x540 [ 540.522524][T10003] ? __mutex_lock_slowpath+0x10/0x10 [ 540.527647][T10003] ? selinux_file_alloc_security+0x120/0x120 [ 540.533462][T10003] ? __fget_files+0x2cb/0x330 [ 540.537978][T10003] ? security_file_ioctl+0x84/0xb0 [ 540.542926][T10003] ? binder_poll+0x2b0/0x2b0 [ 540.547347][T10003] __se_sys_ioctl+0x114/0x190 [ 540.551865][T10003] __x64_sys_ioctl+0x7b/0x90 [ 540.556289][T10003] x64_sys_call+0x98/0x9a0 [ 540.560539][T10003] do_syscall_64+0x3b/0xb0 [ 540.564790][T10003] ? clear_bhb_loop+0x55/0xb0 [ 540.569306][T10003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.575035][T10003] RIP: 0033:0x7fa80f58d169 [ 540.579287][T10003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.598728][T10003] RSP: 002b:00007fa810371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.606972][T10003] RAX: ffffffffffffffda RBX: 00007fa80f7a5fa0 RCX: 00007fa80f58d169 [ 540.614783][T10003] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 540.622594][T10003] RBP: 00007fa810371090 R08: 0000000000000000 R09: 0000000000000000 [ 540.630412][T10003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.638222][T10003] R13: 0000000000000000 R14: 00007fa80f7a5fa0 R15: 00007fffe10c39f8 [ 540.646038][T10003] [ 540.673071][T10003] binder: 10002:10003 ioctl c0306201 2000000001c0 returned -14 [ 540.804750][ T489] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 540.818674][ T489] usb 2-1: No valid video chain found. [ 540.827628][ T489] usb 2-1: USB disconnect, device number 64 [ 540.853875][T10014] loop3: detected capacity change from 0 to 8192 [ 541.068827][ T353] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 541.440691][T10033] loop3: detected capacity change from 0 to 8192 [ 541.518722][ T353] usb 5-1: Using ep0 maxpacket: 16 [ 541.525005][ T353] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.577751][ T353] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.584610][ T353] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 541.593855][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.602927][ T353] usb 5-1: config 0 descriptor?? [ 542.298367][T10060] FAULT_INJECTION: forcing a failure. [ 542.298367][T10060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.369982][T10060] CPU: 0 PID: 10060 Comm: syz.2.2932 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 542.379730][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.382617][T10062] loop3: detected capacity change from 0 to 8192 [ 542.389619][T10060] Call Trace: [ 542.389631][T10060] [ 542.389640][T10060] dump_stack_lvl+0x151/0x1b7 [ 542.389673][T10060] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 542.411494][T10060] ? avc_denied+0x1b0/0x1b0 [ 542.415833][T10060] dump_stack+0x15/0x18 [ 542.419822][T10060] should_fail_ex+0x3d0/0x520 [ 542.424339][T10060] should_fail+0xb/0x10 [ 542.428438][T10060] should_fail_usercopy+0x1a/0x20 [ 542.433301][T10060] strncpy_from_user+0x24/0x2b0 [ 542.437988][T10060] do_tcp_setsockopt+0x181/0x2330 [ 542.442849][T10060] ? tcp_set_window_clamp+0x5d0/0x5d0 [ 542.448053][T10060] ? selinux_socket_getsockopt+0x340/0x340 [ 542.453699][T10060] tcp_setsockopt+0x57/0xe0 [ 542.458034][T10060] sock_common_setsockopt+0xa2/0xc0 [ 542.463066][T10060] ? sock_common_recvmsg+0x240/0x240 [ 542.468197][T10060] __sys_setsockopt+0x4dc/0x8b0 [ 542.472877][T10060] ? fput+0x15b/0x1b0 [ 542.476700][T10060] ? __ia32_sys_recv+0xb0/0xb0 [ 542.481298][T10060] ? debug_smp_processor_id+0x17/0x20 [ 542.486503][T10060] __x64_sys_setsockopt+0xbf/0xd0 [ 542.491363][T10060] x64_sys_call+0x1a2/0x9a0 [ 542.495701][T10060] do_syscall_64+0x3b/0xb0 [ 542.499954][T10060] ? clear_bhb_loop+0x55/0xb0 [ 542.504470][T10060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.510212][T10060] RIP: 0033:0x7eff5b58d169 [ 542.514463][T10060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.533891][T10060] RSP: 002b:00007eff5c393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.542139][T10060] RAX: ffffffffffffffda RBX: 00007eff5b7a6160 RCX: 00007eff5b58d169 [ 542.549970][T10060] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 542.557759][T10060] RBP: 00007eff5c393090 R08: 0000000000000004 R09: 0000000000000000 [ 542.565568][T10060] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 542.573380][T10060] R13: 0000000000000000 R14: 00007eff5b7a6160 R15: 00007ffc51d52998 [ 542.581221][T10060] [ 542.584832][ T353] usbhid 5-1:0.0: can't add hid device: -71 [ 542.590829][ T353] usbhid: probe of 5-1:0.0 failed with error -71 [ 542.619532][ T353] usb 5-1: USB disconnect, device number 77 [ 543.148776][ T353] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 543.739808][ T353] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 543.747735][ T353] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 543.778671][ T353] usb 2-1: config 0 has no interface number 0 [ 543.786016][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 543.808746][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.816585][ T353] usb 2-1: Product: syz [ 543.828644][ T353] usb 2-1: Manufacturer: syz [ 543.833071][ T353] usb 2-1: SerialNumber: syz [ 543.848915][ T353] usb 2-1: config 0 descriptor?? [ 543.930940][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 543.930959][ T28] audit: type=1400 audit(1743742379.107:3651): avc: denied { create } for pid=10084 comm="syz.4.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 543.958507][T10085] binder: 10084:10085 ioctl 8917 2000000000c0 returned -22 [ 543.965715][ T1441] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 543.998669][ T28] audit: type=1400 audit(1743742379.127:3652): avc: denied { write } for pid=10084 comm="syz.4.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.041570][T10087] loop4: detected capacity change from 0 to 256 [ 544.049250][ T28] audit: type=1400 audit(1743742379.157:3653): avc: denied { getopt } for pid=10084 comm="syz.4.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 544.168787][ T1441] usb 4-1: Using ep0 maxpacket: 16 [ 544.176710][ T1441] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.188488][ T1441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 544.195338][ T1441] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 544.204757][ T1441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.432359][ T489] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 544.476159][ T1441] usb 4-1: config 0 descriptor?? [ 544.570386][ T28] audit: type=1400 audit(1743742379.747:3654): avc: denied { read } for pid=10107 comm="syz.2.2952" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 544.659885][ T489] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 544.670233][ T353] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 544.676437][ T353] usb 2-1: No valid video chain found. [ 544.684703][ T353] usb 2-1: USB disconnect, device number 65 [ 544.729271][ T489] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 544.739701][ T489] usb 5-1: config 0 has no interface number 0 [ 544.747211][ T489] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 544.756330][ T489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.764246][ T489] usb 5-1: Product: syz [ 544.768173][ T489] usb 5-1: Manufacturer: syz [ 544.772648][ T489] usb 5-1: SerialNumber: syz [ 544.777833][ T489] usb 5-1: config 0 descriptor?? [ 544.888905][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 545.109760][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 545.117779][ T24] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 545.127986][ T24] usb 3-1: config 0 has no interface number 0 [ 545.134505][ T1441] usbhid 4-1:0.0: can't add hid device: -71 [ 545.140444][ T1441] usbhid: probe of 4-1:0.0 failed with error -71 [ 545.148211][ T1441] usb 4-1: USB disconnect, device number 74 [ 545.154103][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 545.163857][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.173269][ T24] usb 3-1: Product: syz [ 545.177297][ T24] usb 3-1: Manufacturer: syz [ 545.181752][ T24] usb 3-1: SerialNumber: syz [ 545.186920][ T24] usb 3-1: config 0 descriptor?? [ 545.346818][ T28] audit: type=1400 audit(1743742380.517:3655): avc: denied { watch_reads } for pid=10119 comm="syz.1.2956" path="/14" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 545.387391][ T28] audit: type=1400 audit(1743742380.517:3656): avc: denied { watch } for pid=10119 comm="syz.1.2956" path="/14/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.415237][ T28] audit: type=1404 audit(1743742380.547:3657): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 545.443591][ T28] audit: type=1404 audit(1743742380.547:3658): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 545.467910][ T28] audit: type=1400 audit(1743742380.587:3659): avc: denied { bpf } for pid=10110 comm="syz.2.2953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 545.558690][ T28] audit: type=1400 audit(1743742380.587:3660): avc: denied { map_create } for pid=10110 comm="syz.2.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.745411][T10128] loop3: detected capacity change from 0 to 256 [ 546.123856][ T24] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 546.133920][ T489] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 546.143992][ T489] usb 5-1: No valid video chain found. [ 546.149800][ T24] usb 3-1: No valid video chain found. [ 546.176788][ T489] usb 5-1: USB disconnect, device number 78 [ 546.182872][ T24] usb 3-1: USB disconnect, device number 64 [ 546.348771][ T342] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 546.570984][ T342] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 546.579642][ T342] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 546.590153][ T342] usb 4-1: config 0 has no interface number 0 [ 546.597616][ T342] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 546.606905][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.615471][ T342] usb 4-1: Product: syz [ 546.619746][ T342] usb 4-1: Manufacturer: syz [ 546.624164][ T342] usb 4-1: SerialNumber: syz [ 546.630450][ T342] usb 4-1: config 0 descriptor?? [ 546.748688][ T8920] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 546.935019][ T8920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.946299][ T8920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.955976][ T8920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.969324][ T8920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.984579][ T8920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.824651][ T8920] usb 2-1: config 0 descriptor?? [ 547.883736][T10168] loop4: detected capacity change from 0 to 2048 [ 547.973277][T10168] loop4: detected capacity change from 0 to 256 [ 547.976622][ T342] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 547.985808][ T342] usb 4-1: No valid video chain found. [ 548.001420][ T342] usb 4-1: USB disconnect, device number 75 [ 548.375164][ T350] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 548.384124][ T8920] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 548.499740][ T8920] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 548.576536][ T8920] usb 2-1: USB disconnect, device number 66 [ 548.958374][ T350] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 548.968732][ T350] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 548.984140][ T350] usb 3-1: config 0 has no interface number 0 [ 548.995161][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 549.006201][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.018228][ T350] usb 3-1: Product: syz [ 549.027454][ T350] usb 3-1: Manufacturer: syz [ 549.035029][ T350] usb 3-1: SerialNumber: syz [ 549.044343][ T350] usb 3-1: config 0 descriptor?? [ 549.053164][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 549.053182][ T28] audit: type=1400 audit(1743742384.227:3698): avc: denied { create } for pid=10184 comm="syz.3.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 549.083059][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.090619][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.098082][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.105381][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.112736][ T28] audit: type=1400 audit(1743742384.257:3699): avc: denied { read write } for pid=10184 comm="syz.3.2974" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 549.136289][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.147981][T10186] loop3: detected capacity change from 0 to 512 [ 549.154190][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.162177][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.169801][ T28] audit: type=1400 audit(1743742384.257:3700): avc: denied { open } for pid=10184 comm="syz.3.2974" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 549.198783][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.206453][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.294219][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.301672][ T28] audit: type=1400 audit(1743742384.387:3701): avc: denied { write } for pid=10188 comm="syz.1.2975" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 549.328682][ T28] audit: type=1400 audit(1743742384.397:3702): avc: denied { create } for pid=10188 comm="syz.1.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.350267][ T28] audit: type=1400 audit(1743742384.397:3703): avc: denied { ioctl } for pid=10188 comm="syz.1.2975" path="socket:[60229]" dev="sockfs" ino=60229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.375325][ T28] audit: type=1400 audit(1743742384.397:3704): avc: denied { connect } for pid=10188 comm="syz.1.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.378573][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.397531][T10194] FAULT_INJECTION: forcing a failure. [ 549.397531][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.414958][ T28] audit: type=1400 audit(1743742384.397:3705): avc: denied { write } for pid=10188 comm="syz.1.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.434404][T10194] CPU: 0 PID: 10194 Comm: syz.0.2976 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 549.435261][T10186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.444207][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.444225][T10194] Call Trace: [ 549.444232][T10194] [ 549.444242][T10194] dump_stack_lvl+0x151/0x1b7 [ 549.444277][T10194] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 549.478574][T10194] ? kstrtouint+0xf6/0x180 [ 549.482829][T10194] ? _kstrtol+0x150/0x150 [ 549.486994][T10194] dump_stack+0x15/0x18 [ 549.490983][T10194] should_fail_ex+0x3d0/0x520 [ 549.495500][T10194] should_fail+0xb/0x10 [ 549.499489][T10194] should_fail_usercopy+0x1a/0x20 [ 549.504349][T10194] _copy_from_user+0x1e/0xc0 [ 549.508776][T10194] copy_msghdr_from_user+0xaa/0x670 [ 549.513816][T10194] ? sendmsg_copy_msghdr+0x70/0x70 [ 549.518760][T10194] __sys_sendmsg+0x236/0x390 [ 549.523185][T10194] ? ____sys_sendmsg+0x9a0/0x9a0 [ 549.527961][T10194] ? __kasan_check_write+0x14/0x20 [ 549.532902][T10194] ? mutex_unlock+0xb2/0x260 [ 549.537334][T10194] ? __kasan_check_write+0x14/0x20 [ 549.542280][T10194] ? __ia32_sys_read+0x90/0x90 [ 549.546881][T10194] ? debug_smp_processor_id+0x17/0x20 [ 549.552088][T10194] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 549.558076][T10194] __x64_sys_sendmsg+0x7f/0x90 [ 549.562677][T10194] x64_sys_call+0x16a/0x9a0 [ 549.567020][T10194] do_syscall_64+0x3b/0xb0 [ 549.571269][T10194] ? clear_bhb_loop+0x55/0xb0 [ 549.575780][T10194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.581510][T10194] RIP: 0033:0x7f427958d169 [ 549.585762][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.605208][T10194] RSP: 002b:00007f427a469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.613450][T10194] RAX: ffffffffffffffda RBX: 00007f42797a5fa0 RCX: 00007f427958d169 [ 549.621267][T10194] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 549.629069][T10194] RBP: 00007f427a469090 R08: 0000000000000000 R09: 0000000000000000 [ 549.636884][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.644697][T10194] R13: 0000000000000000 R14: 00007f42797a5fa0 R15: 00007ffea69d5be8 [ 549.652514][T10194] [ 549.656850][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.657931][T10186] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.670009][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.684592][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.698689][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.707407][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.726299][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.738691][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.748844][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.751309][ T28] audit: type=1400 audit(1743742384.837:3706): avc: denied { mount } for pid=10184 comm="syz.3.2974" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 549.760189][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.797546][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.805023][ T24] hid-generic 00A0:0008:0003.0020: unknown main item tag 0x0 [ 549.813788][ T24] hid-generic 00A0:0008:0003.0020: hidraw0: HID v0.05 Device [syz0] on syz0 [ 549.868739][ T28] audit: type=1400 audit(1743742385.037:3707): avc: denied { nlmsg_read } for pid=10184 comm="syz.3.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 549.904871][T10186] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #12: comm syz.3.2974: Directory hole found for htree leaf block 0 [ 549.939259][T10186] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 549.999653][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.019529][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.038302][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.040050][ T350] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 550.058816][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.072158][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.085999][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.107002][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.108701][ T350] usb 3-1: No valid video chain found. [ 550.121348][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.142183][ T350] usb 3-1: USB disconnect, device number 65 [ 550.145284][ T9621] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 550.437976][ T9621] EXT4-fs (loop3): unmounting filesystem. [ 550.778784][ T342] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 550.960604][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.967462][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.974945][T10218] device bridge_slave_0 entered promiscuous mode [ 550.981177][ T342] usb 5-1: Using ep0 maxpacket: 8 [ 550.982938][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.987179][ T342] usb 5-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 550.993007][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.010093][ T342] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 551.012304][T10218] device bridge_slave_1 entered promiscuous mode [ 551.019352][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.037114][ T342] usb 5-1: config 0 descriptor?? [ 551.092370][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.099248][T10218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.106338][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.113177][T10218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.135976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.143572][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.151368][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.162632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.170761][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.177605][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.186280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.188737][ T350] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 551.195265][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.208360][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.220120][ T354] device bridge_slave_1 left promiscuous mode [ 551.226091][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.233667][ T354] device bridge_slave_0 left promiscuous mode [ 551.239660][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.249100][ T354] device veth1_macvtap left promiscuous mode [ 551.254961][ T354] device veth0_vlan left promiscuous mode [ 551.265143][ T353] usb 5-1: USB disconnect, device number 79 [ 551.390242][ T350] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 551.398215][ T350] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 551.398895][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.408844][ T350] usb 3-1: config 0 has no interface number 0 [ 551.416511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.424524][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 551.461916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.733126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.777268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.833657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.886854][T10218] device veth0_vlan entered promiscuous mode [ 551.929440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.990591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.607976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 552.615226][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.624360][T10230] syz.4.2988[10230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.624442][T10230] syz.4.2988[10230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.662562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 552.672167][ T350] usb 3-1: Product: syz [ 552.685700][ T350] usb 3-1: Manufacturer: syz [ 552.690209][ T350] usb 3-1: SerialNumber: syz [ 552.693529][T10218] device veth1_macvtap entered promiscuous mode [ 552.695660][ T350] usb 3-1: config 0 descriptor?? [ 552.718868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.727633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.736365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.744968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.878177][T10242] syz.1.2990[10242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.878561][T10242] syz.1.2990[10242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.900496][T10242] FAULT_INJECTION: forcing a failure. [ 552.900496][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.924552][T10242] CPU: 1 PID: 10242 Comm: syz.1.2990 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 552.934272][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.944164][T10242] Call Trace: [ 552.947289][T10242] [ 552.950066][T10242] dump_stack_lvl+0x151/0x1b7 [ 552.954664][T10242] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 552.959966][T10242] dump_stack+0x15/0x18 [ 552.963949][T10242] should_fail_ex+0x3d0/0x520 [ 552.968465][T10242] should_fail+0xb/0x10 [ 552.972468][T10242] should_fail_usercopy+0x1a/0x20 [ 552.977315][T10242] copy_to_user_nofault+0x7c/0x140 [ 552.982265][T10242] bpf_probe_write_user+0x96/0xf0 [ 552.987214][T10242] bpf_prog_6303d92f98284ad8+0x3b/0x3f [ 552.992513][T10242] bpf_trace_run4+0x18d/0x2f0 [ 552.997025][T10242] ? bpf_trace_run3+0x2e0/0x2e0 [ 553.001709][T10242] ? __this_cpu_preempt_check+0x13/0x20 [ 553.007104][T10242] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 553.013596][T10242] ? probe_sched_switch+0x60/0x80 [ 553.018458][T10242] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 553.024621][T10242] __bpf_trace_sched_switch+0xe/0x10 [ 553.029740][T10242] __traceiter_sched_switch+0x91/0xc0 [ 553.034951][T10242] __schedule+0x1313/0x1560 [ 553.039293][T10242] ? __sched_text_start+0x8/0x8 [ 553.043982][T10242] ? __kasan_check_write+0x14/0x20 [ 553.048925][T10242] ? proc_fail_nth_write+0x20b/0x290 [ 553.054040][T10242] ? selinux_file_permission+0x2bb/0x560 [ 553.059509][T10242] preempt_schedule_irq+0xc7/0x140 [ 553.064467][T10242] ? preempt_schedule_notrace+0x140/0x140 [ 553.070031][T10242] raw_irqentry_exit_cond_resched+0x2a/0x30 [ 553.075741][T10242] irqentry_exit+0x30/0x40 [ 553.079993][T10242] sysvec_reschedule_ipi+0x8f/0x170 [ 553.085030][T10242] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 553.090320][T10242] RIP: 0010:iterate_dir+0x0/0x600 [ 553.095179][T10242] Code: e8 a5 e3 50 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ff f8 ff ff 48 89 df e8 dd 93 f1 ff e9 f2 f8 ff ff cc cc cc cc cc cc cc cc <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 75 c0 49 [ 553.114624][T10242] RSP: 0018:ffffc90003337d98 EFLAGS: 00000282 [ 553.120524][T10242] RAX: 0000000000000000 RBX: ffffc90003337e20 RCX: ffff88811b68e540 [ 553.128333][T10242] RDX: 0000000000000001 RSI: ffffc90003337e20 RDI: ffff888134ca8480 [ 553.136148][T10242] RBP: ffffc90003337ee0 R08: ffffffff81cbbe30 R09: fffff52000666f9d [ 553.143959][T10242] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000666fc0 [ 553.151772][T10242] R13: ffff888134ca8480 R14: 1ffff92000666fc8 R15: 1ffff92000666fc7 [ 553.159586][T10242] ? __se_sys_getdents+0x1d0/0x4b0 [ 553.164532][T10242] ? __se_sys_getdents+0x1eb/0x4b0 [ 553.169479][T10242] ? __x64_sys_getdents+0x90/0x90 [ 553.174339][T10242] ? fillonedir+0x430/0x430 [ 553.178679][T10242] ? fpregs_restore_userregs+0x130/0x290 [ 553.184147][T10242] __x64_sys_getdents+0x7b/0x90 [ 553.188835][T10242] x64_sys_call+0x24a/0x9a0 [ 553.193176][T10242] do_syscall_64+0x3b/0xb0 [ 553.197425][T10242] ? clear_bhb_loop+0x55/0xb0 [ 553.201937][T10242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.207661][T10242] RIP: 0033:0x7f617798d169 [ 553.211919][T10242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.231365][T10242] RSP: 002b:00007f61787cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 553.239609][T10242] RAX: ffffffffffffffda RBX: 00007f6177ba6160 RCX: 00007f617798d169 [ 553.247415][T10242] RDX: 0000000000000ffa RSI: 0000200000001080 RDI: 0000000000000008 [ 553.255224][T10242] RBP: 00007f61787cc090 R08: 0000000000000000 R09: 0000000000000000 [ 553.263038][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.270847][T10242] R13: 0000000000000000 R14: 00007f6177ba6160 R15: 00007ffcb0a3c328 [ 553.278669][T10242] [ 553.281550][ C1] sched: RT throttling activated [ 553.768815][T10248] loop8: detected capacity change from 0 to 8192 [ 553.889331][T10258] FAULT_INJECTION: forcing a failure. [ 553.889331][T10258] name failslab, interval 1, probability 0, space 0, times 0 [ 553.901875][T10258] CPU: 1 PID: 10258 Comm: syz.0.2995 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 553.911598][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.921492][T10258] Call Trace: [ 553.924615][T10258] [ 553.927395][T10258] dump_stack_lvl+0x151/0x1b7 [ 553.931910][T10258] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 553.937202][T10258] ? ___ratelimit+0xb2/0x5a0 [ 553.941627][T10258] dump_stack+0x15/0x18 [ 553.945616][T10258] should_fail_ex+0x3d0/0x520 [ 553.950135][T10258] ? copy_fs_struct+0x4e/0x230 [ 553.954729][T10258] __should_failslab+0xaf/0xf0 [ 553.959429][T10258] should_failslab+0x9/0x20 [ 553.963759][T10258] kmem_cache_alloc+0x3b/0x320 [ 553.968357][T10258] ? __schedule+0xcbd/0x1560 [ 553.972787][T10258] copy_fs_struct+0x4e/0x230 [ 553.977214][T10258] ksys_unshare+0x3c2/0x980 [ 553.981552][T10258] ? sighand_ctor+0x60/0x60 [ 553.985893][T10258] ? fpregs_restore_userregs+0x130/0x290 [ 553.991359][T10258] ? switch_fpu_return+0xe/0x10 [ 553.996047][T10258] __x64_sys_unshare+0x38/0x40 [ 554.000643][T10258] x64_sys_call+0x728/0x9a0 [ 554.004983][T10258] do_syscall_64+0x3b/0xb0 [ 554.009237][T10258] ? clear_bhb_loop+0x55/0xb0 [ 554.013750][T10258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.019480][T10258] RIP: 0033:0x7f427958d169 [ 554.023730][T10258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.043178][T10258] RSP: 002b:00007f427a427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 554.051415][T10258] RAX: ffffffffffffffda RBX: 00007f42797a6160 RCX: 00007f427958d169 [ 554.059225][T10258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 554.067038][T10258] RBP: 00007f427a427090 R08: 0000000000000000 R09: 0000000000000000 [ 554.074855][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.082671][T10258] R13: 0000000000000000 R14: 00007f42797a6160 R15: 00007ffea69d5be8 [ 554.090612][T10258] [ 554.099563][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 554.099580][ T28] audit: type=1400 audit(1743742389.277:3742): avc: denied { watch watch_reads } for pid=10255 comm="syz.4.2997" path="/559" dev="tmpfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 554.153931][ T28] audit: type=1400 audit(1743742389.317:3743): avc: denied { watch } for pid=10255 comm="syz.4.2997" path="/559/file0" dev="tmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 554.228724][ T28] audit: type=1404 audit(1743742389.327:3744): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 554.244975][ T28] audit: type=1400 audit(1743742389.327:3745): avc: denied { bpf } for pid=10259 comm="syz.1.2998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 554.266024][ T28] audit: type=1404 audit(1743742389.327:3746): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 554.281335][ T28] audit: type=1400 audit(1743742389.327:3747): avc: denied { prog_run } for pid=10259 comm="syz.1.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.300808][ T28] audit: type=1400 audit(1743742389.357:3748): avc: denied { bpf } for pid=10259 comm="syz.1.2998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.330019][ T28] audit: type=1400 audit(1743742389.357:3749): avc: denied { prog_load } for pid=10259 comm="syz.1.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.360760][ T28] audit: type=1400 audit(1743742389.357:3750): avc: denied { perfmon } for pid=10259 comm="syz.1.2998" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.386369][ T350] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 554.394055][ T350] usb 3-1: No valid video chain found. [ 554.408699][ T28] audit: type=1400 audit(1743742389.417:3751): avc: denied { execmem } for pid=10261 comm="syz.1.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 554.710245][ T350] usb 3-1: USB disconnect, device number 66 [ 554.744062][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.760033][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.767259][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.789706][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.796955][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.822070][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.837755][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.850850][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.864023][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.877544][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.891405][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.905397][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.918660][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.932784][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.945899][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.958593][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.976129][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.983560][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 554.998688][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 555.005959][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 555.018675][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 555.025896][ T387] hid-generic 00A0:0008:0003.0021: unknown main item tag 0x0 [ 555.054428][ T387] hid-generic 00A0:0008:0003.0021: hidraw0: HID v0.05 Device [syz0] on syz0 [ 555.289156][T10286] loop8: detected capacity change from 0 to 512 [ 555.296128][T10286] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 555.309904][T10286] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 555.319985][T10286] EXT4-fs warning (device loop8): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 555.335364][T10286] EXT4-fs (loop8): mount failed [ 555.378760][ T350] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 555.478808][ T353] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 555.543716][T10297] loop8: detected capacity change from 0 to 512 [ 555.550561][T10297] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 555.561436][ T350] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 555.568101][T10297] EXT4-fs (loop8): 1 truncate cleaned up [ 555.573412][ T350] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 555.577564][T10297] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 555.694911][T10218] EXT4-fs (loop8): unmounting filesystem. [ 555.923721][T10303] FAULT_INJECTION: forcing a failure. [ 555.923721][T10303] name failslab, interval 1, probability 0, space 0, times 0 [ 555.936297][T10303] CPU: 0 PID: 10303 Comm: syz.8.3011 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 555.946029][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.955919][T10303] Call Trace: [ 555.959040][T10303] [ 555.961821][T10303] dump_stack_lvl+0x151/0x1b7 [ 555.966416][T10303] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 555.971715][T10303] ? __kasan_check_write+0x14/0x20 [ 555.976747][T10303] ? mutex_unlock+0xb2/0x260 [ 555.981178][T10303] dump_stack+0x15/0x18 [ 555.985167][T10303] should_fail_ex+0x3d0/0x520 [ 555.989687][T10303] __should_failslab+0xaf/0xf0 [ 555.994269][T10303] ? __se_sys_memfd_create+0xf2/0x3e0 [ 555.999479][T10303] should_failslab+0x9/0x20 [ 556.003956][T10303] __kmem_cache_alloc_node+0x3d/0x2a0 [ 556.009156][T10303] ? __se_sys_memfd_create+0xf2/0x3e0 [ 556.014364][T10303] __kmalloc+0xa3/0x1e0 [ 556.018354][T10303] __se_sys_memfd_create+0xf2/0x3e0 [ 556.023428][T10303] __x64_sys_memfd_create+0x5b/0x70 [ 556.028422][T10303] x64_sys_call+0x871/0x9a0 [ 556.032775][T10303] do_syscall_64+0x3b/0xb0 [ 556.037100][T10303] ? clear_bhb_loop+0x55/0xb0 [ 556.041621][T10303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.047343][T10303] RIP: 0033:0x7fb7f9b8d169 [ 556.051640][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.071039][T10303] RSP: 002b:00007fb7faab4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 556.079390][T10303] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007fb7f9b8d169 [ 556.087176][T10303] RDX: 00007fb7faab4ef0 RSI: 0000000000000000 RDI: 00007fb7f9c0ec3c [ 556.094990][T10303] RBP: 0000200000000940 R08: 00007fb7faab4bb7 R09: 00007fb7faab4e40 [ 556.102893][T10303] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 556.110711][T10303] R13: 00007fb7faab4ef0 R14: 00007fb7faab4eb0 R15: 00002000000005c0 [ 556.118516][T10303] [ 556.200342][ T353] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 556.208310][ T353] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 556.232782][ T353] usb 3-1: config 0 has no interface number 0 [ 556.250391][ T353] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 556.259440][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.267295][ T353] usb 3-1: Product: syz [ 556.271691][ T353] usb 3-1: Manufacturer: syz [ 556.276123][ T353] usb 3-1: SerialNumber: syz [ 556.290724][ T353] usb 3-1: config 0 descriptor?? [ 556.973116][ T353] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 556.984581][ T353] usb 3-1: No valid video chain found. [ 556.996755][ T353] usb 3-1: USB disconnect, device number 67 [ 557.257444][T10322] FAULT_INJECTION: forcing a failure. [ 557.257444][T10322] name failslab, interval 1, probability 0, space 0, times 0 [ 557.280374][T10322] CPU: 0 PID: 10322 Comm: syz.1.3017 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 557.290118][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.300011][T10322] Call Trace: [ 557.303135][T10322] [ 557.306012][T10322] dump_stack_lvl+0x151/0x1b7 [ 557.310532][T10322] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 557.315822][T10322] dump_stack+0x15/0x18 [ 557.319813][T10322] should_fail_ex+0x3d0/0x520 [ 557.324326][T10322] ? getname_flags+0xba/0x520 [ 557.328840][T10322] __should_failslab+0xaf/0xf0 [ 557.333437][T10322] should_failslab+0x9/0x20 [ 557.337779][T10322] kmem_cache_alloc+0x3b/0x320 [ 557.342385][T10322] ? vfs_write+0x952/0xed0 [ 557.346631][T10322] ? __kasan_slab_free+0x11/0x20 [ 557.351408][T10322] getname_flags+0xba/0x520 [ 557.355835][T10322] getname+0x19/0x20 [ 557.359566][T10322] do_sys_openat2+0xe0/0x870 [ 557.363991][T10322] ? bit_wait_io_timeout+0x120/0x120 [ 557.369108][T10322] ? __mutex_lock_slowpath+0x10/0x10 [ 557.374231][T10322] ? do_sys_open+0x220/0x220 [ 557.378661][T10322] ? fput+0x15b/0x1b0 [ 557.382475][T10322] ? ksys_write+0x260/0x2c0 [ 557.386813][T10322] ? __this_cpu_preempt_check+0x13/0x20 [ 557.392198][T10322] __x64_sys_openat+0x243/0x290 [ 557.396886][T10322] ? __ia32_sys_open+0x270/0x270 [ 557.401659][T10322] ? debug_smp_processor_id+0x17/0x20 [ 557.406866][T10322] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 557.412774][T10322] ? exit_to_user_mode_prepare+0x39/0xa0 [ 557.418237][T10322] x64_sys_call+0x6bf/0x9a0 [ 557.422579][T10322] do_syscall_64+0x3b/0xb0 [ 557.426828][T10322] ? clear_bhb_loop+0x55/0xb0 [ 557.431341][T10322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.437069][T10322] RIP: 0033:0x7f617798d169 [ 557.441324][T10322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.460765][T10322] RSP: 002b:00007f617880e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.469009][T10322] RAX: ffffffffffffffda RBX: 00007f6177ba5fa0 RCX: 00007f617798d169 [ 557.476818][T10322] RDX: 000000000010b441 RSI: 0000200000000180 RDI: ffffffffffffffff [ 557.484630][T10322] RBP: 00007f617880e090 R08: 0000000000000000 R09: 0000000000000000 [ 557.492443][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.500249][T10322] R13: 0000000000000000 R14: 00007f6177ba5fa0 R15: 00007ffcb0a3c328 [ 557.508073][T10322] [ 557.835289][ T350] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.854450][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.876195][ T350] usb 5-1: can't set config #1, error -71 [ 557.885311][ T350] usb 5-1: USB disconnect, device number 80 [ 558.005354][ T353] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 558.453702][T10352] loop8: detected capacity change from 0 to 256 [ 558.469882][ T353] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 558.479410][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.488503][ T353] usb 2-1: config 0 descriptor?? [ 558.748677][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 558.910455][ T353] usbhid 2-1:0.0: can't add hid device: -71 [ 558.916251][ T353] usbhid: probe of 2-1:0.0 failed with error -71 [ 558.960529][ T24] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 558.990848][ T24] usb 9-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 559.029783][ T24] usb 9-1: config 0 has no interface number 0 [ 559.065755][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 559.122972][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 559.123000][ T28] audit: type=1400 audit(1743742394.297:3863): avc: denied { create } for pid=10363 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.158954][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.174554][ T353] usb 2-1: USB disconnect, device number 67 [ 559.182901][ T352] udevd[352]: setting mode of /dev/bus/usb/002/067 to 020664 failed: No such file or directory [ 559.188763][ T28] audit: type=1400 audit(1743742394.327:3864): avc: denied { write } for pid=10363 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.212710][ T24] usb 9-1: Product: syz [ 559.217432][ T28] audit: type=1400 audit(1743742394.327:3865): avc: denied { read } for pid=10363 comm="syz.1.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.237833][ T24] usb 9-1: Manufacturer: syz [ 559.238247][ T352] udevd[352]: setting owner of /dev/bus/usb/002/067 to uid=0, gid=0 failed: No such file or directory [ 559.243839][ T24] usb 9-1: SerialNumber: syz [ 559.258363][ T28] audit: type=1400 audit(1743742394.427:3866): avc: denied { write } for pid=10363 comm="syz.1.3031" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.283484][ T24] usb 9-1: config 0 descriptor?? [ 559.301152][ T28] audit: type=1400 audit(1743742394.427:3867): avc: denied { open } for pid=10363 comm="syz.1.3031" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.328887][ T28] audit: type=1400 audit(1743742394.427:3868): avc: denied { block_suspend } for pid=10363 comm="syz.1.3031" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 559.384937][ T28] audit: type=1400 audit(1743742394.557:3869): avc: denied { mounton } for pid=10374 comm="syz.0.3034" path="/547/file0" dev="tmpfs" ino=2943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 559.561794][ T28] audit: type=1400 audit(1743742394.737:3870): avc: denied { create } for pid=10378 comm="syz.1.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 559.588865][ T28] audit: type=1400 audit(1743742394.737:3871): avc: denied { setopt } for pid=10378 comm="syz.1.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 559.609069][ T28] audit: type=1400 audit(1743742394.747:3872): avc: denied { create } for pid=10378 comm="syz.1.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 560.108311][ T24] usb 9-1: Found UVC 0.00 device syz (046d:0823) [ 560.116245][ T24] usb 9-1: No valid video chain found. [ 560.154969][ T24] usb 9-1: USB disconnect, device number 3 [ 561.061491][T10410] loop4: detected capacity change from 0 to 8192 [ 561.542589][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 562.180692][T10431] loop8: detected capacity change from 0 to 8192 [ 562.385206][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 562.577359][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3050'. [ 562.843259][T10450] loop8: detected capacity change from 0 to 8192 [ 563.498683][ T353] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 563.506236][T10342] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 563.595452][T10469] loop8: detected capacity change from 0 to 256 [ 563.670506][T10469] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 563.858805][T10218] ------------[ cut here ]------------ [ 563.864110][T10218] WARNING: CPU: 0 PID: 10218 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 563.872062][T10218] Modules linked in: [ 563.875732][T10218] CPU: 0 PID: 10218 Comm: syz-executor Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 563.885661][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 563.895564][T10218] RIP: 0010:drop_nlink+0xc1/0x110 [ 563.900408][T10218] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 563.919873][T10218] RSP: 0018:ffffc90003c6fbf0 EFLAGS: 00010293 [ 563.925728][T10218] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff8881148dd100 [ 563.933581][T10218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.941369][T10218] RBP: ffffc90003c6fc18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 563.949199][T10218] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 563.956965][T10218] R13: 1ffff11026306819 R14: ffff888131834080 R15: ffff8881318340c8 [ 563.964818][T10218] FS: 000055555b3cd500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 563.973580][T10218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.980007][T10218] CR2: 000055555b3f04e8 CR3: 0000000137370000 CR4: 00000000003506b0 [ 563.987823][T10218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.995624][T10218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 564.003423][T10218] Call Trace: [ 564.006524][T10218] [ 564.009335][T10218] ? show_regs+0x58/0x60 [ 564.013380][T10218] ? __warn+0x160/0x3d0 [ 564.017374][T10218] ? drop_nlink+0xc1/0x110 [ 564.021660][T10218] ? report_bug+0x4d5/0x7d0 [ 564.025966][T10218] ? drop_nlink+0xc1/0x110 [ 564.030246][T10218] ? handle_bug+0x41/0x70 [ 564.034383][T10218] ? exc_invalid_op+0x1b/0x50 [ 564.038936][T10218] ? asm_exc_invalid_op+0x1b/0x20 [ 564.043759][T10218] ? drop_nlink+0x44/0x110 [ 564.048007][T10218] ? drop_nlink+0xc1/0x110 [ 564.052295][T10218] ? drop_nlink+0xc1/0x110 [ 564.056518][T10218] shmem_rmdir+0x59/0x90 [ 564.060633][T10218] vfs_rmdir+0x398/0x500 [ 564.064680][T10218] incfs_kill_sb+0x113/0x230 [ 564.069139][T10218] deactivate_locked_super+0xad/0x110 [ 564.074312][T10218] deactivate_super+0xbe/0xf0 [ 564.078853][T10218] cleanup_mnt+0x485/0x510 [ 564.083072][T10218] ? user_path_at_empty+0x14e/0x1a0 [ 564.088114][T10218] __cleanup_mnt+0x19/0x20 [ 564.092392][T10218] task_work_run+0x24d/0x2e0 [ 564.096787][T10218] ? task_work_cancel+0x2e0/0x2e0 [ 564.101691][T10218] ? __x64_sys_umount+0x122/0x170 [ 564.106519][T10218] exit_to_user_mode_loop+0x94/0xa0 [ 564.111574][T10218] exit_to_user_mode_prepare+0x5a/0xa0 [ 564.116837][T10218] syscall_exit_to_user_mode+0x26/0x130 [ 564.122263][T10218] do_syscall_64+0x47/0xb0 [ 564.126470][T10218] ? clear_bhb_loop+0x55/0xb0 [ 564.131036][T10218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.136712][T10218] RIP: 0033:0x7fb7f9b8e497 [ 564.140994][T10218] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 564.160448][T10218] RSP: 002b:00007ffd12ed9768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 564.168687][T10218] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb7f9b8e497 [ 564.176549][T10218] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12ed9820 [ 564.184391][T10218] RBP: 00007ffd12ed9820 R08: 0000000000000000 R09: 0000000000000000 [ 564.192189][T10218] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd12eda8b0 [ 564.200014][T10218] R13: 00007fb7f9c0e08c R14: 0000000000089a32 R15: 00007ffd12eda8f0 [ 564.207799][T10218] [ 564.210689][T10218] ---[ end trace 0000000000000000 ]--- [ 564.216040][T10218] ================================================================== [ 564.223852][T10218] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 564.229925][T10218] Write of size 4 at addr 0000000000000170 by task syz-executor/10218 [ 564.237908][T10218] [ 564.238746][ T353] usb 5-1: Using ep0 maxpacket: 32 [ 564.240083][T10218] CPU: 1 PID: 10218 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 564.240108][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 564.240121][T10218] Call Trace: [ 564.240129][T10218] [ 564.246042][T10342] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 564.256399][T10218] dump_stack_lvl+0x151/0x1b7 [ 564.256440][T10218] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 564.256468][T10218] ? _printk+0xd1/0x111 [ 564.267245][T10342] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 564.269419][T10218] print_report+0xe1/0x4e0 [ 564.269453][T10218] ? __virt_addr_valid+0x59/0x2f0 [ 564.269486][T10218] ? kasan_addr_to_slab+0xd/0x80 [ 564.272599][ T353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.283060][T10218] ? ihold+0x20/0x60 [ 564.283093][T10218] kasan_report+0x13c/0x170 [ 564.288097][T10342] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.292850][T10218] ? ihold+0x20/0x60 [ 564.292880][T10218] kasan_check_range+0x294/0x2a0 [ 564.297156][ T353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.307522][T10218] __kasan_check_write+0x14/0x20 [ 564.307554][T10218] ihold+0x20/0x60 [ 564.307577][T10218] vfs_rmdir+0x268/0x500 [ 564.312236][T10342] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 564.316632][T10218] incfs_kill_sb+0x113/0x230 [ 564.321674][T10342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.332086][T10218] deactivate_locked_super+0xad/0x110 [ 564.332121][T10218] deactivate_super+0xbe/0xf0 [ 564.332142][T10218] cleanup_mnt+0x485/0x510 [ 564.336195][ T353] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 564.340150][T10218] ? user_path_at_empty+0x14e/0x1a0 [ 564.340179][T10218] __cleanup_mnt+0x19/0x20 [ 564.354591][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.356559][T10218] task_work_run+0x24d/0x2e0 [ 564.356586][T10218] ? task_work_cancel+0x2e0/0x2e0 [ 564.361438][T10457] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 564.370930][T10218] ? __x64_sys_umount+0x122/0x170 [ 564.377156][ T353] usb 5-1: config 0 descriptor?? [ 564.379213][T10218] exit_to_user_mode_loop+0x94/0xa0 [ 564.379246][T10218] exit_to_user_mode_prepare+0x5a/0xa0 [ 564.385725][T10342] usb 2-1: invalid MIDI out EP 0 [ 564.392230][T10218] syscall_exit_to_user_mode+0x26/0x130 [ 564.392259][T10218] do_syscall_64+0x47/0xb0 [ 564.392285][T10218] ? clear_bhb_loop+0x55/0xb0 [ 564.392306][T10218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.403271][T10342] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 564.404465][T10218] RIP: 0033:0x7fb7f9b8e497 [ 564.421421][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 564.427294][T10218] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 564.551324][T10218] RSP: 002b:00007ffd12ed9768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 564.560261][T10218] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb7f9b8e497 [ 564.568081][T10218] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12ed9820 [ 564.575885][T10218] RBP: 00007ffd12ed9820 R08: 0000000000000000 R09: 0000000000000000 [ 564.583692][T10218] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd12eda8b0 [ 564.591505][T10218] R13: 00007fb7f9c0e08c R14: 0000000000089a32 R15: 00007ffd12eda8f0 [ 564.599326][T10218] [ 564.602180][T10218] ================================================================== [ 564.646272][T10218] Disabling lock debugging due to kernel taint [ 564.650808][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 564.650828][ T28] audit: type=1400 audit(1743742399.817:3928): avc: denied { read } for pid=10456 comm="syz.1.3059" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 564.661316][T10218] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 564.688294][T10218] #PF: supervisor write access in kernel mode [ 564.694196][T10218] #PF: error_code(0x0002) - not-present page [ 564.694291][ T28] audit: type=1400 audit(1743742399.817:3929): avc: denied { open } for pid=10456 comm="syz.1.3059" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 564.700003][T10218] PGD 137689067 P4D 137689067 PUD 0 [ 564.700033][T10218] Oops: 0002 [#1] PREEMPT SMP KASAN [ 564.733426][T10218] CPU: 0 PID: 10218 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 564.736371][ T28] audit: type=1326 audit(1743742399.817:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10456 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617798d169 code=0x7ffc0000 [ 564.744785][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 564.744801][T10218] RIP: 0010:ihold+0x25/0x60 [ 564.744833][T10218] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 564.744850][T10218] RSP: 0018:ffffc90003c6fc30 EFLAGS: 00010246 [ 564.744869][T10218] RAX: ffff8881148dd100 RBX: 0000000000000001 RCX: ffff8881148dd100 [ 564.744884][T10218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.744895][T10218] RBP: ffffc90003c6fc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 564.744910][T10218] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11026325eb2 [ 564.782274][ T28] audit: type=1326 audit(1743742399.817:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10456 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617798d169 code=0x7ffc0000 [ 564.782314][ T28] audit: type=1326 audit(1743742399.817:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10456 comm="syz.1.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f617798d169 code=0x7ffc0000 [ 564.801721][T10218] R13: ffff88813c3bc110 R14: 0000000000000000 R15: 1ffff11027877828 [ 564.801740][T10218] FS: 000055555b3cd500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 564.801760][T10218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.908393][T10218] CR2: 0000000000000170 CR3: 0000000137370000 CR4: 00000000003506b0 [ 564.916205][T10218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 564.924014][T10218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 564.931827][T10218] Call Trace: [ 564.934949][T10218] [ 564.937726][T10218] ? __die_body+0x62/0xb0 [ 564.941908][T10218] ? __die+0x7e/0x90 [ 564.945626][T10218] ? page_fault_oops+0x7f9/0xa90 [ 564.950404][T10218] ? vprintk_default+0x26/0x30 [ 564.955098][T10218] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 564.960469][T10218] ? add_taint+0x44/0xe0 [ 564.964549][T10218] ? panic+0x667/0x667 [ 564.968452][T10218] ? preempt_schedule_thunk+0x16/0x18 [ 564.973659][T10218] ? exc_page_fault+0x529/0x6d0 [ 564.978467][T10218] ? asm_exc_page_fault+0x27/0x30 [ 564.983329][T10218] ? add_taint+0x93/0xe0 [ 564.987403][T10218] ? ihold+0x25/0x60 [ 564.991138][T10218] vfs_rmdir+0x268/0x500 [ 564.995217][T10218] incfs_kill_sb+0x113/0x230 [ 564.999639][T10218] deactivate_locked_super+0xad/0x110 [ 565.004846][T10218] deactivate_super+0xbe/0xf0 [ 565.009359][T10218] cleanup_mnt+0x485/0x510 [ 565.013614][T10218] ? user_path_at_empty+0x14e/0x1a0 [ 565.018647][T10218] __cleanup_mnt+0x19/0x20 [ 565.022901][T10218] task_work_run+0x24d/0x2e0 [ 565.027376][T10218] ? task_work_cancel+0x2e0/0x2e0 [ 565.032200][T10218] ? __x64_sys_umount+0x122/0x170 [ 565.037061][T10218] exit_to_user_mode_loop+0x94/0xa0 [ 565.042086][T10218] exit_to_user_mode_prepare+0x5a/0xa0 [ 565.047377][T10218] syscall_exit_to_user_mode+0x26/0x130 [ 565.052758][T10218] do_syscall_64+0x47/0xb0 [ 565.057008][T10218] ? clear_bhb_loop+0x55/0xb0 [ 565.061523][T10218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.067332][T10218] RIP: 0033:0x7fb7f9b8e497 [ 565.071589][T10218] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 565.091047][T10218] RSP: 002b:00007ffd12ed9768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 565.099278][T10218] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb7f9b8e497 [ 565.107089][T10218] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12ed9820 [ 565.114899][T10218] RBP: 00007ffd12ed9820 R08: 0000000000000000 R09: 0000000000000000 [ 565.122708][T10218] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd12eda8b0 [ 565.130521][T10218] R13: 00007fb7f9c0e08c R14: 0000000000089a32 R15: 00007ffd12eda8f0 [ 565.138342][T10218] [ 565.141226][T10218] Modules linked in: [ 565.144951][T10218] CR2: 0000000000000170 [ 565.148923][T10218] ---[ end trace 0000000000000000 ]--- [ 565.154216][T10218] RIP: 0010:ihold+0x25/0x60 [ 565.158556][T10218] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 565.177998][T10218] RSP: 0018:ffffc90003c6fc30 EFLAGS: 00010246 [ 565.183901][T10218] RAX: ffff8881148dd100 RBX: 0000000000000001 RCX: ffff8881148dd100 [ 565.191710][T10218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.199522][T10218] RBP: ffffc90003c6fc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 565.207336][T10218] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11026325eb2 [ 565.215147][T10218] R13: ffff88813c3bc110 R14: 0000000000000000 R15: 1ffff11027877828 [ 565.222960][T10218] FS: 000055555b3cd500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 565.231736][T10218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.238154][T10218] CR2: 0000000000000170 CR3: 0000000137370000 CR4: 00000000003506b0 [ 565.245959][T10218] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.253768][T10218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.261586][T10218] Kernel panic - not syncing: Fatal exception [ 565.267815][T10218] Kernel Offset: disabled [ 565.271950][T10218] Rebooting in 86400 seconds..