last executing test programs: 11m23.89880473s ago: executing program 2 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r2 = syz_btf_id_by_name$bpf_lsm(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x5, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0xd, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @ldst={0x0, 0x3, 0x4, 0x0, 0x6, 0xfffffffffffffffc, 0x11}], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, &(0x7f0000000540), 0x40f00, 0x2, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x1, 0x7}, 0x10, r2, r1, 0x4, 0x0, &(0x7f0000000640)=[{0x4, 0x2, 0x4, 0xa}, {0x5, 0x4, 0x2, 0xc}, {0x3, 0x4, 0x10, 0x7}, {0x2, 0x4, 0x5, 0x9}], 0x10, 0x6, @void, @value}, 0x94) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) connect$unix(r5, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 11m22.803309416s ago: executing program 2 (id=243): mknod(0x0, 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x83f42, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0xcb0a) truncate(&(0x7f0000000340)='./file2\x00', 0x0) open$dir(&(0x7f00000000c0)='./file3\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) 11m20.631971259s ago: executing program 2 (id=248): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 11m19.941647493s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x588, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) syz_clone3(&(0x7f0000000600)={0x8bb719f3ac384950, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000500), {0xf}, &(0x7f0000000540)=""/64, 0x40, &(0x7f0000000580)=""/63, &(0x7f00000005c0)=[r1], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mlockall(0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0000"], 0x6c}}, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000680)=""/104, &(0x7f0000000700)=0x68) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 11m17.996381934s ago: executing program 2 (id=255): syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x87) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1100f4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000280)={0x80}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f000000b800)={0x2020}, 0x2020) dup2(r5, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1a0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2089, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fstatfs(r4, &(0x7f00000004c0)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m17.119419438s ago: executing program 2 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 11m5.573367124s ago: executing program 3 (id=290): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000280)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000200080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_context(r3, &(0x7f00000002c0)='system_u:object_r:dri_device_t:s0\x00', 0xff7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180400000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sync_file_range(r5, 0x0, 0x0, 0x3) 11m5.406707545s ago: executing program 3 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 11m4.576924779s ago: executing program 3 (id=293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x1fc, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x41}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd671}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x451}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff680}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000b40)={[], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) 11m1.231870249s ago: executing program 32 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 11m1.165744549s ago: executing program 3 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (fail_nth: 20) 11m0.92268972s ago: executing program 3 (id=307): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe80"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r7, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) connect$unix(r11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) 11m0.691263692s ago: executing program 3 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="8500000029000000350000000000000085000000230000009500000000000000f4670880271e3503200ffa95b20100010000000000d76287066c51adde96fcc309926fa397fabd5f9810e81ae0b737126ea6f7be39cd34d5aeed8d38e65cb6e22ff5dde0b5e37939286a2c23e2eb157c9e2d1f00a7c09c06337a06f284fe77f0a8320e13822c45c0f8612c10b100000000b0d3712c7e93363af3c075ff1e23166a0500000000000000d576090c4867a7b62e3e366c6286d5ec72db852caf0f3012e9576e51a7f57846c744ae6af3e4195cc037102147d80522f6649dd76d067a82f5fe47fe5f17f9ab800f4104dbaba46aa43a815b1e5c6d1d224b64be6c4d7f47ef21eb7e46f900000000f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c53248120300623cd8a4f8dc8dcba00b1b2d2747c45b0c52087b5efabf8496b9a951667d510ba3e3c4c00356ffebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46dafc6ac5500f53e5309ec1e7e2bdb6d8d9b10c07d8d591a4d8c60ff000000b78863e629b3b2000000000000000000000000f9000000000000449c810d3174c87ee545867a3126af7a8b20744ea967875b9cba735b9594aaa34e5a4bb2c3dfa805640700000000000000009966b3c9f0e9e203911a3f7035c9c4ac929a4fc6e625247510bc24e20ad88d3442a5d143c3047dd08e56a1b97642657a70147d32959d70c6ab80045101614a3eb95e22f30a85f5681ca3000000000000000076b0b0cc1146a33b37d12f0ff63b180551f90966d46fcdc60d90833f244ef5087aaa1dda6d51315a8b5f011d2dd3e8d50f28f35ba4d4ee674f5ba99803fedac826e1e28bb9916dcc33524d7fd55c162f3d18c66d1ae190cf4d31c0a916eca764e95e9f2e08104d3f77dc4f63aa4d26f7d08660c00a635b299b64469fc5ed0f685ed8a9e3f444d138a2c1d569826e8ff3835d71d1a248454eb05ed603e844ef8e4d72c41079ded3a9c242d2bc5d44666ad95b85ad3648d1c6c870843251c237ac76f7040000007702005153f49b387aadbf52da6b6029ca2049ef494e4b5c1c9ef157e622bf0716931b5de83440b534f4d12a156516cfdd8bf407ab000000000000000000bbc6a480aaf09fa5fec8d54ab2182c88e239525968ec9c10d512f8102026d8e448dc823b0335643431525643fd22249e5d46603d0df6ba8a578c4efbf3066e9c20de31b0d6c6a9c78d3ff1766451fc01335e775ea89a976de6c31d78e011d58ba975ea897bce8e5db2015dee89cffcc8830b2a1549588d7f4bbdced67f9f4d6e50409f07a07a2f7fe2dd0cd26d254e499e582fed89164146516ae76948594590e0230ae5bac10f4b13b6d82701cf01b221d7830f30017b588eb5c2bcbf7813bd450470129ec0643cec96d0617cea6ad41d4d9ccb86c29718489d8b4c9c147a59a8e0a656e724b8634fe8aa9db4119b0f652838b99da0f76eb90b07db7745542fee6bd75ce0ffbd5644584ef6b6007c839de58d87cf6398eb101c22aee5ee6dff4144a3385f265ef5ed5f37d7f9f766f814014525dca01f948acb196763e1044e60fc"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a40)="b9ff03076003008cb89e08f588a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, r6, 0xd311656a6fc0a7f9, 0x70bd24, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}}, 0x20000000) 11m0.652862302s ago: executing program 33 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="8500000029000000350000000000000085000000230000009500000000000000f4670880271e3503200ffa95b20100010000000000d76287066c51adde96fcc309926fa397fabd5f9810e81ae0b737126ea6f7be39cd34d5aeed8d38e65cb6e22ff5dde0b5e37939286a2c23e2eb157c9e2d1f00a7c09c06337a06f284fe77f0a8320e13822c45c0f8612c10b100000000b0d3712c7e93363af3c075ff1e23166a0500000000000000d576090c4867a7b62e3e366c6286d5ec72db852caf0f3012e9576e51a7f57846c744ae6af3e4195cc037102147d80522f6649dd76d067a82f5fe47fe5f17f9ab800f4104dbaba46aa43a815b1e5c6d1d224b64be6c4d7f47ef21eb7e46f900000000f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c53248120300623cd8a4f8dc8dcba00b1b2d2747c45b0c52087b5efabf8496b9a951667d510ba3e3c4c00356ffebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46dafc6ac5500f53e5309ec1e7e2bdb6d8d9b10c07d8d591a4d8c60ff000000b78863e629b3b2000000000000000000000000f9000000000000449c810d3174c87ee545867a3126af7a8b20744ea967875b9cba735b9594aaa34e5a4bb2c3dfa805640700000000000000009966b3c9f0e9e203911a3f7035c9c4ac929a4fc6e625247510bc24e20ad88d3442a5d143c3047dd08e56a1b97642657a70147d32959d70c6ab80045101614a3eb95e22f30a85f5681ca3000000000000000076b0b0cc1146a33b37d12f0ff63b180551f90966d46fcdc60d90833f244ef5087aaa1dda6d51315a8b5f011d2dd3e8d50f28f35ba4d4ee674f5ba99803fedac826e1e28bb9916dcc33524d7fd55c162f3d18c66d1ae190cf4d31c0a916eca764e95e9f2e08104d3f77dc4f63aa4d26f7d08660c00a635b299b64469fc5ed0f685ed8a9e3f444d138a2c1d569826e8ff3835d71d1a248454eb05ed603e844ef8e4d72c41079ded3a9c242d2bc5d44666ad95b85ad3648d1c6c870843251c237ac76f7040000007702005153f49b387aadbf52da6b6029ca2049ef494e4b5c1c9ef157e622bf0716931b5de83440b534f4d12a156516cfdd8bf407ab000000000000000000bbc6a480aaf09fa5fec8d54ab2182c88e239525968ec9c10d512f8102026d8e448dc823b0335643431525643fd22249e5d46603d0df6ba8a578c4efbf3066e9c20de31b0d6c6a9c78d3ff1766451fc01335e775ea89a976de6c31d78e011d58ba975ea897bce8e5db2015dee89cffcc8830b2a1549588d7f4bbdced67f9f4d6e50409f07a07a2f7fe2dd0cd26d254e499e582fed89164146516ae76948594590e0230ae5bac10f4b13b6d82701cf01b221d7830f30017b588eb5c2bcbf7813bd450470129ec0643cec96d0617cea6ad41d4d9ccb86c29718489d8b4c9c147a59a8e0a656e724b8634fe8aa9db4119b0f652838b99da0f76eb90b07db7745542fee6bd75ce0ffbd5644584ef6b6007c839de58d87cf6398eb101c22aee5ee6dff4144a3385f265ef5ed5f37d7f9f766f814014525dca01f948acb196763e1044e60fc"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a40)="b9ff03076003008cb89e08f588a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, r6, 0xd311656a6fc0a7f9, 0x70bd24, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}}, 0x20000000) 3m15.284128235s ago: executing program 0 (id=2429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000000800)="$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") r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {@nojournal_checksum}, {@dax}, {@data_writeback}, {@errors_continue}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nojournal_checksum}]}, 0x0, 0x581, &(0x7f0000001b40)="$eJzs3U1rG0cfAPD/ynLivDxPHAjheXoohhyakkaO7b6kUEh6LG1ooL2nwlJMsBwFSw6xG0hyaC69lFAopYHSD1Bobz2GfoF+ikAbCCGY9tCLy8qrRLEtyy9KpUS/H6w1s7vSzOzsjP+rlVAAA2ss/ZOL+H9EfJVEHGrZlo9s49jqfsuPr0+nSxIrK588SiLJ1jX3T7LHA1nmfxHx6xcRJ3ItL/rT6kNtcWm2WKmU57PV4/W5K+O1xaWTl+aKM+WZ8uXJqanTb01NvvvO211r6+vn//r243sfnP7y2PI3Pz44fCeJs3Ew29bajl242ZoZi7HsmAzH2TU7TnShsH6S9LoC7MhQNs6HI50DDsVQNuqBl9+NiFgBBlRi/MOAasYBzWv7Ll0HvzAevr96AbS+/fnV90ZipHFttH85eebKKL3eHe1C+WkZv/xx9066RIf3IW50oTyAppu3IuJUPr9+/kuy+W/nTjXePN7c2jIG7f8P9NK9NP55Y6P4J/ck/okN4p8DG4zdneg8/nMPulBMW2n8996G8e+TqWt0KMv9pxHzDScXL1XKpyLivxFxPIb3pvnN7uecXr6/0m5ba/yXLmn5zVgwq8eD/N5nn1Mq1ou7aXOrh7ciXnka/yaxbv4facS6a/s/PR7nt1jG0fLdV9tt69z+Vt2PgFd+iHhtw/5/ekcr2fz+5HjjfBhvnhXr/Xn76G/tyt9e+7sv7f/9m7d/NGm9X1vbfhnfj/xdbrdtp+f/nuTTRnpPtu5asV6fn4jYk3y0fv3k0+c28839S7cijh/bfP7b6PzfFxGfbbH9t4/cbrtrP/R/aVv9v/3E/Q8//65d+Vvr/zcbqePZmq3Mf1ut4G6OHQAAAAAAAPSbXEQcjCRXeJLO5QqF1c93HIn9uUq1Vj9xsbpwuRSN78qOxnCueaf7UMvnISayz8M285Nr8lMRcTgivh7a18gXpquVUq8bDwAAAAAAAAAAAAAAAAAAAH3iQJvv/6d+H+p17YDnLh/x86NeVwLoiY4/+d+NX3oC+lLH8Q+8tIx/GFzGPwwu4x8Gl/EPg8v4h8Fl/MPgMv4BAAAAAAAAAAAAAAAAAAAAAAAAAACgq86fO5cuK8uPr0+n+dLVxYXZ6tWTpXJttjC3MF2Yrs5fKcxUqzOVcmG6Otfp9SrV6pWJyVi4Nl4v1+rjtcWlC3PVhcv1C5fmijPlC+Xhf6VVAAAAAAAAAAAAAAAAAAAA8GKpLS7NFiuV8nz/JUayKva8PmeiD47GLhJJp14+kx3pHRWR730DJZ5DooeTEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs8U8AAAD//4maMi4=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300), &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x835, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8202) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) close(r0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000bc0)=""/176, 0xb0}], 0x1}, 0x80}], 0x1, 0x20, 0x0) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 3m13.933102793s ago: executing program 0 (id=2433): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24040804) 3m13.822200413s ago: executing program 0 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}], 0x3, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) sendmmsg$unix(r2, &(0x7f0000006c80), 0x0, 0x840) 3m12.941221128s ago: executing program 0 (id=2443): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x80) syz_open_procfs(0x0, &(0x7f0000001200)='attr/current\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080892afee53c63", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = getpgrp(0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000c7caaf31d6a7f09e87b47200000000850aedbcb7f5a7de30d19d14e7c90eeffb3258d5b50959eac33c8652ef0976ab222654468571b492c9826e81a4fbd3052c20abc9473d35527f778e294ef556acb9aef239e72155ed352273743f98855b33cd0fcf3d4dbd99f47161d45ebf3d9bf1d79c6a94bb8d508f8d34d6a38f4f95292423e8be72c6f4298a835c4676c714e04d141438a7edd81ee166932a9ea5c5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f0000000800)=""/112, 0x70}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m9.524030788s ago: executing program 0 (id=2449): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)="68cd6415d798c355832795c900ee87dc29e27296af5d91a8ffc1e25df7b4edcbf0df6e62d772ece8185858e9ec0d1bec890f98ce42940b1421ddf4189e3a892c9017fe0e03cca86ecd9ddbdb638d223683793db857f9f96179b124dc780533440e1db50acc8432bd39a604c43fa6bd55af2d336db1a32a327910008756687b4b7e003d263d6ebd62639d3281ddc7d1580abf512ef46ebd9fe0c9bbd1a343d22ede1c156f1a21976207235d8ee8fa6265e4cf516cbea0351adba71b448ab31c5b179b157b9d474bd1b4f4c998e077609a2fff7db539d3c3d94ffd8ea7327719863803ed496c77437dc2062beaac648f8c9e80dfb152187b2882545e5fec6df2dc918e9faeeb6ead8661b727b26f178e946d4768a186ed2f742194abb31cde2818ee08019b6b2032b78a7b43e6b4daed626aaa65c64d27926f01e47d620738deb6993c8e30cda77b6270b38054da666e4a0d7a2813ca9c8c0588fd6bb53a8656ac2847416646c78ae14faea16edf0c067d7be51ccaa3144f1686bdd2c43f7c468cdd88d507deebec1aed4ca73769b6c5c29313e819ed9daa4c34f7b97e82dc5cc0d7bac965b9a6062361b944d549e465afd0d6f6dd41227a96bcb38c5040e8a2d46fe7c1c8ec4bc2fca23f1dff70746305a9d8f70b6d5ef7cfe3f921da416c8cdb810dc76db80d34de50e6bf3079ecac544c97c4721f3572a6071bb070c7bd012453fe0986acd094a84f2372b263236408cb385870b5b48cb91c0afbb1ef8e871f4b1b29cd8471fac6ad9fd7797453436d", 0x230}, {0x0}], 0x2}}], 0x1, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3m9.421034298s ago: executing program 0 (id=2452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m9.374477059s ago: executing program 34 (id=2452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.275880154s ago: executing program 1 (id=3253): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000b40)={[], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) 6.242026775s ago: executing program 7 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) open(0x0, 0x10103e, 0x0) r1 = getpid() bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010070707000"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.193993205s ago: executing program 6 (id=3257): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x8800) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, r1, 0x0, 0x5, &(0x7f0000000040)='*!{}\x00'}, 0x30) write$cgroup_subtree(r6, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 5.40057515s ago: executing program 1 (id=3259): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01030000000000000000320000000c"], 0x28}}, 0x0) 5.33436484s ago: executing program 7 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 5.26562143s ago: executing program 1 (id=3262): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000640)={[{@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@i_version}, {@noauto_da_alloc}, {@nombcache}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000280)={0x8, 0x7, 0x400, 0x6, 0x8, "e84e609c6e5f27afc255192372ff31e23d69a9"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xff00000000000000}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() open(&(0x7f0000000100)='./file0\x00', 0x20800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x28, r6, 0x309, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24040804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0) 5.26541763s ago: executing program 7 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.196488371s ago: executing program 6 (id=3264): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team0\x00', 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000010100000200000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000eeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'team_slave_1\x00', {0x2, 0x4e27, @broadcast}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = io_uring_setup(0x2e7d, &(0x7f0000000440)={0x0, 0x4007c6, 0x800, 0x3, 0xfffffffe}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000000)=[0xc19a, 0x9], 0x2) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl(r0, 0x7, &(0x7f0000000400)="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") connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x2, 0x7, @local, 0x7}, 0x1c) 4.341340726s ago: executing program 1 (id=3265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(0x0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x648, 0x418, 0x210, 0xffffffff, 0x418, 0x418, 0x578, 0x578, 0xffffffff, 0x578, 0x578, 0x5, &(0x7f0000000240), {[{{@ipv6={@mcast1, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xff0000ff], 'virt_wifi0\x00', 'erspan0\x00', {}, {}, 0x11, 0x20, 0x6, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@srh1={{0x90}, {0x6c, 0x7, 0xb5, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xff, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 0x1020, 0x400}}, @common=@srh1={{0x90}, {0x2f, 0x5, 0x0, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffff00, 0xffffff00], [0xffffff00, 0xffff00, 0xff, 0xff], 0x208, 0x8}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @gre_key=0x8001, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@private0, @ipv6=@local, @port=0x4e21, @gre_key=0x8b0b}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7c9d"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x15, @ipv6=@mcast2, @ipv6=@mcast2, @port=0x4e23, @gre_key=0x1e4}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @loopback, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xfac35ce3725af9b3], 'bond_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x3b, 0x9, 0x3, 0x10}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x5, 0x1, [0x81, 0x1, 0xbb04, 0x2, 0x9, 0x8000, 0x0, 0x6908, 0x8000, 0x7, 0x6, 0x8001, 0x1, 0x9, 0x2, 0x3], 0x4}}, @common=@mh={{0x28}, {'VS'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x9, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mpol']) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_io_uring_complete(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)={0x20, 0x0, 0x16, {0x16, 0x0, "b52116bdbad24c55531b0c60f293cc26fb166c1f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000c40)={{0x4}, 0x100, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x21062437) keyctl$chown(0x11, r8, 0xee01, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x60, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) 4.304205476s ago: executing program 6 (id=3266): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) 4.234555796s ago: executing program 6 (id=3267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x588, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) syz_clone3(&(0x7f0000000600)={0x8bb719f3ac384950, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000500), {0xf}, &(0x7f0000000540)=""/64, 0x40, &(0x7f0000000580)=""/63, &(0x7f00000005c0)=[r1], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) mlockall(0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6000002", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0000"], 0x6c}}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000680)=""/104, &(0x7f0000000700)=0x68) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB='\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 4.234144956s ago: executing program 5 (id=3268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000002"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) syz_clone3(&(0x7f0000000540)={0x4000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e45000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d312c00ec24d52cd656eadd39d406526adc61a7b193d91057769822e39d283530efe28116f0305d770fd70a3670"], 0xff, 0x191, &(0x7f0000000580)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x4967, &(0x7f00000002c0)) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) rt_sigpending(&(0x7f0000000040), 0x8) 3.768315789s ago: executing program 5 (id=3269): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000b40)={[], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) 3.399861611s ago: executing program 6 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000186113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.990876853s ago: executing program 5 (id=3271): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0xffffffffffffff6d) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x2000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200950000d1284ffe51cc19a95073a0a0264eb0e4e96b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338c0700000018c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8c8cbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000005abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041d749de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x10049}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x0) io_setup(0x202, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "4e5b6f16272e5a85777dda1f0147f08f"}, 0x11, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="2e749e8cc85e6b0ee5df5723d688df544b556c55827971aac8755cf20fb368f051592f0f11cded477b6e2cccf88f63b6b9a785545c9ad2e3f802634ea9be5a9422a3e3a4fb5a31f9f1370b9b2ed84de8ed3434130a8e4a2a43da16c9ccb794ef54d69b6bbbc22f760968086c5015f2ea4a3c2b3ffb6c6f496728caf07383f8c92c266b5fd8737820d4109bb0d222215bba6ff978da9da26b0e58e3ebc39d3e4240585581b5ef46c07d31f59fddc66bcac21c633bf2d4a2035b29a8a7b5e88007827579c3abb9db30a25cd264de86a793d03c9e3fdfd8f30342d07764a52991a8280925eee8c387df8b3e0bb1d19110937271822237540ac0a56c940e966a21059bed07f4f72e2d39a9d660ec5825a14da750cbeee159dbef9449abdcc021df8e64785e78b41eb0ab9d7498cb2d5fa800d9fc0f44a6fe0be3a024d48cda95fddbcee3e5f6289cc2b184cf80b714a13922545dd9c14fc771f6ce08557b9ca99a4de6193155cda1164752707b78fa0e241dcdc7a70debb7ef136279e5e5aff42ed8eac8c46ac4471a056508b6bbe70d05530c906206780901bf45aa23d128956397d35329370cd248693285f86ffa28495721c1bfc49916c6e8daf36c18307f1997e7061e9763b79115f433bab381a84bf99031dca8d3f6354cbb6ef7de9609f36a41eff8894ce84a4baa53a1a75727005e1004f21cf6fce6f36821a10dc53fafb17a8be2d7f856b3bf746c8f3d0807c3f526f533fc5ccb7632f77e5652153477c120b2b93fef9b387a6bcd13f8805ffdb4112820a864188dfcbe67028caf8d267dae2c479ffd0415ce9756d268902c8f41c23734cdce58fbabcbefd7673f678c6796f2eaa21fbad557d5262b2b037cfde6a3536eb3cf3f4bdebcae638a2c63fe7677fcd7b8dbd9fe6b828f46dd7513abe880701c2005972b1208c8575f7a42a227f7ef355e61aa03f2f6514552aa767e50cb086633c556fd8c43494fc5278e179d2ebc2d7a86c88dd051e360bc2e226a64d412451904d301f93ebf232e367972781ffc91b51b4b160a5c571fca00b764add93a67d227ef5359a38d3e6444956940b66586a80b3dbd63255dc07ed3300a71cedec6d5ab9a5a0fe81c134426890f456a9fb9deb638fc188ec9e235d8bdc848febff19817e29f7a4be331b822110725bd3617096becf7193bc918d31dc02198ef314e7ff408c5bb3a2c6469d2b2312b2eca2b2bfbfc92a5822bdb308de0b533b762e1ccfcfbaa69a08102eb4de20b625f01cb22d27febe953547990ead464d87286407db7e7bc9e8f561c217273ee7acc656645bdc749afe289806c01b365f685d1b18425d3a0d1fa4ccce2fb44c46469fd5d34d4db9d4ffdbfc249d34cabe564d5ca193276dcf04a36c90fb15dfa552c987c0a611ed96602f47a0b3c3bcd7e0981020abf1c0b5cb48029485f644f3801037173a46f5886de9cfd388c8dec8a02762a1fbfd22698579176f1feecc8f177ed762a8d3daf4f43a3cf94ec7282a07747478cd5eb84b88786a8793fcc270937f6483e80612d4acdec8a88df226f172aaf530d0552df5f3adcd6dd13cc719c24d20847d6a7c73927c9696c7095a7582062c688f7712e8924d97df16405a2d5e571a1d06734761537b479824b4b961c8a7fa92f3a5f7ca95155e1291e10521204ba253e82ccb553f562bead4d02b5b1b10132349eb973149eb9f0bfd48d1bfce86f73d13ffa2b76f72677cf5ef92b67b8d8b02d7320ba5afe6049eeacd2c223e13c8ea5f231e25e8090143e235c457bc549b981a18c30e12f5954f54ede63c56e3edf63b4c20f01aefad3d3bfddb41b40673636caa2fc9ccf2e6124c7a32a1b472ff1b0e74da2777bb84ea51468519d03bd077afd8e36ed0e67d1060e5feba19c09fc63d8ecf5e10fa650a931a47a00439fc96f2ed4bad1d70c50cf1d4963267db0585e4ac3b605bdfa5aa90e1d3e407beba7b4e131b6af563b0e90f57fdb11f7da417cc0f38abd53060f56ae2d4da094d709b9b207aec1f9686c9c9352705453a189151c3278b7736929ffe93fa94143533919464888f08059cb915f7f2ee37bdc2c2d30305ef6407aea7d9f89c0d35ec93c6fcce964cbf7f912c5b2695b8a6983fa83ac5e0a0eaf78f134c211aa34a922b9458cafd072b49cb187b211d612e02b8f7749eb3b136bafc655a8b3d4e9961fc3043754930a4e7bdcce1883421e189e9c0b1268f1f95b9177347073898ff011482427c43decad44c8ff020fbe7d3680c76898d7f538e189720d42dbdef4229e13bb7fe448aa6238eeaf0d81dc7b03b5136edf865a996ed545dc5c0ad4659da7d01731705b0d9733ec5996d70eb62ef11534f19080f95226d0fa02771f53583f67166845ab1143fc804e23d6368597dd168a1ae0517cad84f04bbf036a9a04a7af8f67fb91b2934a473ccc5bdcce134c9a10c10d81afbaeac63c2706d74e464164249f5fba82d0be6b4e82415ea644009aa4a443fe9b80717b5d104986e60a13b335e228085b6390a110451523aeefcf603b124202c5d47349ff8a67c3871312602e30bd00dacd5b6e9ae2c4afbd590af002ff62cb8a30c64a3bc843ebfaf6c9cb102ccdc2f05aa57f240632966bcc7fb73b550922bd7dc183eb5b488a83c7ef0269f4c9b92592357ec0eca5a14c330202c87d8fe6f7a4350bad8dc29d1de33aecdd10dc2329c7cff90c8087251b948f58b864d4e7d6c5e5d800c2e7741273356b13c3277e8f60242cde5aee19bc5c55a240025e26bbb893a5b2f39dd77a24604d445ed5b22988fe530e952229e84b5c05f9521e014eadeef4565a0a9c57b9bb007b4177bdd8ebc87abcbc0317cf2988be2518291c0d89e0141a7cd0e2f37e4db94cab5204f804ec0d0fb0819dda879328cf675be07cc58d8f8b50ee56670229e8a7839a33831ea005a87eb84b3e644040915e8eb44055b7d90e23a3970e87957abceb632ec284438bfda423cd547ef14d786f36db71684cda4235b067408d85c544ea257bd75a2e4935fd325a6aaf57664c5430dd24d4588b2774c08f376bf606391d1199347281042431d0e1b6bb7f46fe4502d67ebb3f0469800a17162dddb37f7ca2c1951b8de5da108065aa933a9e04eab95f6018d3326fba38e33b5a701022244b0888f4a643b333cf18db2f37cf2dcbb86f20fecddbaf186987c7901b74376aad2b99829a478a2d68c0ca48cfeff10cc27110febbc37d33db56700f909e266ac33b60090a2f38f0b3557ad094d7d42dfdcfb27cf538cc121b1ca181362290cbf90e73c60cca5ce62cbd6ab49c39aab5054aee6de4dc2caf56079180c964dff0191185fec1065c508249db0e21391e00eaffae3300a19c462b09d76831262fa177923f02095c1f57595f560feec1d786edea504ba32dd39dc0b96d7d0f859709540baa8043f26deb237ee8425bf8069be89bcafabdbccc671ccad77f878f73cc08f230243a640a9c1675e395e41908899e5f3e579f7940239a042d9a95a392cea4def19696941e155b84163e5d398eb10a43adbd0054d175d0ecfc151c15df09eee236f0f8da5c373e851c56e8d3d80b5284f17f5a9b0a72a27a3400b4e2b3188a51d2352b991d6b4d97b3c6b2d0a184907ff3f4afbc22d5c72d79db1dd936a9df2757b1cf03cdef3c0367fe873074aecd48bc62ba63246682837625b4187b2273de35b6e7a0982fc62630193eee7c090d279b6513db822c3375c829c86ee57104e2049a410f521de405916b90018e8b81f457cd9294ac0eaec1627ff8954572ba7009f0504cac8be8fe1eaebda0e426be956061595216108332067ebc18e46ac9aa200d85ba60f0357148c9cdfffea9a7795a7dfe7d99bb045602685a28032e0475b96da0d576737e05b38401e1f8c3abc8b34a21bd08dfa492ef0d4496569f4a3eb52fc12486a15786a87b5c1b5ae2df6d9d75f4615a664e54b2fa0968507acde7a07f6435ab8bd84d0e6e9eb8cd6c78ea69a6679a53564f88f224d7d4f4ec8d19739a3863f0f1eea35db1aa4ba4ef180025258c7f1c377603948372be9a22da66ca56a945908c274dcc4515a6253d9383dcf17a65d474863735c1b8655840446d31a5954bcc3581ad465d019c9ce240b75ff9d20e226d398687c78d21cc8899f5ba6397ee7bd8cb1875feb9a24b4abca8ddeecc7dfb03927a7fe7129d91fd3743932167b5a2995a5e4128b7db18cf6978de20af22018cfa0dd97af0fca0763be77b64d91dd5f31b5a65f12a32aef11954c05d9a7372362cec82c30a98eb4dce5548f73d8fa92c5e8dd44b054b323e3b153872eb8e8ba36c2f062f0bcfe762d41091d8dafffe71db31e9961312f1eeda0c3f3ff8a558468f05e8a3123086714b6980003a85afaeda65c6505d6586fe2f3ad773ef09d8c0deeab879c6895492d14ff01dffe8b65abc935a7c574acaeda6cbe624f1b4b733075b4d8028c9bfaf8f66b8078b98d1210c3afee89159e9e9c03861e062b7219462fb88643637467c0998682ffca0fd5f71a1840ef802d09ad0555774c7bb54fe5c413e2a1734c4be29f25fc58f65adc22ac294bed58fa69e24d3a9a6fce9e2d60f238809979d4c1db26d121f2f013fe5918b786a7b7f88226b92b40df9852b83b47dda5e876fa46961224511a947ff5b354a9a4064eebea9e22eb7a24953a02c5f640b9163eab5fce85b23be2d4c7ec014b5f8d32e0a798fdc2f8e905673bb02c7dd9a44be1741f6649379df146f18d64b428ae9840bf3323afeb3a2be43645341ca720be7b305d13de56a999875ab304786661594216c34ff6fc5e47f5a4e05ae6f8d64e5a7c598d4464b4a5a9d3f908015caeb39f635379af90c20a2dfee20aaff5ed5bc8646770333d29a4352a90f37c0ad33afda265f7c2fbdf4ae19d774620525f6cd9324aa009aac01ba58487c4b298753d03c72584205e3d92b64d933fa5f844d242ed0eb0b55793ef2c91e6483558089a533808dd41167e52e526f786b1953068c4807211725f64bfc745ef79c2a7c9400d2ba61113f10118fa54a91d6b531adddf5ecf6ec764f1e58ecedfa8ba08dc36c7cb91f74c77bd2e02ed878cdee30e8d0cf81b476589367ae2b67d65d2dcec5776d095a4b25f1145387a545c2ce0694827058c18783f6f0316770c2e01615785719f140e6765855272318175f4eb572e47c83404591489fe37ecb29379805a176d7969fa4148644f0b3e3ce9669b9dd1cc06881a11bf947a5518dc985714fbb3b428576b2daa7c1a31c1388faf03a73bd046df8ae6c4dbddd65739407bd827c419880cb76e7bf9db5718b50d899a9b01c8fec01befb0d6e72fc86e56df84716a70e1790246d36dbf6135d815f0cbab6c1ecaf89253d4063852cb1e11aef274b085ce2d7776e9abe075072bb39da5494c8c490e3547005a0763c6774546a73073d849310ca961c4c083ac2fc1e13a92460b8996b8d87e6abd420146a044658ac6859f2ec472b668dedd9af1b54388b55341bd66b7c90379a5b52e2db905d0e6a8341193af03f254044d194cf27eca879630c16da9c093586a1a6e42dcd5722e47c5e0c6070d3229e139e809307d2ddc4b9b7cdfb331df49ab3098a2e1121523ee810f2a28055beb88b0aa5cf93f87d366f4013c35c1c743f374e4c5b0e6005cf9429386d687450cd172b6a22049521682407315511c1311a3af4020c66a385e3a652c787fbcb1baf4e611d31e4cccd049cee851ac4f6077a2e9f2395420c3f6991e84b2cb9e331ef7d5da014e73fe6f5de2d07e372236f541650cdbee4c02d25d03b1cd3e9384a3004507061d4d8b897350d709f6643d40f16279e46529e9d4f58e0466e7df46c15fd43997f83574ce4f46f7a09123e7762014bd14b45d1cc8b28ef7de8aa8da2c63fa6e4b990c10aec5f6f3806b03f5e7d2c32cc206fb4af14f61c2b8ba117db15b57a1fb21bfd40f3b4fe1383b8043bd0ca7a75ddc0d6975432c211192024314722584e4dfd17b5d5ae40d27a257646ef20fbcd86e6a970d4506181f939b4719c634f66aba9c4d3ea4b18697dffb113344be354a1ba0a37973fbba6d569980522cd1dc398751f80a1a30ed368a2f513c101dc2aa3a233880847226437f56bb8ab9642281d867c80fc6dffe1f99807a00e55f0f2a8d16abb288e5ff87dca32c024c6a1a0a5588e704ab4bc3ddbcef6a7bc2d8a35de5a1cee5fa64d9e940d9c1fca2273a9fe520c555e3b076a6bacbe58f241ae24b36faba35541d747f277acfc7fb374070a259a659550b9d2d158b02d1902a71b382304c94771f380029ccd8c66b8ef2eea3319d810cd9088b81288c2af36c9e423f974a9a84ca6ea5aae1e9128aa7996ca154c2bcb70082d8eaa57bf8d9a0534deaa0b823916c87bc2b94bb68bc1b4cbf4728e23d4e1663c1d036e3a1342477d3303cba94f495778da51214f26d3cb765c7398cef04f0db6daf25d33b92b574cd4b9c85d69b296b153be60ad9ecba6abbd9b206af7495be5c1536aabeffae39d377e8b4c1425a66c496de9d4b83abf12f63ef2d2e02fbfb40a3ffc4cfb19c8ae0649dd71179c7c4338a6eaa6f51d4abb1aaa27218b4d2b68638b15174e6a4509eb0b9275e7468633244fddaed550e1c20cf256a0828348bbb915e70113cf8033ebca53bf35d06c8cbb09a3e1326a7209f011dc9cff55e192e64670dca28e57358089d06830f113fe06ac7f9dc0f3cf49687b45599d18c6affd99268192747bc4dc9be2d854baedf0d81b4d1eff347fbec4a0b4f8e2a94ece2c0217c9e3bd8dd43ba922a219f00cf2de35de84ef8e62fa983044bf5d4e5cdb31de8cf11aa148a936320bec00b26127d7ff24a555117aa449ec6f9d0ba98410d7ca0450cd99992d92670cf5ba59cb551f76c5060e3f618f46fb5176982d8f246cfa811d209b8f61cd00758a129bd6941da2451f1a19dd612425c97f152570e4e62db9aba7d148ed5e4e333068aeb2625ecf43c0ad9092638f688b8ee3e62780cc2befec03c5428a9376ae7e2ee17bc585ecd60cc8b46f268b793b9d74f20d475ab1b05f0ebda051630d003b424cf376a083663bff163756888dde2fa3385c7faac40472de6e1882b9131f9b9a755fb827a996a534077b85ea760077280d8dbf4988496720a64fb8e2c96afb69d529516bfa8f7e81d2eb780854823370a979c50566f88ebab97385f30ddaed0b0438b689506fb49c943713bf835ed75d09dfefd12ebeb2405a46594f556fa8b3d32547c922808f1182658ea0208ae0d62095e9588db1d94956bc959212a5a1bff0a669758d4aa8f1eb11ebd566cf65d92051b1877bd6fe4b7266b21bec833331abd7c4a347da57774e7c05897fb82b7ac39473b6c87a33bb912dc9e11bb5a0b4895371eeb500a827c3d839c885488faeee9586058238d2259163756f69eb533af03646ee4558a67d5978bafb8b2e8c896db55601b59ab4a5451f23611a02c6752a6c80ce8872dac2c03024750fb4a11ee23018ce0faba974b43a67503d353647959948c9ec697cd193b040c9be6569514b681097dcd6310dd9086c01d9bcb22483a880728504b8818902db0139667805d1b43550afd10229175813aea15bb2924afab70b1e4dbde6bf180bf9034e515102a25149e1eb634c9e56a037c2c3a3d1e213731e3611a167ab5155c6d7d103ef1ccbd748017f65493a95481de052d0183a4728b0ac202b10c517b09e8a8a8fdcb6bbae8fa797a8f1107b0f6d957472844518b3ea7cce89731c2074c533924dce44adbf6b6fd32044b624a63a3e0f5b2a8482b3294aa153eb03f2879b39e80078abd51d73a7f0ff77c546d7092ebb973a3bd013254576484538a8af8ceda9e6ac9daa38acbd7576a0054bc49a248ee2839aa8b604a41b735ee3dbc6e08cdaa92955dcf4fa7a4c783971e4134dcaf9a8b644c20894fd17d648452f90f9e00860eb8102534477f7e3279a0cbcee20d500ed648adcdfe6540509a49d438aaf1884bf1f0a434055866e643577fad463ffb8267b530d4bd8606d3638165ff4b9f6334c4ba818da17c5cc5ada304462a0c4dc0728d25428b7b61bf9804d54cc7bb7b0daf82a19576e5e6085561e66050e333e6302fd85d00f36a82a569e1b2ff7764a931a2e70409b5517df2fb1b3876ad4523d74ae224db617c40c55a2fa0c0aa3e97b7c350a2eff49ecc551b50d741f6c1aac4f6f78644eff674df4cbcf56c259355bceaf87dca07931d973018aca418e5e6f000e98eead669c39783e144ae3b43cd01920ad383d774105c1594a2fccdf159a5f9bcb395220cad1b22ce09e7c5683166b9bc4bd2fb2bd1b676890abfca67d8a5702d0dcb751b9a457be82cba2c2f3e31e7d59eb8b8fc8ba440bed80bfe560195968d430a9d15701147541b83acd50038f8beae9220a6e473ea41838b16c1bb6f5cb1a9dded046565db6327ec818c9aebc5e2304f9bae0325294fbf6282e49fad4af3538a52c44209e611869535f854005534767bc73834780f6d6ddf29b472da78d4ca7523cbcc33085778a596dc46e084cf624cc1b61fea19ebfdb5fdabc24c3a5e6b64f2a59b1dc015398feae49d167fdfe1ffcf6f078c8033965ca34de7a74819903aa29ec4efae8c7bd5d8e5da21cc07a08c1cdaa535e1f79525a3fdfc153cc4af8d9906244f749f58418cd58c06f7d0f722a52978f1889350f5a1390bee67ec1093377f7f5c417f47e54e2531a3590ae8e512df1beef1c58a75985468e8cd481fe07ffeeac960bec795a690eb6f64d634e7c220ac8e628c30bb2e28395c69720e801f952b376cf9ef84011589cb9480f9194c2f7e06319a45253c9052e39983e0a59ffc484d0951eaa0eaced690518f08abe1390799799367c690c860193139f20c82aaabb5ee0eb8fd426e792d5bf68646c1e9697f375e7184f3675ec415d74aedbe814e24bf66a3b930fb4b44edcfd5414afb0b0d0420762cc3c124bceedce0e56a5204717e33230db15c8f8a9e5c23458c2091bffad6f3292afccd1513f0d302086da00f5582c83f643ba5bf75dfb4941c656b4f905be14f13379a830e7e15e71919f8b5be8e0f769906e5f6e6e5a618365516af74ee2360db3525329cd7e5cf4ee666afd04663c5b96565fae390cbf754804af05e03bb9596f036e52c187b66e46f3bcf4c7c73f6135f8ee308a544f9abe14ba1b077a9b9ebe9cb09e8924c7e24e664f9fe5e5471546ad23ab9384c99921ba0990bd15de906fc647d1d9489a5c1515a5efd8517049b910158c7efdc22a3671e86076189cfcefdddd5def5c4634b374f34d25f3b03018e5324b64626e69bb1b667647ec926add0a89648414a28058d04f12e9ac5bc2527d189f16558a82daeca13eedc125cb23436f86f68c147015853aa07738c99f571dd51e486401dd134a749b7832b64d9ebcc33a04e1a62f07de55620a688e944daa2c480be3e00871058a6fb34b52bf0c3fc46a556f13a3d6402a9f42c48a7756c07b3a58aa2cf932e650d88dfcf9fa655386b13073eb6134b10806d60b4529d72153f2f4df6df19488c792b4d8d11086cf7ef2d9d1404d1876f4d30d566bf88d3fcd5bd439f82d918bc988cd50147d3770489e25bd953428c5bc66ddfbcdb2e40452cd4fd6adac67febb7de9e8b8ff6f59ad548b96256d80f1092c94d70df278477a36461fca896ebb6d2d40ebfb95f2fb3f584610a1540fd2b511d267e8486615674853112b3f371db52d954b81297d954bb3b5182fee5af93307ad79af888f87ff15445e3292f640c26063d17209f1c79c1267b55afe3228fa254c4875beaf6bf9d586d3ce743d5e8376aa214bc1c529c0f440b4c8a33dcac8938bb2f8c2f19fee903ba7af21d3f6c7049f371db6fa4d0436964f07274274ada68c8601b70f56860059605bcdc0a643a79132f3252141b2c151634dc85217ed18fdac27b3479382d045029fbfa90d655b3e0b5ad134e8d524ba837304ec07d3cd37d3314f3690e04c0c777f1cea960baf23d2c394f245394bbb7f6101fc02bdcf3705ef329a0e1749042a204a3463406f7b34bdf23a8d8e2759f1b24f5308dc2736d1a81173826b059f18eae9ee6be8cab6c24039b8afcf775ee08f290161532715f6c19ac57985299013088c358fada7fbfb9fa339bf9fe5478fc394005ffcddc7da185f9c5ba4a79bcb3a6fa1b280ca745e32211971bd76ed26e923ffc0387017e80e0de6904c0364c7aa54b7aee04ece2c2a318b91f60c6559ef13fb1f774c803fed514358ff6bb4972d1b71b71025d943d4a074d2918be1008f63ab15094d1020c641d04d89bda5326bbfcedd86a064506b33f20bfdd83f59a57500d4aca720c882b192b0232ecee67da5eb3cdf61c931ce96a3bd4210bff8d9b3cef39de2bb68fc9bb645382e2a2971f58ac39471a8091676011900f01a457838c129374dc6e72c4a3107e96361511e44da1c90aa784b4ee081bc2090c3344d12aeabd1c6c68475243e0b7c1e4e0b8df728bcdf3d0fcef630f372ce11bfb680897d3ebb427f08ee18ebb3f5e604121831506e8d3cc9c3700a5bdcb3ebb73d1f494257c353325ca7983781ba108819652041b5edcebb99118ba33244011c93b5044eeab58ec77eb4b9b88ba63a6b98ece554be80db1df349de18df6b66210e965f436cdc5c6e4e01840b6da8175eb074cdc22f8bb36f5ce18c6a9142ca726dd5a889967112535d125cd2e19c397fee7a786cc7d84cdf3d7e7cfe96e6b97ed50ec01a98e36ce7cbe8dded29bd9b701bc59a5a119b2f14af8e1ddc6907899178f1c40d78db921ed0bc5d0984e945f2ba0422452685755820b86133072ba4e6d4560b4baee9c87ea99a857061082d08425038a8ba5bf4988a19676a7757389eaf0d89f9e58c1642ff00913f0abcd23cdf01b5ecbdae37763dfb28a679db4fd8b7616b3a2d96c30e71d4e48dc6e25203a1260eb42a217a157296604806f919f11842668294dc03c57c33d605285bd5142420eb94fc92b1896722ee795871eec92e2dec45509c47b63653e539bc8607325b7d3712c43651bba0701bf6c8e4963d48d4748dfa9fa39c7d69c81cb794a7911cc18d576ae43f3e7d8e9eedc9ed02936e027698e413598bcc8ec1d5fd029b51abf080772abebdafbc6b5db07fb49e9bff7e71af635fab4fdbf15f6a6526acbcfc37bfa294183fe28903af69075c299f972f05f6f2cea53ddad14b115635fa8a637a42482b0fb3fa4c403d43b272c726e1f51f2b469c165d9525d0ada2a582610fa4974c8e57351f587502aa3ffad717b418c2de230b741ea3872d308fdc3ca1f7fb3c87cbd70e0e5d5255a0ae56a58650b3d5b986f0e8fe8b97d46bc52447247e0f6a2361d1ebd1bbad2649d33a1b8c95ad9d294f3e12ba777f0da16f3e7501e2607d5ad28d650b2641aec2eca83e4452a4bf8ed51768ad6238a79cb0d96dafa36915297bc95a3cad090dfb61b8b13b462110780df8acbdf337462a9403599b7f54563418bf314dd4aaa7a1406423a9e70b34ec54872c0cb14077cb5996134f10cd40a13b17cf0731675cf0ad2f981992a5c15613a66c9cf5e6d6910540dc1700", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, r4, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x40, 0x0) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100001) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000140)) 2.485045446s ago: executing program 6 (id=3273): syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e01000006240400011005"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000027ee410985b1ffa3000000"], 0x48) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ftruncate(r3, 0x8001) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000008c0)={r3, &(0x7f0000000900)="524263570898f5f67b80c838b278bb", &(0x7f0000000a40)=""/174}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000009c0)={0x0, 0x4, 0x7, 0x0, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181120003c999941d7356256351564aa29234cb28a821418d2c09022ce3c0d88fdff14b5588e59da03e116cdef0acf57297f9bd9ed486b2cf97fa9e23977cf3b0b29d9861a0835f89b4646091c53d6a07626a04a53ac92dcf5b60e17453c577e4ca2b533bedbab735474567aa94fe589fbf6ce8dc2e134532423b67eb8f31105d561b156055037eeeadb6901e6d290d1c597c0c47d00000000dda058c19750f44771bf7fedab280e00b5c14a9a8545c4006b44de0b2a449b82ca01cfd0c07548623087d44354fdcac36aa28aafc62302d8ba6f71065efe4af32df6af97542aa5d9dae6d4bea76ae5072c051d147174288d823e4ed691db1ebcd1f7f38d21962e4e113f97350ef1ef8354cfcba310dc13efeda7bb83c4665fea9bf6bf45c5096eb91362b0b23b6a5df8ebcdbb2317e7122a516b3174dc29bbac985a8dd3d8f0ce25f51270661c95c4dc8ce70c057e76ef6f58b66702000000000000000000fea5ac0f882d0d445581fd57044ca00ce1957ff721ce6d289ce95d6f5890704833dc0ed327cfe039c8059a5a59e90581872331b8a8013e12ef2e6134bd3036b7b74ab0888357fabe140a7e28957e139cc6917c688cdb3e69dd9b82f16887ae75def61121679fe329a380d91edac98625f7f0f08b4a8c0e820880747a6abc190a0d72cbaf45e0be656ba9744824cbaee8e9d44d968703db", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x768], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002b88e80000f39cdc863efd000000efffffdd7a3f69819fb95c000000e4ad057ce2763e324102b6be86c7fc9f934c026c8d36344e21d5250c2d7cefb5f17c09d48e451676066382a9cc2bbecfd5158b3d2d2dd10817f7c850392ff4b7c709f2fe870bca81c250e14dd2000b11a6a2475c71cba4c2bff7b69f3d5216d28248d98df9826e1a1197f247b9d162c3fd7ea2f8e32dc57eabf646d36c0beda101168416e832f4a06896b9bb64d8c620824d540900000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r6, @ANYBLOB="0000000000feff00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000"], 0x48) close(r11) 2.484461966s ago: executing program 4 (id=3275): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) tee(r2, r0, 0x8, 0x2) 2.422685646s ago: executing program 4 (id=3276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) open(0x0, 0x10103e, 0x0) r1 = getpid() bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010070707000"], 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.945327529s ago: executing program 5 (id=3277): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 7) fcntl$setlease(r0, 0x400, 0x2) 1.933709919s ago: executing program 7 (id=3278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="090000000600000008000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004c9fb2bffae4d5004953fd92d24dbdc9abc9e5de91e214c7edc416d8f53cc9d969753301ec0a1ef0b6dfbc7fa154dd453d450a73886ed0e2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) 1.85078822s ago: executing program 1 (id=3279): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000002"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) syz_clone3(&(0x7f0000000540)={0x4000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e45000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d312c00ec24d52cd656eadd39d406526adc61a7b193d91057769822e39d283530efe28116f0305d770fd70a3670"], 0xff, 0x191, &(0x7f0000000580)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) io_uring_setup(0x4967, &(0x7f00000002c0)) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) rt_sigpending(&(0x7f0000000040), 0x8) 1.586558131s ago: executing program 5 (id=3280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x588, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) syz_clone3(&(0x7f0000000600)={0x8bb719f3ac384950, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000500), {0xf}, &(0x7f0000000540)=""/64, 0x40, &(0x7f0000000580)=""/63, &(0x7f00000005c0)=[r1], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) mlockall(0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6000002", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0000"], 0x6c}}, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000680)=""/104, &(0x7f0000000700)=0x68) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB='\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.545648082s ago: executing program 7 (id=3281): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1fc, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x41}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd671}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x451}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff680}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1160422, &(0x7f0000000b40)={[], [{@subj_type={'subj_type', 0x3d, '/)&)'}}]}) 1.531650842s ago: executing program 4 (id=3282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000640)={[{@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@i_version}, {@noauto_da_alloc}, {@nombcache}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000280)={0x8, 0x7, 0x400, 0x6, 0x8, "e84e609c6e5f27afc255192372ff31e23d69a9"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xff00000000000000}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() open(&(0x7f0000000100)='./file0\x00', 0x20800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x28, r6, 0x309, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24040804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0) 630.820237ms ago: executing program 5 (id=3283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000640)={[{@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@i_version}, {@noauto_da_alloc}, {@nombcache}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000280)={0x8, 0x7, 0x400, 0x6, 0x8, "e84e609c6e5f27afc255192372ff31e23d69a9"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xff00000000000000}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x20800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x28, r6, 0x309, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24040804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0) 352.295898ms ago: executing program 1 (id=3284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff8500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0100009e173610ef171e7206de010203010902"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 306.872439ms ago: executing program 4 (id=3285): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01030000000000000000320000000c"], 0x28}}, 0x0) 286.112948ms ago: executing program 4 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 499.47µs ago: executing program 7 (id=3287): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) 0s ago: executing program 4 (id=3288): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0xffffffffffffff6d) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x2000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200950000d1284ffe51cc19a95073a0a0264eb0e4e96b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338c0700000018c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8c8cbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000005abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041d749de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x10049}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") creat(&(0x7f0000000000)='./file1\x00', 0x0) io_setup(0x202, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "4e5b6f16272e5a85777dda1f0147f08f"}, 0x11, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, r4, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x40, 0x0) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100001) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000140)) kernel console output (not intermixed with test programs): 491] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 672.939643][ T2129] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 673.039702][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.050498][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.060095][ T491] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 673.068967][ T491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.077299][ T491] usb 2-1: config 0 descriptor?? [ 673.319757][ T2129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.330612][ T2129] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 673.339604][ T2129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.355366][ T2129] usb 5-1: config 0 descriptor?? [ 673.630320][ T355] usb 6-1: USB disconnect, device number 83 [ 673.844007][ T2129] keytouch 0003:0926:3333.00CB: fixing up Keytouch IEC report descriptor [ 673.863203][ T2129] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00CB/input/input129 [ 674.037155][ T2129] keytouch 0003:0926:3333.00CB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 674.696276][T10084] xt_policy: too many policy elements [ 674.703715][ T2129] usb 5-1: USB disconnect, device number 95 [ 674.969805][T10089] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2771'. [ 675.059694][ T491] usb 2-1: string descriptor 0 read error: -71 [ 675.129699][ T355] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 675.155029][ T491] uclogic 0003:256C:006D.00CA: failed retrieving string descriptor #200: -71 [ 675.163735][ T491] uclogic 0003:256C:006D.00CA: failed retrieving pen parameters: -71 [ 675.171742][ T491] uclogic 0003:256C:006D.00CA: failed probing pen v2 parameters: -71 [ 675.179665][ T491] uclogic 0003:256C:006D.00CA: failed probing parameters: -71 [ 675.186938][ T491] uclogic: probe of 0003:256C:006D.00CA failed with error -71 [ 675.195231][ T491] usb 2-1: USB disconnect, device number 95 [ 675.379677][ T355] usb 7-1: Using ep0 maxpacket: 16 [ 675.599826][ T2129] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 675.709722][ T355] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 675.718632][ T355] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.726484][ T355] usb 7-1: Product: syz [ 675.730494][ T355] usb 7-1: Manufacturer: syz [ 675.734873][ T355] usb 7-1: SerialNumber: syz [ 675.742935][ T355] r8152-cfgselector 7-1: config 0 descriptor?? [ 676.010010][ T2129] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 676.023216][ T2129] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 676.035171][ T2129] usb 6-1: config 0 has an invalid descriptor of length 4, skipping remainder of the config [ 676.045249][ T2129] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 676.054012][ T2129] usb 6-1: config 0 has no interface number 0 [ 676.059990][ T2129] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 676.070841][ T2129] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 676.081789][ T355] r8152-cfgselector 7-1: Unknown version 0x0000 [ 676.088094][ T2129] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.097870][ T2129] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.110949][ T2129] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 676.119816][ T2129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.131791][ T2129] usb 6-1: config 0 descriptor?? [ 676.170464][ T2129] usb 6-1: MIDIStreaming interface descriptor not found [ 676.309672][ T491] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 676.349678][ T355] r8152-cfgselector 7-1: Unknown version 0x0000 [ 676.358576][ T355] r8152-cfgselector 7-1: USB disconnect, device number 76 [ 676.371297][ T301] usb 6-1: USB disconnect, device number 84 [ 676.559683][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 676.779733][ T2129] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 676.869700][ T491] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 676.889446][T10133] xt_policy: too many policy elements [ 676.895174][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.903427][ T491] usb 5-1: Product: syz [ 676.907466][ T491] usb 5-1: Manufacturer: syz [ 676.912816][ T491] usb 5-1: SerialNumber: syz [ 676.943705][ T491] r8152-cfgselector 5-1: config 0 descriptor?? [ 677.143046][T10139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2789'. [ 677.199734][ T2129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.210276][ T2129] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.219179][ T2129] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 677.228538][ T2129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.235593][ T491] r8152-cfgselector 5-1: Unknown version 0x0000 [ 677.243465][ T2129] usb 2-1: config 0 descriptor?? [ 677.299659][ T39] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 677.519696][ T491] r8152-cfgselector 5-1: Unknown version 0x0000 [ 677.526392][ T491] r8152-cfgselector 5-1: USB disconnect, device number 96 [ 677.659696][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.670459][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.679949][ T39] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 677.688788][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.697136][ T39] usb 7-1: config 0 descriptor?? [ 678.499699][ T39] usb 7-1: string descriptor 0 read error: -71 [ 678.519674][ T39] uclogic 0003:256C:006D.00CC: failed retrieving string descriptor #200: -71 [ 678.528398][ T39] uclogic 0003:256C:006D.00CC: failed retrieving pen parameters: -71 [ 678.536771][ T39] uclogic 0003:256C:006D.00CC: failed probing pen v2 parameters: -71 [ 678.544812][ T39] uclogic 0003:256C:006D.00CC: failed probing parameters: -71 [ 678.552172][ T39] uclogic: probe of 0003:256C:006D.00CC failed with error -71 [ 678.561632][ T39] usb 7-1: USB disconnect, device number 77 [ 678.716754][T10155] syz.5.2795[10155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 678.716811][T10155] syz.5.2795[10155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.051189][T10170] xt_policy: too many policy elements [ 679.067627][ T301] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 679.139626][ T491] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 679.295432][T10172] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2801'. [ 679.540026][ T39] usb 2-1: USB disconnect, device number 96 [ 679.569484][T10176] overlayfs: failed to resolve './file0': -2 [ 679.577626][T10176] loop1: detected capacity change from 0 to 256 [ 679.584093][T10176] FAT-fs (loop1): Unrecognized mount option "r" or missing value [ 679.599698][ T301] usb 6-1: Using ep0 maxpacket: 16 [ 679.640390][T10178] loop1: detected capacity change from 0 to 128 [ 679.647020][T10178] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 679.659263][ T28] audit: type=1400 audit(1731877380.216:696): avc: denied { mount } for pid=10177 comm="syz.1.2804" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 679.682588][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 679.749693][ T301] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 679.809717][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.820663][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.832370][ T491] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 679.841259][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.849670][ T491] usb 5-1: config 0 descriptor?? [ 679.909745][ T301] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 679.918799][ T301] usb 6-1: New USB device strings: Mfr=251, Product=1, SerialNumber=3 [ 679.927086][ T301] usb 6-1: Product: syz [ 679.940305][ T301] usb 6-1: Manufacturer: syz [ 679.948889][ T301] usb 6-1: SerialNumber: syz [ 679.960085][ T301] usb 6-1: config 0 descriptor?? [ 680.000412][ T301] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 680.010668][ T301] usb 6-1: Detected FT2232C/D [ 680.069622][ T39] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 680.200146][T10157] device pim6reg1 entered promiscuous mode [ 680.259721][ T301] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 680.289698][ T301] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 680.296886][ T301] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 680.305768][ T301] usb 6-1: USB disconnect, device number 85 [ 680.309642][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 680.312398][ T301] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 680.326453][ T301] ftdi_sio 6-1:0.0: device disconnected [ 680.334826][ T491] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 680.342651][ T491] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 680.349446][ T491] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 680.356378][ T491] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 680.363224][ T491] cp2112 0003:10C4:EA90.00CD: unknown main item tag 0x0 [ 680.370646][ T491] cp2112 0003:10C4:EA90.00CD: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 680.540873][ T491] cp2112 0003:10C4:EA90.00CD: Part Number: 0x00 Device Version: 0x00 [ 680.589664][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 680.598658][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.619634][ T39] usb 2-1: Product: syz [ 680.623616][ T39] usb 2-1: Manufacturer: syz [ 680.628042][ T39] usb 2-1: SerialNumber: syz [ 680.649768][ T39] r8152-cfgselector 2-1: config 0 descriptor?? [ 680.909707][ T39] r8152-cfgselector 2-1: Unknown version 0x0000 [ 681.049689][ T2129] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 681.089939][ T28] audit: type=1400 audit(1731877381.536:697): avc: denied { write } for pid=10195 comm="syz.6.2811" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 681.189658][ T39] r8152-cfgselector 2-1: Unknown version 0x0000 [ 681.197373][ T39] r8152-cfgselector 2-1: USB disconnect, device number 97 [ 681.359703][ T491] cp2112 0003:10C4:EA90.00CD: error setting SMBus config [ 681.367118][ T491] cp2112: probe of 0003:10C4:EA90.00CD failed with error -71 [ 681.378242][ T491] usb 5-1: USB disconnect, device number 97 [ 681.429669][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.440487][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.450161][ T2129] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 681.459074][ T2129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.467834][ T2129] usb 6-1: config 0 descriptor?? [ 681.731862][ T28] audit: type=1400 audit(1731877382.296:698): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 682.019720][ T355] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 682.139672][ T39] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 682.229752][ T2129] usb 6-1: string descriptor 0 read error: -71 [ 682.249681][ T2129] uclogic 0003:256C:006D.00CE: failed retrieving string descriptor #200: -71 [ 682.258289][ T2129] uclogic 0003:256C:006D.00CE: failed retrieving pen parameters: -71 [ 682.266368][ T2129] uclogic 0003:256C:006D.00CE: failed probing pen v2 parameters: -71 [ 682.274332][ T2129] uclogic 0003:256C:006D.00CE: failed probing parameters: -71 [ 682.281705][ T2129] uclogic: probe of 0003:256C:006D.00CE failed with error -71 [ 682.289915][ T2129] usb 6-1: USB disconnect, device number 86 [ 682.379726][ T355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.389827][ T355] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.404379][ T355] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 682.413251][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.422125][ T355] usb 2-1: config 0 descriptor?? [ 682.460281][ T355] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 682.499717][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.535272][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 682.544517][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.550368][T10212] xt_policy: too many policy elements [ 682.553543][ T39] usb 5-1: config 0 descriptor?? [ 682.780541][T10214] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2816'. [ 683.121886][ T39] keytouch 0003:0926:3333.00CF: fixing up Keytouch IEC report descriptor [ 683.140481][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00CF/input/input130 [ 683.282807][ T39] keytouch 0003:0926:3333.00CF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 683.358390][ T39] usb 5-1: USB disconnect, device number 98 [ 684.199653][ T301] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 684.579700][ T301] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 684.590877][ T301] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 684.601974][ T301] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 684.610762][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.629738][T10228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 684.719695][ T1568] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 684.765405][ T491] usb 2-1: USB disconnect, device number 98 [ 684.802820][T10245] loop1: detected capacity change from 0 to 256 [ 684.821699][T10245] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 684.901575][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2829'. [ 685.009649][ T1568] usb 7-1: Using ep0 maxpacket: 16 [ 685.149696][ T312] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 685.157167][ T1568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.167843][ T1568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.177500][ T1568] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 685.186369][ T1568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.195069][ T1568] usb 7-1: config 0 descriptor?? [ 685.549721][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.560521][ T312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.570263][ T312] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 685.579185][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.588055][ T312] usb 6-1: config 0 descriptor?? [ 685.593102][ T301] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 685.599239][T10228] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2822'. [ 685.601606][ T301] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input131 [ 685.680807][ T1568] cp2112 0003:10C4:EA90.00D0: unknown main item tag 0x0 [ 685.687606][ T1568] cp2112 0003:10C4:EA90.00D0: unknown main item tag 0x0 [ 685.695530][ T1568] cp2112 0003:10C4:EA90.00D0: unknown main item tag 0x0 [ 685.702400][ T1568] cp2112 0003:10C4:EA90.00D0: unknown main item tag 0x0 [ 685.709075][ T1568] cp2112 0003:10C4:EA90.00D0: unknown main item tag 0x0 [ 685.716444][ T1568] cp2112 0003:10C4:EA90.00D0: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 685.745253][T10257] loop1: detected capacity change from 0 to 1024 [ 685.761286][T10257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 685.899727][ T1568] cp2112 0003:10C4:EA90.00D0: Part Number: 0x00 Device Version: 0x00 [ 686.319749][ T312] usb 6-1: string descriptor 0 read error: -71 [ 686.349075][ T312] uclogic 0003:256C:006D.00D1: failed retrieving string descriptor #200: -71 [ 686.376971][ T312] uclogic 0003:256C:006D.00D1: failed retrieving pen parameters: -71 [ 686.401616][ T312] uclogic 0003:256C:006D.00D1: failed probing pen v2 parameters: -71 [ 686.416713][ T312] uclogic 0003:256C:006D.00D1: failed probing parameters: -71 [ 686.424296][ T312] uclogic: probe of 0003:256C:006D.00D1 failed with error -71 [ 686.437402][ T312] usb 6-1: USB disconnect, device number 87 [ 686.816655][ T291] EXT4-fs (loop1): unmounting filesystem. [ 686.969199][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 686.983314][T10273] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2834'. [ 687.021906][T10273] loop1: detected capacity change from 0 to 256 [ 687.100260][T10273] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 687.128049][T10273] incfs: ino conflict with backing FS 1 [ 687.326964][T10273] overlayfs: upper fs does not support tmpfile. [ 687.363686][ T491] usb 5-1: USB disconnect, device number 99 [ 687.419734][ T1568] cp2112 0003:10C4:EA90.00D0: error setting SMBus config [ 687.428398][ T1568] cp2112: probe of 0003:10C4:EA90.00D0 failed with error -71 [ 687.436743][ T1568] usb 7-1: USB disconnect, device number 78 [ 687.697514][T10282] loop1: detected capacity change from 0 to 512 [ 687.704058][T10282] EXT4-fs: Ignoring removed mblk_io_submit option [ 687.710609][T10282] EXT4-fs: Ignoring removed i_version option [ 687.718759][T10282] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.2838: invalid block [ 687.729812][T10282] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2838: couldn't read orphan inode 11 (err -117) [ 687.741951][T10282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 687.750299][ T491] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 688.358342][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 688.372247][T10296] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2841'. [ 688.731840][ T291] EXT4-fs (loop1): unmounting filesystem. [ 688.759831][ T491] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.780041][ T491] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.792938][ T491] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 688.801990][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.813835][ T491] usb 5-1: config 0 descriptor?? [ 688.826365][T10299] syz.1.2842[10299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.826419][T10299] syz.1.2842[10299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.860176][ T491] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 688.910723][T10298] loop1: detected capacity change from 0 to 128 [ 688.930016][T10298] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 688.954566][T10298] futex_wake_op: syz.1.2842 tries to shift op by 32; fix this program [ 689.335736][T10309] loop1: detected capacity change from 0 to 1024 [ 689.404080][ T39] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 689.421246][T10309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 689.649611][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 689.769671][ T39] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 689.782952][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 689.789478][ T39] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 689.798505][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.811666][ T39] usb 6-1: config 0 descriptor?? [ 689.940922][ T291] EXT4-fs (loop1): unmounting filesystem. [ 690.229679][ T355] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 690.443672][ T491] usb 5-1: USB disconnect, device number 100 [ 690.487803][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.525259][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.699726][ T355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.712613][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 690.742718][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 690.749177][ T355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.759530][ T39] usb 6-1: USB disconnect, device number 88 [ 690.765843][ T355] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 690.775304][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.783842][ T355] usb 2-1: config 0 descriptor?? [ 691.009677][ T491] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 691.249658][ T491] usb 5-1: Using ep0 maxpacket: 16 [ 691.329523][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2851'. [ 691.399825][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.417527][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.434399][ T491] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 691.445467][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.625071][ T491] usb 5-1: config 0 descriptor?? [ 691.858991][ T355] usb 2-1: string descriptor 0 read error: -71 [ 691.879704][ T355] uclogic 0003:256C:006D.00D2: failed retrieving string descriptor #200: -71 [ 691.888396][ T355] uclogic 0003:256C:006D.00D2: failed retrieving pen parameters: -71 [ 691.896629][ T355] uclogic 0003:256C:006D.00D2: failed probing pen v2 parameters: -71 [ 691.910328][ T355] uclogic 0003:256C:006D.00D2: failed probing parameters: -71 [ 691.917735][ T355] uclogic: probe of 0003:256C:006D.00D2 failed with error -71 [ 691.932408][ T355] usb 2-1: USB disconnect, device number 99 [ 692.630738][ T491] cp2112 0003:10C4:EA90.00D3: unknown main item tag 0x0 [ 692.640057][ T491] cp2112 0003:10C4:EA90.00D3: unknown main item tag 0x0 [ 692.680963][ T491] cp2112 0003:10C4:EA90.00D3: unknown main item tag 0x0 [ 692.690670][ T491] cp2112 0003:10C4:EA90.00D3: unknown main item tag 0x0 [ 692.697568][ T491] cp2112 0003:10C4:EA90.00D3: unknown main item tag 0x0 [ 692.712090][ T491] cp2112 0003:10C4:EA90.00D3: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 692.849697][ T491] cp2112 0003:10C4:EA90.00D3: Part Number: 0x00 Device Version: 0x00 [ 692.928512][T10362] FAULT_INJECTION: forcing a failure. [ 692.928512][T10362] name failslab, interval 1, probability 0, space 0, times 0 [ 692.962483][T10362] CPU: 0 PID: 10362 Comm: syz.1.2859 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 692.969627][ T2129] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 692.972212][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 692.972228][T10362] Call Trace: [ 692.972236][T10362] [ 692.995393][T10362] dump_stack_lvl+0x151/0x1b7 [ 692.999901][T10362] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 693.005197][T10362] dump_stack+0x15/0x1e [ 693.009192][T10362] should_fail_ex+0x3d0/0x520 [ 693.013705][T10362] ? getname_kernel+0x59/0x2e0 [ 693.018301][T10362] __should_failslab+0xaf/0xf0 [ 693.022924][T10362] should_failslab+0x9/0x20 [ 693.027242][T10362] kmem_cache_alloc+0x3b/0x2c0 [ 693.032278][T10362] getname_kernel+0x59/0x2e0 [ 693.036703][T10362] kern_path+0x23/0x1a0 [ 693.040701][T10362] incfs_mount_fs+0x2ce/0xa30 [ 693.045211][T10362] ? incfs_unlink+0x90/0x90 [ 693.049551][T10362] ? vfs_parse_fs_string+0x18c/0x220 [ 693.054668][T10362] ? cap_capable+0x1d2/0x270 [ 693.059101][T10362] legacy_get_tree+0xf1/0x190 [ 693.063609][T10362] ? incfs_unlink+0x90/0x90 [ 693.067953][T10362] vfs_get_tree+0x88/0x290 [ 693.072205][T10362] do_new_mount+0x2ba/0xb30 [ 693.076552][T10362] ? do_move_mount_old+0x160/0x160 [ 693.081487][T10362] ? security_capable+0x87/0xb0 [ 693.086178][T10362] ? ns_capable+0x89/0xe0 [ 693.090341][T10362] path_mount+0x671/0x1070 [ 693.094592][T10362] ? user_path_at_empty+0x14e/0x1a0 [ 693.099633][T10362] __se_sys_mount+0x2c4/0x3b0 [ 693.104142][T10362] ? __this_cpu_preempt_check+0x13/0x20 [ 693.109525][T10362] ? __x64_sys_mount+0xd0/0xd0 [ 693.114123][T10362] ? debug_smp_processor_id+0x17/0x20 [ 693.119347][T10362] __x64_sys_mount+0xbf/0xd0 [ 693.123757][T10362] x64_sys_call+0x49d/0x9a0 [ 693.128096][T10362] do_syscall_64+0x3b/0xb0 [ 693.132347][T10362] ? clear_bhb_loop+0x55/0xb0 [ 693.136865][T10362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.142595][T10362] RIP: 0033:0x7fbf1c37e719 [ 693.146846][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.166376][T10362] RSP: 002b:00007fbf1d09b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 693.174620][T10362] RAX: ffffffffffffffda RBX: 00007fbf1c535f80 RCX: 00007fbf1c37e719 [ 693.182428][T10362] RDX: 0000000020001480 RSI: 0000000020000340 RDI: 0000000020000300 [ 693.190240][T10362] RBP: 00007fbf1d09b090 R08: 0000000020000240 R09: 0000000000000000 [ 693.198144][T10362] R10: 0000000000a00012 R11: 0000000000000246 R12: 0000000000000002 [ 693.205949][T10362] R13: 0000000000000000 R14: 00007fbf1c535f80 R15: 00007ffc099d2aa8 [ 693.213804][T10362] [ 693.217529][T10362] incfs: Error accessing: ./file0. [ 693.219611][ T2129] usb 7-1: Using ep0 maxpacket: 32 [ 693.222536][T10362] incfs: mount failed -12 [ 693.254497][T10364] loop1: detected capacity change from 0 to 512 [ 693.270245][T10364] EXT4-fs: Ignoring removed mblk_io_submit option [ 693.276563][T10364] EXT4-fs: Ignoring removed i_version option [ 693.310454][T10364] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.2860: invalid block [ 693.334279][T10364] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2860: couldn't read orphan inode 11 (err -117) [ 693.359697][ T2129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.363392][T10364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 693.379605][ T2129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.399313][ T2129] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.410845][ T2129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.419391][ T2129] usb 7-1: config 0 descriptor?? [ 693.500164][ T2129] hub 7-1:0.0: USB hub found [ 693.719817][ T2129] hub 7-1:0.0: 1 port detected [ 694.059955][ T28] audit: type=1400 audit(1731877394.626:699): avc: denied { ioctl } for pid=10351 comm="syz.7.2856" path="socket:[60789]" dev="sockfs" ino=60789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 694.112916][ T491] cp2112 0003:10C4:EA90.00D3: error setting SMBus config [ 694.121048][ T291] EXT4-fs (loop1): unmounting filesystem. [ 694.122017][ T491] cp2112: probe of 0003:10C4:EA90.00D3 failed with error -71 [ 694.148358][ T491] usb 5-1: USB disconnect, device number 101 [ 694.240757][ T2129] usb 7-1: USB disconnect, device number 79 [ 694.393621][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2864'. [ 694.699652][ T301] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 694.725270][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2868'. [ 695.039624][ T2129] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 695.109686][ T301] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 695.124957][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.142918][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.157380][ T301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 695.188780][ T301] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 695.207998][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.228995][ T301] usb 2-1: config 0 descriptor?? [ 695.279608][ T2129] usb 5-1: Using ep0 maxpacket: 16 [ 695.399752][ T2129] usb 5-1: config 0 has no interfaces? [ 695.559760][ T2129] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 695.577860][ T2129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.603719][ T2129] usb 5-1: Product: syz [ 695.614520][ T2129] usb 5-1: Manufacturer: syz [ 695.627232][ T2129] usb 5-1: SerialNumber: syz [ 695.641188][ T2129] r8152-cfgselector 5-1: config 0 descriptor?? [ 695.720647][ T301] thrustmaster 0003:044F:B653.00D4: unbalanced delimiter at end of report description [ 695.740399][ T301] thrustmaster 0003:044F:B653.00D4: parse failed [ 695.756383][ T301] thrustmaster: probe of 0003:044F:B653.00D4 failed with error -22 [ 695.930529][ T2129] r8152-cfgselector 5-1: Unknown version 0x0000 [ 696.046428][ T2129] usb 2-1: USB disconnect, device number 100 [ 696.194819][ T355] r8152-cfgselector 5-1: USB disconnect, device number 102 [ 696.215622][T10427] syz.7.2878[10427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.215694][T10427] syz.7.2878[10427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.216563][T10425] syz.7.2878[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.249750][T10425] syz.7.2878[10425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.400565][T10433] FAULT_INJECTION: forcing a failure. [ 696.400565][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 696.424389][T10433] CPU: 1 PID: 10433 Comm: syz.5.2879 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 696.434104][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 696.444003][T10433] Call Trace: [ 696.447123][T10433] [ 696.449911][T10433] dump_stack_lvl+0x151/0x1b7 [ 696.454418][T10433] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 696.459710][T10433] dump_stack+0x15/0x1e [ 696.463808][T10433] should_fail_ex+0x3d0/0x520 [ 696.468317][T10433] ? slhc_init+0x77/0x7a0 [ 696.472492][T10433] __should_failslab+0xaf/0xf0 [ 696.477086][T10433] should_failslab+0x9/0x20 [ 696.481424][T10433] __kmem_cache_alloc_node+0x3d/0x250 [ 696.486639][T10433] ? slhc_init+0x77/0x7a0 [ 696.490802][T10433] kmalloc_trace+0x2a/0xa0 [ 696.495046][T10433] slhc_init+0x77/0x7a0 [ 696.499154][T10433] ppp_ioctl+0x13fc/0x1990 [ 696.503405][T10433] ? __mutex_lock_slowpath+0x10/0x10 [ 696.508524][T10433] ? ppp_poll+0x250/0x250 [ 696.512697][T10433] ? security_file_ioctl+0x84/0xb0 [ 696.517631][T10433] ? ppp_poll+0x250/0x250 [ 696.521798][T10433] __se_sys_ioctl+0x114/0x190 [ 696.526311][T10433] __x64_sys_ioctl+0x7b/0x90 [ 696.530739][T10433] x64_sys_call+0x98/0x9a0 [ 696.535014][T10433] do_syscall_64+0x3b/0xb0 [ 696.539593][T10433] ? clear_bhb_loop+0x55/0xb0 [ 696.544059][T10433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.549781][T10433] RIP: 0033:0x7fe275b7e719 [ 696.554034][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.573477][T10433] RSP: 002b:00007fe27697e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.581729][T10433] RAX: ffffffffffffffda RBX: 00007fe275d36130 RCX: 00007fe275b7e719 [ 696.589536][T10433] RDX: 000000002000000c RSI: 0000000040047451 RDI: 0000000000000006 [ 696.597349][T10433] RBP: 00007fe27697e090 R08: 0000000000000000 R09: 0000000000000000 [ 696.605159][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.612966][T10433] R13: 0000000000000000 R14: 00007fe275d36130 R15: 00007ffcd103ef28 [ 696.620781][T10433] [ 696.659843][T10436] loop1: detected capacity change from 0 to 512 [ 696.714039][T10436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 696.722858][T10436] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038 (0x7fffffff) [ 697.647138][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2882'. [ 698.067270][ T291] EXT4-fs (loop1): unmounting filesystem. [ 698.180954][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2883'. [ 698.442757][ T301] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 698.899790][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.950527][ T301] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 698.960325][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.969514][ T301] usb 2-1: config 0 descriptor?? [ 699.082250][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2892'. [ 699.229710][ T1568] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 699.264544][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2893'. [ 699.460727][ T301] keytouch 0003:0926:3333.00D5: fixing up Keytouch IEC report descriptor [ 699.470295][ T301] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D5/input/input132 [ 699.563832][ T301] keytouch 0003:0926:3333.00D5: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 699.629679][ T1568] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.639776][ T1568] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.652583][ T1568] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 699.661473][ T1568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.661828][ T39] usb 2-1: USB disconnect, device number 101 [ 699.670251][ T1568] usb 7-1: config 0 descriptor?? [ 699.721315][ T1568] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 700.763482][ T1568] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 700.808416][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 700.853391][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 701.049614][ T1568] usb 6-1: Using ep0 maxpacket: 32 [ 701.189653][ T1568] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 701.197858][ T1568] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 701.206348][ T1568] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 701.215293][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.224801][ T1568] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 701.234330][ T1568] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 701.247188][ T1568] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 701.256034][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.264669][ T1568] usb 6-1: config 0 descriptor?? [ 701.520309][ T1568] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 701.577075][ T1568] usb 6-1: USB disconnect, device number 89 [ 701.587893][ T1568] usblp0: removed [ 701.859743][ T301] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 701.962176][ T39] usb 7-1: USB disconnect, device number 80 [ 702.109654][ T1568] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 702.117142][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 702.133934][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 702.159948][T10527] xt_policy: too many policy elements [ 702.249798][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.262118][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.271901][ T301] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 702.280906][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.292758][ T301] usb 2-1: config 0 descriptor?? [ 702.519587][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2908'. [ 702.528695][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2908'. [ 702.610377][ T1568] usb 6-1: Using ep0 maxpacket: 32 [ 702.729640][ T1568] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 702.737811][ T1568] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 702.746294][ T1568] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 702.756219][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.765743][ T1568] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.775267][ T1568] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 702.788054][ T1568] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 702.797220][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.806485][ T1568] usb 6-1: config 0 descriptor?? [ 702.860124][ T312] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 704.012737][ T301] cp2112 0003:10C4:EA90.00D6: unknown main item tag 0x0 [ 704.020572][ T1568] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 704.047914][ T301] cp2112 0003:10C4:EA90.00D6: unknown main item tag 0x0 [ 704.060458][ T1568] usb 6-1: USB disconnect, device number 90 [ 704.066376][ T301] cp2112 0003:10C4:EA90.00D6: unknown main item tag 0x0 [ 704.085003][ T1568] usblp0: removed [ 704.088603][ T301] cp2112 0003:10C4:EA90.00D6: unknown main item tag 0x0 [ 704.089049][T10546] xt_policy: too many policy elements [ 704.101523][ T301] cp2112 0003:10C4:EA90.00D6: unknown main item tag 0x0 [ 704.112876][ T301] cp2112 0003:10C4:EA90.00D6: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 705.431334][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2914'. [ 705.440144][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 705.624635][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.642004][ T312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.690340][ T301] cp2112 0003:10C4:EA90.00D6: error requesting version [ 705.698496][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.706782][ T301] cp2112: probe of 0003:10C4:EA90.00D6 failed with error -71 [ 705.714909][ T312] usb 5-1: config 0 descriptor?? [ 705.721564][ T301] usb 2-1: USB disconnect, device number 102 [ 705.749804][ T312] usb 5-1: can't set config #0, error -71 [ 705.756105][ T312] usb 5-1: USB disconnect, device number 103 [ 706.129610][ T301] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 706.523516][T10576] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2923'. [ 706.765342][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.789110][ T301] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 707.520614][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2924'. [ 708.067138][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.079013][ T301] usb 2-1: config 0 descriptor?? [ 709.310363][ T301] keytouch 0003:0926:3333.00D7: fixing up Keytouch IEC report descriptor [ 709.322335][ T301] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D7/input/input133 [ 709.339705][ T312] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 709.347226][ T1568] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 709.404747][ T301] keytouch 0003:0926:3333.00D7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 709.527609][ T2129] usb 2-1: USB disconnect, device number 103 [ 709.589679][ T1568] usb 6-1: Using ep0 maxpacket: 16 [ 709.639614][ T2387] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 709.709693][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.720472][ T312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.731117][ T312] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 709.739954][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.749491][ T1568] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 709.758363][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.766664][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.775084][ T312] usb 7-1: config 0 descriptor?? [ 709.781008][ T1568] usb 6-1: config 0 descriptor?? [ 709.999758][ T2387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.010148][ T2387] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.091592][T10611] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2934'. [ 710.412874][ T2387] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 710.418533][T10618] loop1: detected capacity change from 0 to 256 [ 710.422184][ T2387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.439137][ T2387] usb 5-1: config 0 descriptor?? [ 710.449253][T10618] FAT-fs (loop1): Directory bread(block 64) failed [ 710.450837][ T312] keytouch 0003:0926:3333.00D9: fixing up Keytouch IEC report descriptor [ 710.458322][T10618] FAT-fs (loop1): Directory bread(block 65) failed [ 710.464718][ T1568] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 710.472472][T10618] FAT-fs (loop1): Directory bread(block 66) failed [ 710.477124][ T1568] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 710.483819][T10618] FAT-fs (loop1): Directory bread(block 67) failed [ 710.490833][ T2387] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 710.498710][T10618] FAT-fs (loop1): Directory bread(block 68) failed [ 710.505475][ T312] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.00D9/input/input134 [ 710.517507][T10618] FAT-fs (loop1): Directory bread(block 69) failed [ 710.522418][ T1568] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 710.530538][T10618] FAT-fs (loop1): Directory bread(block 70) failed [ 710.534607][ T1568] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 710.540896][T10618] FAT-fs (loop1): Directory bread(block 71) failed [ 710.547598][ T1568] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 710.554155][T10618] FAT-fs (loop1): Directory bread(block 72) failed [ 710.567273][ T1568] cp2112 0003:10C4:EA90.00D8: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 710.577064][T10618] FAT-fs (loop1): Directory bread(block 73) failed [ 710.606551][ T312] keytouch 0003:0926:3333.00D9: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 710.658002][ T312] usb 7-1: USB disconnect, device number 81 [ 710.679665][ T1568] cp2112 0003:10C4:EA90.00D8: Part Number: 0x00 Device Version: 0x00 [ 710.708637][T10620] loop1: detected capacity change from 0 to 512 [ 710.723040][T10620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 710.732287][T10620] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038 (0x7fffffff) [ 710.822790][ T28] audit: type=1400 audit(1731877411.386:700): avc: denied { setopt } for pid=10624 comm="syz.7.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.213124][T10633] xt_policy: too many policy elements [ 711.644151][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2940'. [ 711.653162][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2940'. [ 711.710458][ T291] EXT4-fs (loop1): unmounting filesystem. [ 712.525851][T10642] xt_policy: too many policy elements [ 712.610151][ T355] usb 5-1: USB disconnect, device number 104 [ 713.029628][ T1568] cp2112 0003:10C4:EA90.00D8: error setting SMBus config [ 713.039639][ T1568] cp2112: probe of 0003:10C4:EA90.00D8 failed with error -71 [ 713.049407][ T1568] usb 6-1: USB disconnect, device number 91 [ 713.576905][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2942'. [ 713.585797][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2942'. [ 713.708814][T10667] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2948'. [ 713.755192][T10667] loop1: detected capacity change from 0 to 256 [ 714.915421][T10667] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 714.933309][T10665] incfs: ino conflict with backing FS 1 [ 714.946259][T10665] overlayfs: upper fs does not support tmpfile. [ 715.352640][T10674] xt_policy: too many policy elements [ 715.728758][T10685] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2950'. [ 715.737668][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 715.819605][ T2129] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 715.899618][ T312] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 716.069622][ T2129] usb 7-1: Using ep0 maxpacket: 16 [ 716.289710][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.302705][ T312] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 716.312490][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.330004][T10697] FAULT_INJECTION: forcing a failure. [ 716.330004][T10697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.343592][T10697] CPU: 1 PID: 10697 Comm: syz.5.2957 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 716.343807][ T312] usb 2-1: config 0 descriptor?? [ 716.353309][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 716.353328][T10697] Call Trace: [ 716.353336][T10697] [ 716.353344][T10697] dump_stack_lvl+0x151/0x1b7 [ 716.353372][T10697] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 716.353398][T10697] dump_stack+0x15/0x1e [ 716.387697][T10697] should_fail_ex+0x3d0/0x520 [ 716.392200][T10697] should_fail_alloc_page+0x68/0x90 [ 716.397238][T10697] prepare_alloc_pages+0x14e/0x6f0 [ 716.402185][T10697] ? __alloc_pages_bulk+0xda0/0xda0 [ 716.407428][T10697] __alloc_pages+0x162/0x610 [ 716.411850][T10697] ? prep_new_page+0x110/0x110 [ 716.416445][T10697] pte_alloc_one+0x73/0x1b0 [ 716.420785][T10697] ? pfn_modify_allowed+0x2f0/0x2f0 [ 716.425899][T10697] ? stack_trace_save+0x1c0/0x1c0 [ 716.430763][T10697] ? kernel_text_address+0xa9/0xe0 [ 716.435711][T10697] __pte_alloc+0x86/0x350 [ 716.439876][T10697] ? __kasan_check_write+0x14/0x20 [ 716.444826][T10697] ? try_grab_folio+0x243/0x710 [ 716.449508][T10697] ? pmd_install+0x260/0x260 [ 716.450364][ T312] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 716.453944][T10697] ? __kasan_check_read+0x11/0x20 [ 716.465915][T10697] ? hugepage_vma_check+0x182/0x4f0 [ 716.470950][T10697] handle_mm_fault+0x2d90/0x30e0 [ 716.475728][T10697] ? numa_migrate_prep+0xe0/0xe0 [ 716.480499][T10697] ? down_read_trylock+0x319/0x7d0 [ 716.485451][T10697] ? lock_mm_and_find_vma+0x9c/0x310 [ 716.490563][T10697] exc_page_fault+0x24d/0x6d0 [ 716.495079][T10697] asm_exc_page_fault+0x27/0x30 [ 716.499764][T10697] RIP: 0010:copy_user_short_string+0x24/0x40 [ 716.505582][T10697] Code: 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 716.525028][T10697] RSP: 0018:ffffc9000401f408 EFLAGS: 00050202 [ 716.530921][T10697] RAX: ffffffff81c46100 RBX: ffffc9000401f510 RCX: 0000000000000004 [ 716.538732][T10697] RDX: 0000000000000004 RSI: ffffc9000401f510 RDI: 000000002049c001 [ 716.546545][T10697] RBP: ffffc9000401f460 R08: 0000000000000005 R09: ffffffff81c46186 [ 716.554448][T10697] R10: 0000000000000003 R11: ffff8881139c0000 R12: 0000000000000004 [ 716.562252][T10697] R13: 000000002049c001 R14: 1ffff11023248a9c R15: ffff8881192454e0 [ 716.570063][T10697] ? __check_object_size+0x76/0x650 [ 716.575101][T10697] ? usercopy_abort+0x80/0x90 [ 716.579610][T10697] ? kvm_write_guest_offset_cached+0x236/0x2d0 [ 716.585779][T10697] kvm_write_guest_cached+0x2f/0x40 [ 716.590801][T10697] kvm_lapic_sync_to_vapic+0x674/0xba0 [ 716.596096][T10697] ? kvm_apic_has_interrupt+0x4be/0xa70 [ 716.601476][T10697] ? kvm_lapic_sync_from_vapic+0x690/0x690 [ 716.607211][T10697] ? vmx_update_cr8_intercept+0xa1/0x240 [ 716.612761][T10697] vcpu_enter_guest+0x242a/0x9490 [ 716.617627][T10697] ? avc_has_perm+0x16f/0x260 [ 716.622139][T10697] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 716.627521][T10697] ? 0xffffffffa00038c0 [ 716.631508][T10697] ? is_bpf_text_address+0x172/0x190 [ 716.636628][T10697] ? stack_trace_save+0x1c0/0x1c0 [ 716.641488][T10697] ? kernel_text_address+0xa9/0xe0 [ 716.646434][T10697] ? __kernel_text_address+0xd/0x40 [ 716.651473][T10697] ? unwind_get_return_address+0x4d/0x90 [ 716.656948][T10697] ? arch_stack_walk+0xf3/0x140 [ 716.661634][T10697] ? _parse_integer_limit+0x19b/0x1e0 [ 716.666837][T10697] ? memset+0x35/0x40 [ 716.670662][T10697] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 716.675514][T10697] ? _parse_integer+0x40/0x40 [ 716.680032][T10697] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 716.686446][T10697] ? __stack_depot_save+0x36/0x480 [ 716.691396][T10697] ? kasan_save_free_info+0x2b/0x40 [ 716.696428][T10697] ? read_msr+0x50/0x50 [ 716.700420][T10697] ? do_vfs_ioctl+0xba7/0x29a0 [ 716.705023][T10697] ? __this_cpu_preempt_check+0x13/0x20 [ 716.710402][T10697] ? xfd_validate_state+0x6f/0x170 [ 716.715438][T10697] ? __local_bh_enable_ip+0x58/0x80 [ 716.720475][T10697] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 716.725678][T10697] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 716.730804][T10697] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 716.736269][T10697] ? __kvm_request_immediate_exit+0x70/0x70 [ 716.742002][T10697] ? vfs_write+0x952/0xed0 [ 716.746249][T10697] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 716.750764][T10697] ? xa_release+0x40/0x40 [ 716.754930][T10697] ? selinux_file_ioctl+0x3cc/0x540 [ 716.759961][T10697] ? __mutex_lock_slowpath+0x10/0x10 [ 716.765090][T10697] ? selinux_file_alloc_security+0x120/0x120 [ 716.770898][T10697] ? __fget_files+0x2cb/0x330 [ 716.775414][T10697] ? security_file_ioctl+0x84/0xb0 [ 716.780357][T10697] ? xa_release+0x40/0x40 [ 716.784523][T10697] __se_sys_ioctl+0x114/0x190 [ 716.789042][T10697] __x64_sys_ioctl+0x7b/0x90 [ 716.793462][T10697] x64_sys_call+0x98/0x9a0 [ 716.797714][T10697] do_syscall_64+0x3b/0xb0 [ 716.801978][T10697] ? clear_bhb_loop+0x55/0xb0 [ 716.806480][T10697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.812212][T10697] RIP: 0033:0x7fe275b7e719 [ 716.816466][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.835905][T10697] RSP: 002b:00007fe27699e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.844155][T10697] RAX: ffffffffffffffda RBX: 00007fe275d36058 RCX: 00007fe275b7e719 [ 716.851963][T10697] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 716.859770][T10697] RBP: 00007fe27699e090 R08: 0000000000000000 R09: 0000000000000000 [ 716.867682][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.875497][T10697] R13: 0000000000000000 R14: 00007fe275d36058 R15: 00007ffcd103ef28 [ 716.883317][T10697] [ 716.889652][ T2129] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 716.900671][ T2129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.908505][ T2129] usb 7-1: Product: syz [ 716.912568][ T2129] usb 7-1: Manufacturer: syz [ 716.916907][ T2129] usb 7-1: SerialNumber: syz [ 716.921926][ T2129] r8152-cfgselector 7-1: config 0 descriptor?? [ 717.079361][ T355] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 717.455282][T10707] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2961'. [ 717.519823][ T2129] r8152-cfgselector 7-1: Unknown version 0x0000 [ 717.579655][ T355] usb 5-1: Using ep0 maxpacket: 16 [ 717.700173][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.711758][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.721442][ T355] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 717.731938][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.740326][ T355] usb 5-1: config 0 descriptor?? [ 717.779734][ T2129] r8152-cfgselector 7-1: Unknown version 0x0000 [ 717.787264][ T2129] r8152-cfgselector 7-1: USB disconnect, device number 82 [ 718.235224][ T355] cp2112 0003:10C4:EA90.00DA: unknown main item tag 0x0 [ 718.257732][ T355] cp2112 0003:10C4:EA90.00DA: unknown main item tag 0x0 [ 718.340557][ T355] cp2112 0003:10C4:EA90.00DA: unknown main item tag 0x0 [ 718.362359][ T355] cp2112 0003:10C4:EA90.00DA: unknown main item tag 0x0 [ 718.379349][ T355] cp2112 0003:10C4:EA90.00DA: unknown main item tag 0x0 [ 718.390228][ T355] cp2112 0003:10C4:EA90.00DA: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 718.509674][ T355] cp2112 0003:10C4:EA90.00DA: Part Number: 0x00 Device Version: 0x00 [ 718.537387][ T312] usb 2-1: USB disconnect, device number 104 [ 718.812655][T10733] tmpfs: Bad value for 'mpol' [ 718.841618][T10735] FAULT_INJECTION: forcing a failure. [ 718.841618][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 718.869606][T10735] CPU: 0 PID: 10735 Comm: syz.5.2971 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 718.879328][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 718.889227][T10735] Call Trace: [ 718.892348][T10735] [ 718.895132][T10735] dump_stack_lvl+0x151/0x1b7 [ 718.899643][T10735] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 718.904941][T10735] dump_stack+0x15/0x1e [ 718.908924][T10735] should_fail_ex+0x3d0/0x520 [ 718.913450][T10735] ? __se_sys_mount+0x156/0x3b0 [ 718.918210][T10735] __should_failslab+0xaf/0xf0 [ 718.922816][T10735] should_failslab+0x9/0x20 [ 718.927150][T10735] __kmem_cache_alloc_node+0x3d/0x250 [ 718.932357][T10735] ? __kasan_check_write+0x14/0x20 [ 718.937314][T10735] ? _copy_from_user+0x90/0xc0 [ 718.941906][T10735] ? __se_sys_mount+0x156/0x3b0 [ 718.946614][T10735] kmalloc_trace+0x2a/0xa0 [ 718.950845][T10735] __se_sys_mount+0x156/0x3b0 [ 718.955362][T10735] ? __x64_sys_mount+0xd0/0xd0 [ 718.959957][T10735] ? debug_smp_processor_id+0x17/0x20 [ 718.965169][T10735] __x64_sys_mount+0xbf/0xd0 [ 718.969613][T10735] x64_sys_call+0x49d/0x9a0 [ 718.973933][T10735] do_syscall_64+0x3b/0xb0 [ 718.978191][T10735] ? clear_bhb_loop+0x55/0xb0 [ 718.982699][T10735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.988428][T10735] RIP: 0033:0x7fe275b7e719 [ 718.992679][T10735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.012124][T10735] RSP: 002b:00007fe2769c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 719.020367][T10735] RAX: ffffffffffffffda RBX: 00007fe275d35f80 RCX: 00007fe275b7e719 [ 719.028178][T10735] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 719.035990][T10735] RBP: 00007fe2769c0090 R08: 0000000020000600 R09: 0000000000000000 [ 719.043799][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.051615][T10735] R13: 0000000000000000 R14: 00007fe275d35f80 R15: 00007ffcd103ef28 [ 719.059424][T10735] [ 719.354750][ T355] cp2112 0003:10C4:EA90.00DA: error setting SMBus config [ 719.365990][ T355] cp2112: probe of 0003:10C4:EA90.00DA failed with error -71 [ 719.380633][ T355] usb 5-1: USB disconnect, device number 105 [ 720.322952][T10748] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2974'. [ 720.523376][T10752] futex_wake_op: syz.1.2976 tries to shift op by 144; fix this program [ 720.779951][ T2129] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 721.086382][ T2129] usb 6-1: Using ep0 maxpacket: 16 [ 721.220914][ T1568] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 721.376574][ T2129] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 721.385636][ T2129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.393848][ T2129] usb 6-1: Product: syz [ 721.398060][ T2129] usb 6-1: Manufacturer: syz [ 721.402636][ T2129] usb 6-1: SerialNumber: syz [ 721.410025][ T2129] r8152-cfgselector 6-1: config 0 descriptor?? [ 721.590246][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'. [ 721.749819][ T1568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.769903][ T1568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.776681][ T2129] r8152-cfgselector 6-1: Unknown version 0x0000 [ 721.799751][ T1568] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 721.808937][ T1568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.823391][ T1568] usb 7-1: config 0 descriptor?? [ 722.049822][ T2129] r8152-cfgselector 6-1: Unknown version 0x0000 [ 722.099113][ T2129] r8152-cfgselector 6-1: USB disconnect, device number 92 [ 722.109637][ T312] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 722.305854][T10758] xt_hashlimit: size too large, truncated to 1048576 [ 722.369636][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 722.374924][T10779] Bluetooth: hci0: Frame reassembly failed (-84) [ 722.499663][ T312] usb 5-1: config 0 has no interfaces? [ 722.699653][ T312] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 723.009211][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.017159][ T312] usb 5-1: Product: syz [ 723.021158][ T312] usb 5-1: Manufacturer: syz [ 723.025566][ T312] usb 5-1: SerialNumber: syz [ 723.032754][ T312] r8152-cfgselector 5-1: config 0 descriptor?? [ 723.299766][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 723.501348][ T312] r8152-cfgselector 5-1: USB disconnect, device number 106 [ 724.369638][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 724.369664][ T312] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 724.440009][ T1568] usbhid 7-1:0.0: can't add hid device: -71 [ 724.445824][ T1568] usbhid: probe of 7-1:0.0 failed with error -71 [ 724.464784][ T1568] usb 7-1: USB disconnect, device number 83 [ 725.039760][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.050696][ T312] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 725.059567][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.072543][ T312] usb 5-1: config 0 descriptor?? [ 725.147970][T10818] loop1: detected capacity change from 0 to 512 [ 725.155287][T10818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 725.174767][T10818] EXT4-fs (loop1): 1 truncate cleaned up [ 725.180389][T10818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 725.851314][T10830] tmpfs: Bad value for 'mpol' [ 725.859542][ T291] EXT4-fs (loop1): unmounting filesystem. [ 725.940325][ T312] keytouch 0003:0926:3333.00DB: fixing up Keytouch IEC report descriptor [ 725.953607][ T312] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00DB/input/input135 [ 726.045925][ T312] keytouch 0003:0926:3333.00DB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 726.181790][ T312] usb 5-1: USB disconnect, device number 107 [ 726.341814][T10847] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 727.065443][T10857] xt_policy: too many policy elements [ 727.315786][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3006'. [ 727.324722][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 727.552359][T10869] netlink: 'syz.5.3008': attribute type 4 has an invalid length. [ 729.404344][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3017'. [ 729.569673][ T1568] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 729.619997][ T312] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 731.099674][ T491] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 731.109773][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 731.121097][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.130715][ T1568] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 731.139847][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.148453][ T1568] usb 6-1: config 0 descriptor?? [ 731.190278][ T1568] hub 6-1:0.0: USB hub found [ 731.239601][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 731.349595][ T491] usb 7-1: Using ep0 maxpacket: 16 [ 731.359635][ T312] usb 5-1: config 0 has no interfaces? [ 731.409722][ T1568] hub 6-1:0.0: 1 port detected [ 731.489766][ T491] usb 7-1: config 0 has no interfaces? [ 731.531441][T10923] tmpfs: Bad value for 'mpol' [ 731.549895][ T312] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 731.559137][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.567093][ T312] usb 5-1: Product: syz [ 731.571321][ T312] usb 5-1: Manufacturer: syz [ 731.575880][ T312] usb 5-1: SerialNumber: syz [ 731.581293][ T312] r8152-cfgselector 5-1: config 0 descriptor?? [ 731.649768][ T491] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 731.658860][ T491] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.666637][ T491] usb 7-1: Product: syz [ 731.670649][ T491] usb 7-1: Manufacturer: syz [ 731.675542][ T491] usb 7-1: SerialNumber: syz [ 731.681786][ T491] r8152-cfgselector 7-1: config 0 descriptor?? [ 731.799732][ T355] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 731.829733][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 731.910857][ T1568] usb 6-1: USB disconnect, device number 93 [ 731.929721][ T491] r8152-cfgselector 7-1: Unknown version 0x0000 [ 732.040645][ T1478] r8152-cfgselector 5-1: USB disconnect, device number 108 [ 732.132717][ T39] r8152-cfgselector 7-1: USB disconnect, device number 84 [ 732.209677][ T355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.220794][ T355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.230426][ T355] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 732.239249][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.248151][ T355] usb 2-1: config 0 descriptor?? [ 732.801485][ T355] logitech-hidpp-device 0003:046D:C086.00DC: unknown main item tag 0x2 [ 732.899047][ T355] logitech-hidpp-device 0003:046D:C086.00DC: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 732.920459][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3032'. [ 732.990881][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3030'. [ 733.002078][ T355] usb 2-1: USB disconnect, device number 105 [ 733.388023][T10950] xt_policy: too many policy elements [ 733.542032][ T28] audit: type=1400 audit(1731877434.106:701): avc: denied { execute } for pid=10952 comm="syz.7.3035" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 733.964674][T10958] FAULT_INJECTION: forcing a failure. [ 733.964674][T10958] name failslab, interval 1, probability 0, space 0, times 0 [ 733.977202][T10958] CPU: 1 PID: 10958 Comm: syz.7.3035 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 733.986865][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 733.996759][T10958] Call Trace: [ 734.000059][T10958] [ 734.002837][T10958] dump_stack_lvl+0x151/0x1b7 [ 734.007382][T10958] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 734.012647][T10958] dump_stack+0x15/0x1e [ 734.016636][T10958] should_fail_ex+0x3d0/0x520 [ 734.021147][T10958] ? apply_wqattrs_prepare+0x150/0x1d10 [ 734.026533][T10958] __should_failslab+0xaf/0xf0 [ 734.031139][T10958] should_failslab+0x9/0x20 [ 734.035662][T10958] __kmem_cache_alloc_node+0x3d/0x250 [ 734.040847][T10958] ? kasan_save_alloc_info+0x1f/0x30 [ 734.045972][T10958] ? apply_wqattrs_prepare+0x150/0x1d10 [ 734.051354][T10958] kmalloc_trace+0x2a/0xa0 [ 734.055605][T10958] apply_wqattrs_prepare+0x150/0x1d10 [ 734.060809][T10958] ? __kasan_check_write+0x14/0x20 [ 734.065755][T10958] ? vsnprintf+0x190/0x1c70 [ 734.070098][T10958] ? __bitmap_weight+0x33/0x110 [ 734.074782][T10958] ? bit_wait_io_timeout+0x120/0x120 [ 734.079903][T10958] apply_workqueue_attrs_locked+0xd8/0x1e0 [ 734.085585][T10958] alloc_workqueue+0xd94/0x1270 [ 734.090233][T10958] ? snprintf+0xd6/0x120 [ 734.094309][T10958] ? vsnprintf+0x1b89/0x1c70 [ 734.098736][T10958] ? apply_workqueue_attrs_locked+0x1e0/0x1e0 [ 734.104642][T10958] hci_register_dev+0x1a2/0x9a0 [ 734.109334][T10958] ? kmalloc_trace+0x44/0xa0 [ 734.113808][T10958] hci_uart_tty_ioctl+0x8ed/0xa70 [ 734.118758][T10958] ? hci_uart_tty_write+0x10/0x10 [ 734.123597][T10958] tty_ioctl+0x903/0xc50 [ 734.127678][T10958] ? tty_get_icount+0xa0/0xa0 [ 734.132195][T10958] __se_sys_ioctl+0x114/0x190 [ 734.136706][T10958] __x64_sys_ioctl+0x7b/0x90 [ 734.141297][T10958] x64_sys_call+0x98/0x9a0 [ 734.145547][T10958] do_syscall_64+0x3b/0xb0 [ 734.149790][T10958] ? clear_bhb_loop+0x55/0xb0 [ 734.154353][T10958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.160042][T10958] RIP: 0033:0x7f88ee57e719 [ 734.164284][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.184005][T10958] RSP: 002b:00007f88ef3e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.192252][T10958] RAX: ffffffffffffffda RBX: 00007f88ee736130 RCX: 00007f88ee57e719 [ 734.200057][T10958] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000008 [ 734.207873][T10958] RBP: 00007f88ef3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 734.215693][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.223616][T10958] R13: 0000000000000000 R14: 00007f88ee736130 R15: 00007ffc3e43f118 [ 734.231433][T10958] [ 734.234538][T10958] Bluetooth: Can't register HCI device [ 734.234798][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3034'. [ 734.248610][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 734.576154][ T28] audit: type=1326 audit(1731877435.136:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.619497][ T28] audit: type=1326 audit(1731877435.136:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.652917][ T28] audit: type=1326 audit(1731877435.136:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.676374][ T28] audit: type=1326 audit(1731877435.136:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.700812][ T28] audit: type=1326 audit(1731877435.136:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.724258][ T28] audit: type=1326 audit(1731877435.136:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.747622][ T28] audit: type=1326 audit(1731877435.136:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.774112][ T28] audit: type=1326 audit(1731877435.136:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.797640][ T28] audit: type=1326 audit(1731877435.136:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.6.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de877e719 code=0x7ffc0000 [ 734.829606][ T1478] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 735.069626][ T1478] usb 5-1: Using ep0 maxpacket: 16 [ 735.189906][ T1478] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 735.219373][ T1478] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.267153][ T1478] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 735.315919][ T1478] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 735.392538][ T1478] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 735.654555][T10989] loop1: detected capacity change from 0 to 512 [ 735.659779][ T1478] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.669700][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 735.677511][ T1478] usb 5-1: SerialNumber: syz [ 735.678023][T10989] EXT4-fs: Ignoring removed mblk_io_submit option [ 735.688500][T10989] EXT4-fs: Ignoring removed i_version option [ 735.696471][T10989] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.3048: invalid block [ 735.699709][T10970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 735.709722][T10989] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3048: couldn't read orphan inode 11 (err -117) [ 735.714437][T10970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 735.752861][ T1478] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 735.763936][ T1478] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 735.819851][T10989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 737.047695][ T1568] usb 5-1: USB disconnect, device number 109 [ 738.420386][ T291] EXT4-fs (loop1): unmounting filesystem. [ 738.569123][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 739.494465][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 739.494484][ T28] audit: type=1326 audit(1731877440.046:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 739.587875][ T28] audit: type=1326 audit(1731877440.046:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 739.667108][ T28] audit: type=1326 audit(1731877440.046:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 739.768605][ T28] audit: type=1326 audit(1731877440.046:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 740.217272][ T28] audit: type=1326 audit(1731877440.046:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 740.280817][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.289635][ T28] audit: type=1326 audit(1731877440.046:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 740.292911][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.468002][ T28] audit: type=1326 audit(1731877440.046:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 742.084170][T11036] device bridge_slave_0 entered promiscuous mode [ 742.105017][ T28] audit: type=1326 audit(1731877440.046:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 742.148647][ T28] audit: type=1326 audit(1731877440.046:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11025 comm="syz.7.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88ee57e719 code=0x7ffc0000 [ 742.189583][ T28] audit: type=1400 audit(1731877440.046:753): avc: denied { setopt } for pid=11025 comm="syz.7.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 742.313982][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.332329][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.344112][T11036] device bridge_slave_1 entered promiscuous mode [ 742.596390][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3066'. [ 742.801948][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.809778][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.827805][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.836498][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.846032][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.852932][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.860913][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.869261][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.877729][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.884584][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.892087][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.910162][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.918142][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.115740][T11059] udevd[11059]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 743.625070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.637579][T11036] device veth0_vlan entered promiscuous mode [ 743.651997][T11036] device veth1_macvtap entered promiscuous mode [ 743.742901][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.753872][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.767055][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 743.776385][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 743.784802][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 743.792844][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 743.831289][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 743.840917][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 743.850384][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 743.876297][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.902842][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 744.231001][ T342] device veth1_macvtap left promiscuous mode [ 744.269641][ T1568] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 744.277107][T10912] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 745.291634][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3081'. [ 745.339798][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 745.339820][ T28] audit: type=1400 audit(1731877445.876:788): avc: denied { mounton } for pid=11113 comm="syz.6.3080" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 745.694582][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3082'. [ 745.946181][T10912] usb 2-1: Using ep0 maxpacket: 16 [ 746.079716][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.079828][T10912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.101828][ T1568] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 746.110740][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.118825][T10912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.128643][ T1568] usb 6-1: config 0 descriptor?? [ 746.133532][T10912] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 746.142401][T10912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.150894][T10912] usb 2-1: config 0 descriptor?? [ 746.604657][T11096] udevd[11096]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 746.710842][ T1568] keytouch 0003:0926:3333.00DD: fixing up Keytouch IEC report descriptor [ 746.720414][T10912] cp2112 0003:10C4:EA90.00DE: unknown main item tag 0x0 [ 746.727222][T10912] cp2112 0003:10C4:EA90.00DE: unknown main item tag 0x0 [ 746.735110][ T1568] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00DD/input/input136 [ 746.746492][T10912] cp2112 0003:10C4:EA90.00DE: unknown main item tag 0x0 [ 746.753383][T10912] cp2112 0003:10C4:EA90.00DE: unknown main item tag 0x0 [ 746.760218][T10912] cp2112 0003:10C4:EA90.00DE: unknown main item tag 0x0 [ 746.770021][T10912] cp2112 0003:10C4:EA90.00DE: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 746.833103][ T1568] keytouch 0003:0926:3333.00DD: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 746.864093][ T2129] usb 6-1: USB disconnect, device number 94 [ 746.899765][T10912] cp2112 0003:10C4:EA90.00DE: Part Number: 0x00 Device Version: 0x00 [ 747.288009][ T28] audit: type=1400 audit(1731877447.846:789): avc: denied { connect } for pid=11140 comm="syz.4.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 747.840240][T10912] cp2112 0003:10C4:EA90.00DE: error setting SMBus config [ 747.848880][T10912] cp2112: probe of 0003:10C4:EA90.00DE failed with error -71 [ 747.857285][T10912] usb 2-1: USB disconnect, device number 106 [ 747.889679][ T355] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 748.286469][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.293412][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.300353][ T355] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 748.307891][ T355] usb 6-1: can't read configurations, error -61 [ 748.314899][T11155] device bridge_slave_0 entered promiscuous mode [ 748.322952][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.330002][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.338238][T11155] device bridge_slave_1 entered promiscuous mode [ 748.449367][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.456292][T11155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.463370][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.470153][T11155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.479650][ T355] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 748.504244][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.511673][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.518993][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.526792][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.541646][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.550031][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.556910][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.566426][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.574709][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.581579][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.595264][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.604852][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.620090][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.632363][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.640642][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.648000][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.657357][T11155] device veth0_vlan entered promiscuous mode [ 748.668897][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.678411][T11155] device veth1_macvtap entered promiscuous mode [ 748.688766][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 748.699302][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 748.912682][ T355] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 748.937321][ T355] usb 6-1: can't read configurations, error -61 [ 748.988194][ T355] usb usb6-port1: attempt power cycle [ 750.630223][T11183] device bridge_slave_0 left promiscuous mode [ 750.636221][T11183] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.033061][T11096] udevd[11096]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 752.319663][ T1568] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 752.337656][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3105'. [ 752.400223][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 752.413032][T11209] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3104'. [ 752.668618][T10912] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 752.936419][T11214] device bridge_slave_0 left promiscuous mode [ 752.942897][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.219758][ T1568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.266630][ T1568] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 753.277719][ T1568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.289406][ T1568] usb 2-1: config 0 descriptor?? [ 753.754149][T10912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.766575][T10912] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 753.775595][T10912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.784193][T10912] usb 5-1: config 0 descriptor?? [ 753.800463][ T1568] keytouch 0003:0926:3333.00DF: fixing up Keytouch IEC report descriptor [ 753.810773][ T1568] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00DF/input/input137 [ 753.920032][T10912] usbhid 5-1:0.0: can't add hid device: -71 [ 753.929013][ T1568] keytouch 0003:0926:3333.00DF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 753.941145][T10912] usbhid: probe of 5-1:0.0 failed with error -71 [ 753.950316][T10912] usb 5-1: USB disconnect, device number 110 [ 754.102836][ T355] usb 2-1: USB disconnect, device number 107 [ 754.839628][ T318] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 755.103792][T11096] udevd[11096]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 755.299934][ T318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.313654][ T318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.402010][T11138] udevd[11138]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 755.437503][ T318] usb 7-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 755.504839][ T318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.534896][ T318] usb 7-1: config 0 descriptor?? [ 756.603637][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 756.612908][T11259] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3118'. [ 756.789773][ T355] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 757.009681][ T2129] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 757.049717][ T355] usb 5-1: Using ep0 maxpacket: 16 [ 757.179649][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.190575][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.200550][ T355] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 757.209565][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.218308][ T355] usb 5-1: config 0 descriptor?? [ 757.269213][T11265] xt_policy: too many policy elements [ 757.323067][ T2129] usb 6-1: Using ep0 maxpacket: 16 [ 757.730690][ T318] usbhid 7-1:0.0: can't add hid device: -71 [ 757.736954][ T318] usbhid: probe of 7-1:0.0 failed with error -71 [ 757.790336][ T318] usb 7-1: USB disconnect, device number 85 [ 757.890783][ T355] cp2112 0003:10C4:EA90.00E0: unknown main item tag 0x0 [ 757.898582][ T355] cp2112 0003:10C4:EA90.00E0: unknown main item tag 0x0 [ 757.905605][ T355] cp2112 0003:10C4:EA90.00E0: unknown main item tag 0x0 [ 757.912720][ T355] cp2112 0003:10C4:EA90.00E0: unknown main item tag 0x0 [ 757.919517][ T355] cp2112 0003:10C4:EA90.00E0: unknown main item tag 0x0 [ 757.926842][ T355] cp2112 0003:10C4:EA90.00E0: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 757.937889][ T2129] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 757.946790][ T2129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.954657][ T2129] usb 6-1: Product: syz [ 757.958672][ T2129] usb 6-1: Manufacturer: syz [ 757.963113][ T2129] usb 6-1: SerialNumber: syz [ 757.968026][ T2129] r8152-cfgselector 6-1: config 0 descriptor?? [ 758.133285][ T355] cp2112 0003:10C4:EA90.00E0: Part Number: 0x00 Device Version: 0x00 [ 758.229645][ T2129] r8152-cfgselector 6-1: Unknown version 0x0000 [ 758.479662][ T2129] r8152-cfgselector 6-1: Unknown version 0x0000 [ 758.486528][ T2129] r8152-cfgselector 6-1: USB disconnect, device number 98 [ 758.575621][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3125'. [ 758.959744][ T355] cp2112 0003:10C4:EA90.00E0: error setting SMBus config [ 758.967436][ T355] cp2112: probe of 0003:10C4:EA90.00E0 failed with error -71 [ 758.975747][ T355] usb 5-1: USB disconnect, device number 111 [ 759.137919][T11284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3126'. [ 759.146878][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 759.163129][T11284] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3126'. [ 759.353122][T11286] xt_policy: too many policy elements [ 760.911425][T11287] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3127'. [ 761.003893][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 761.128536][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3130'. [ 761.137403][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 761.146902][T11306] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3130'. [ 761.227151][T11308] xt_policy: too many policy elements [ 762.354416][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3137'. [ 763.649632][ T312] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 763.729619][ T301] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 763.809620][ T2129] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 763.971228][ T301] usb 7-1: Using ep0 maxpacket: 8 [ 764.009682][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.020686][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.030747][ T312] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 764.039849][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.048365][ T312] usb 2-1: config 0 descriptor?? [ 764.089654][ T2129] usb 6-1: Using ep0 maxpacket: 16 [ 764.099631][ T301] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 764.107541][ T301] usb 7-1: config 0 has no interface number 0 [ 764.239722][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.250638][ T2129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.259611][ T19] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 764.260271][ T2129] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 764.269672][ T301] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 764.276645][ T2129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.285533][ T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.294474][ T2129] usb 6-1: config 0 descriptor?? [ 764.305475][ T301] usb 7-1: Product: syz [ 764.309838][ T301] usb 7-1: Manufacturer: syz [ 764.314195][ T301] usb 7-1: SerialNumber: syz [ 764.319447][ T301] usb 7-1: config 0 descriptor?? [ 764.499624][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 764.530132][ T312] keytouch 0003:0926:3333.00E1: fixing up Keytouch IEC report descriptor [ 764.541195][ T312] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00E1/input/input138 [ 764.574164][T11336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.588524][T11336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.619633][ T19] usb 5-1: config 0 has no interfaces? [ 764.626968][ T312] keytouch 0003:0926:3333.00E1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 764.731171][ T312] usb 2-1: USB disconnect, device number 108 [ 764.779696][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 764.788714][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.796804][ T19] usb 5-1: Product: syz [ 764.800863][ T19] usb 5-1: Manufacturer: syz [ 764.805339][ T19] usb 5-1: SerialNumber: syz [ 764.810578][ T2129] cp2112 0003:10C4:EA90.00E2: unknown main item tag 0x0 [ 764.811254][ T19] r8152-cfgselector 5-1: config 0 descriptor?? [ 764.821174][ T2129] cp2112 0003:10C4:EA90.00E2: unknown main item tag 0x0 [ 764.823605][ T301] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 764.832005][ T2129] cp2112 0003:10C4:EA90.00E2: unknown main item tag 0x0 [ 764.836412][ T301] usb 7-1: No valid video chain found. [ 764.843805][ T2129] cp2112 0003:10C4:EA90.00E2: unknown main item tag 0x0 [ 764.855250][ T301] usb 7-1: USB disconnect, device number 86 [ 764.859804][ T2129] cp2112 0003:10C4:EA90.00E2: unknown main item tag 0x0 [ 764.874948][ T2129] cp2112 0003:10C4:EA90.00E2: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 765.039743][ T2129] cp2112 0003:10C4:EA90.00E2: Part Number: 0x00 Device Version: 0x00 [ 765.089638][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 765.237403][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 765.246209][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3147'. [ 765.255021][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 765.263799][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 765.274716][T11356] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3147'. [ 765.363738][ T1614] r8152-cfgselector 5-1: USB disconnect, device number 112 [ 765.561060][T11360] xt_policy: too many policy elements [ 766.409742][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 766.907019][ T2129] cp2112 0003:10C4:EA90.00E2: error setting SMBus config [ 766.916155][ T2129] cp2112: probe of 0003:10C4:EA90.00E2 failed with error -71 [ 766.925998][ T2129] usb 6-1: USB disconnect, device number 99 [ 767.136981][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'. [ 767.519586][T11376] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 767.519585][ T2129] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 767.759635][ T2129] usb 6-1: Using ep0 maxpacket: 16 [ 767.919750][T11376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.919911][ T2129] usb 6-1: config 0 has no interfaces? [ 767.931246][T11376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.981969][T11376] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 767.990796][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 768.008438][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3160'. [ 768.017260][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 768.169919][ T2129] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 768.210628][ T2129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.248587][ T2129] usb 6-1: Product: syz [ 768.267216][ T2129] usb 6-1: Manufacturer: syz [ 768.287999][ T2129] usb 6-1: SerialNumber: syz [ 768.338350][ T2129] r8152-cfgselector 6-1: config 0 descriptor?? [ 768.344419][T11376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.357626][T11376] usb 7-1: config 0 descriptor?? [ 768.419867][T11407] xt_policy: too many policy elements [ 769.229848][ T2129] r8152-cfgselector 6-1: Unknown version 0x0000 [ 769.432031][T10912] r8152-cfgselector 6-1: USB disconnect, device number 100 [ 769.696049][T11376] keytouch 0003:0926:3333.00E3: fixing up Keytouch IEC report descriptor [ 769.706696][T11376] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.00E3/input/input139 [ 769.784168][T11376] keytouch 0003:0926:3333.00E3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 769.797578][T11376] usb 7-1: USB disconnect, device number 87 [ 771.600936][T11444] __nla_validate_parse: 3 callbacks suppressed [ 771.600970][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 771.615987][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3173'. [ 771.624798][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 771.633463][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 771.644494][T11444] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3173'. [ 771.718727][T11445] xt_policy: too many policy elements [ 772.141015][T11449] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3174'. [ 773.144065][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 773.249769][ T2387] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 773.859655][ T2387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.870640][ T2387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.880240][ T2387] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 773.889189][ T2387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.897778][ T2387] usb 5-1: config 0 descriptor?? [ 774.330199][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3184'. [ 774.500335][ T2387] keytouch 0003:0926:3333.00E4: fixing up Keytouch IEC report descriptor [ 774.516936][ T2387] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00E4/input/input140 [ 774.567041][T11484] xt_policy: too many policy elements [ 774.599550][ T2387] keytouch 0003:0926:3333.00E4: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 774.820749][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3187'. [ 774.976731][ T1614] usb 5-1: USB disconnect, device number 113 [ 775.025659][T11494] tmpfs: Bad value for 'mpol' [ 775.299594][ T39] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 775.319671][ T2129] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 775.677782][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'. [ 775.909254][ T1614] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 775.949724][ T2129] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 775.961045][ T2129] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 775.972324][ T2129] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 775.981350][ T2129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.999707][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.010544][T11496] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 776.017585][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.027384][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 776.037109][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.047546][ T39] usb 6-1: config 0 descriptor?? [ 776.189612][ T1614] usb 2-1: device descriptor read/64, error -71 [ 776.531082][ T39] logitech-hidpp-device 0003:046D:C086.00E5: unknown main item tag 0x2 [ 776.544533][ T39] logitech-hidpp-device 0003:046D:C086.00E5: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.5-1/input0 [ 776.589626][ T1614] usb 2-1: device descriptor read/64, error -71 [ 776.732116][ T39] usb 6-1: USB disconnect, device number 101 [ 776.788085][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.794997][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.802210][T11518] device bridge_slave_0 entered promiscuous mode [ 776.808967][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.815847][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.823082][T11518] device bridge_slave_1 entered promiscuous mode [ 776.859608][ T1614] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 776.882805][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.889807][T11518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.896865][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.903657][T11518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.927817][ T537] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.936060][ T537] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.936060][T11496] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3190'. [ 776.952650][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.953352][ T2129] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 776.960658][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 776.977053][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 776.979669][ T2129] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input141 [ 776.985744][ T537] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.001210][ T537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.030653][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.038759][ T537] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.045628][ T537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.053009][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.061097][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.075061][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.086870][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 777.095957][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 777.103284][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 777.111553][T11518] device veth0_vlan entered promiscuous mode [ 777.122752][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 777.131882][T11518] device veth1_macvtap entered promiscuous mode [ 777.142471][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.149747][ T1614] usb 2-1: device descriptor read/64, error -71 [ 777.158314][ T537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 777.459675][T10912] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 777.539684][ T1614] usb 2-1: device descriptor read/64, error -71 [ 777.659714][ T1614] usb usb2-port1: attempt power cycle [ 777.729669][T10912] usb 5-1: Using ep0 maxpacket: 16 [ 777.869677][T10912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.880689][T10912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.890676][T10912] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 777.899650][T10912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.908224][T10912] usb 5-1: config 0 descriptor?? [ 778.069652][ T1614] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 778.379959][ T1614] usb 2-1: device descriptor read/8, error -71 [ 778.540700][ T19] usb 7-1: USB disconnect, device number 88 [ 778.547911][T10912] cp2112 0003:10C4:EA90.00E6: unknown main item tag 0x0 [ 778.555283][T10912] cp2112 0003:10C4:EA90.00E6: unknown main item tag 0x0 [ 778.563693][T10912] cp2112 0003:10C4:EA90.00E6: unknown main item tag 0x0 [ 778.571226][T10912] cp2112 0003:10C4:EA90.00E6: unknown main item tag 0x0 [ 778.578021][T10912] cp2112 0003:10C4:EA90.00E6: unknown main item tag 0x0 [ 778.585712][T10912] cp2112 0003:10C4:EA90.00E6: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 778.589700][ T1614] usb 2-1: device descriptor read/8, error -71 [ 778.709680][T10912] cp2112 0003:10C4:EA90.00E6: Part Number: 0x00 Device Version: 0x00 [ 778.988583][T11543] xt_policy: too many policy elements [ 779.217024][T11545] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3204'. [ 779.397297][T11552] xt_policy: too many policy elements [ 779.419989][T11554] tmpfs: Bad value for 'mpol' [ 779.874130][ T1614] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 779.929711][T10912] cp2112 0003:10C4:EA90.00E6: error setting SMBus config [ 779.937641][T10912] cp2112: probe of 0003:10C4:EA90.00E6 failed with error -71 [ 779.946099][T10912] usb 5-1: USB disconnect, device number 114 [ 780.089657][ T1614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.100458][ T1614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.110042][ T1614] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 780.119114][ T1614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.127441][ T1614] usb 2-1: config 0 descriptor?? [ 780.249472][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3210'. [ 780.484872][T11096] udevd[11096]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 780.731022][ T1614] logitech-hidpp-device 0003:046D:C086.00E7: unknown main item tag 0x2 [ 780.743845][ T1614] logitech-hidpp-device 0003:046D:C086.00E7: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 780.892843][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 781.130358][ T19] usb 2-1: USB disconnect, device number 112 [ 781.223540][T11583] FAULT_INJECTION: forcing a failure. [ 781.223540][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.236695][T11583] CPU: 1 PID: 11583 Comm: syz.6.3217 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 781.246409][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 781.256305][T11583] Call Trace: [ 781.259428][T11583] [ 781.262207][T11583] dump_stack_lvl+0x151/0x1b7 [ 781.266716][T11583] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 781.272015][T11583] ? htab_map_hash+0x3a7/0x7e0 [ 781.276614][T11583] dump_stack+0x15/0x1e [ 781.280613][T11583] should_fail_ex+0x3d0/0x520 [ 781.285117][T11583] should_fail+0xb/0x10 [ 781.289107][T11583] should_fail_usercopy+0x1a/0x20 [ 781.293982][T11583] _copy_to_user+0x1e/0x90 [ 781.298260][T11583] simple_read_from_buffer+0xc7/0x150 [ 781.303433][T11583] proc_fail_nth_read+0x1a3/0x210 [ 781.308297][T11583] ? proc_fault_inject_write+0x390/0x390 [ 781.313761][T11583] ? fsnotify_perm+0x269/0x5b0 [ 781.318364][T11583] ? security_file_permission+0x86/0xb0 [ 781.323767][T11583] ? proc_fault_inject_write+0x390/0x390 [ 781.329209][T11583] vfs_read+0x26c/0xae0 [ 781.333205][T11583] ? kernel_read+0x1f0/0x1f0 [ 781.337627][T11583] ? mutex_lock+0xb1/0x1e0 [ 781.341885][T11583] ? bit_wait_io_timeout+0x120/0x120 [ 781.347010][T11583] ? __fdget_pos+0x2e2/0x390 [ 781.351428][T11583] ? ksys_read+0x77/0x2c0 [ 781.355599][T11583] ksys_read+0x199/0x2c0 [ 781.359677][T11583] ? vfs_write+0xed0/0xed0 [ 781.363929][T11583] ? debug_smp_processor_id+0x17/0x20 [ 781.369134][T11583] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 781.375041][T11583] __x64_sys_read+0x7b/0x90 [ 781.379380][T11583] x64_sys_call+0x28/0x9a0 [ 781.383634][T11583] do_syscall_64+0x3b/0xb0 [ 781.387890][T11583] ? clear_bhb_loop+0x55/0xb0 [ 781.392408][T11583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.398124][T11583] RIP: 0033:0x7f42c5b7d15c [ 781.402380][T11583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 781.421912][T11583] RSP: 002b:00007f42c6935030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.430156][T11583] RAX: ffffffffffffffda RBX: 00007f42c5d35f80 RCX: 00007f42c5b7d15c [ 781.438137][T11583] RDX: 000000000000000f RSI: 00007f42c69350a0 RDI: 0000000000000005 [ 781.446074][T11583] RBP: 00007f42c6935090 R08: 0000000000000000 R09: 0000000000000000 [ 781.453882][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.461695][T11583] R13: 0000000000000000 R14: 00007f42c5d35f80 R15: 00007ffd9cebfb58 [ 781.469510][T11583] [ 781.528812][T11586] xt_policy: too many policy elements [ 781.768509][T11593] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3219'. [ 783.822474][T11605] xt_policy: too many policy elements [ 783.830102][T11348] udevd[11348]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 784.610072][ T39] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 784.982163][ T28] audit: type=1400 audit(1731877485.546:790): avc: denied { read } for pid=11626 comm="syz.6.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 785.059695][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.153948][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 785.200259][ T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.209328][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.230085][T11636] xt_policy: too many policy elements [ 785.255549][ T39] usb 6-1: config 0 descriptor?? [ 785.370240][ T39] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 785.516183][T11639] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3232'. [ 785.755881][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3233'. [ 786.249290][T11663] xt_policy: too many policy elements [ 786.489644][ T39] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 786.759606][ T39] usb 2-1: device descriptor read/64, error -71 [ 787.126207][T11602] usb 6-1: USB disconnect, device number 102 [ 787.136903][T11675] tmpfs: Bad value for 'mpol' [ 787.149589][ T39] usb 2-1: device descriptor read/64, error -71 [ 787.174287][ T28] audit: type=1400 audit(1731877487.736:791): avc: denied { getopt } for pid=11676 comm="syz.5.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 787.419574][ T39] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 787.429564][ T334] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 787.600048][T11602] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 788.230174][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3248'. [ 788.521821][ T39] usb 2-1: device descriptor read/64, error -71 [ 788.548617][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3250'. [ 788.941249][T11699] xt_policy: too many policy elements [ 789.049847][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.060641][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.057422][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3252'. [ 790.066291][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3252'. [ 790.076300][T11706] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3252'. [ 790.097572][ T334] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 790.129463][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.149650][T11602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.396508][T11602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.417929][ T334] usb 5-1: config 0 descriptor?? [ 790.430265][T11704] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3251'. [ 790.538699][T11602] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 790.547649][T11602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.555505][ T334] usb 5-1: can't set config #0, error -71 [ 790.872553][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3255'. [ 790.880415][ T334] usb 5-1: USB disconnect, device number 115 [ 790.887733][T11602] usb 6-1: config 0 descriptor?? [ 790.909727][T11602] usb 6-1: can't set config #0, error -71 [ 790.936728][T11602] usb 6-1: USB disconnect, device number 103 [ 792.194521][ T2387] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 792.344159][T11747] tmpfs: Bad value for 'mpol' [ 792.393895][T11751] xt_policy: too many policy elements [ 792.469664][ T2387] usb 5-1: Using ep0 maxpacket: 16 [ 792.622786][T11756] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3267'. [ 792.642502][T11754] syz.5.3268[11754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.642855][T11754] syz.5.3268[11754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.820320][T11753] futex_wake_op: syz.5.3268 tries to shift op by 32; fix this program [ 792.879589][ T312] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 792.889631][ T2387] usb 5-1: config 0 has no interfaces? [ 793.069671][ T2387] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 793.078660][ T2387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.087627][ T2387] usb 5-1: Product: syz [ 793.091678][ T2387] usb 5-1: Manufacturer: syz [ 793.096001][ T2387] usb 5-1: SerialNumber: syz [ 793.101065][ T2387] r8152-cfgselector 5-1: config 0 descriptor?? [ 793.259820][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.270849][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.281028][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 793.290082][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.290672][T11762] futex_wake_op: syz.6.3270 tries to shift op by 144; fix this program [ 793.306980][ T312] usb 2-1: config 0 descriptor?? [ 793.369681][ T2387] r8152-cfgselector 5-1: Unknown version 0x0000 [ 793.575458][T11602] r8152-cfgselector 5-1: USB disconnect, device number 116 [ 793.810977][ T312] logitech-hidpp-device 0003:046D:C086.00E8: unknown main item tag 0x2 [ 793.819943][ T312] logitech-hidpp-device 0003:046D:C086.00E8: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 794.013086][ T312] usb 2-1: USB disconnect, device number 115 [ 794.479174][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'. [ 794.779638][ T2387] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 794.780144][T11787] FAULT_INJECTION: forcing a failure. [ 794.780144][T11787] name failslab, interval 1, probability 0, space 0, times 0 [ 794.799837][T11787] CPU: 1 PID: 11787 Comm: syz.5.3277 Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 794.809563][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 794.819462][T11787] Call Trace: [ 794.822582][T11787] [ 794.825365][T11787] dump_stack_lvl+0x151/0x1b7 [ 794.829868][T11787] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 794.835158][T11787] ? avc_has_perm_noaudit+0x2dd/0x430 [ 794.840368][T11787] dump_stack+0x15/0x1e [ 794.844360][T11787] should_fail_ex+0x3d0/0x520 [ 794.848876][T11787] ? lease_alloc+0x2b/0x340 [ 794.853214][T11787] __should_failslab+0xaf/0xf0 [ 794.857817][T11787] should_failslab+0x9/0x20 [ 794.862150][T11787] kmem_cache_alloc+0x3b/0x2c0 [ 794.866762][T11787] lease_alloc+0x2b/0x340 [ 794.870925][T11787] __break_lease+0x10f/0x13b0 [ 794.875440][T11787] ? selinux_inode_follow_link+0x390/0x390 [ 794.879954][T11791] syz.1.3279[11791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.881076][T11787] ? locks_wake_up_blocks+0x310/0x310 [ 794.881143][T11791] syz.1.3279[11791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.892373][T11787] ? capable_wrt_inode_uidgid+0xe9/0x130 [ 794.892415][T11787] break_lease+0xb7/0xd0 [ 794.892440][T11787] vfs_truncate+0x276/0x390 [ 794.922667][T11787] do_sys_truncate+0xda/0x190 [ 794.927174][T11787] ? break_lease+0xd0/0xd0 [ 794.931428][T11787] ? fpregs_restore_userregs+0x130/0x290 [ 794.936896][T11787] __x64_sys_truncate+0x5b/0x70 [ 794.941582][T11787] x64_sys_call+0x23c/0x9a0 [ 794.945918][T11787] do_syscall_64+0x3b/0xb0 [ 794.950172][T11787] ? clear_bhb_loop+0x55/0xb0 [ 794.954690][T11787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.960414][T11787] RIP: 0033:0x7fe275b7e719 [ 794.964667][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.984110][T11787] RSP: 002b:00007fe2769c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 794.992358][T11787] RAX: ffffffffffffffda RBX: 00007fe275d35f80 RCX: 00007fe275b7e719 [ 795.000166][T11787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 795.007976][T11787] RBP: 00007fe2769c0090 R08: 0000000000000000 R09: 0000000000000000 [ 795.015788][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.023597][T11787] R13: 0000000000000000 R14: 00007fe275d35f80 R15: 00007ffcd103ef28 [ 795.031416][T11787] [ 795.047135][T11794] xt_policy: too many policy elements [ 795.149621][ T2387] usb 7-1: Using ep0 maxpacket: 8 [ 795.437771][T11802] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3280'. [ 795.892551][T11790] futex_wake_op: syz.1.3279 tries to shift op by 32; fix this program [ 796.299691][ T2387] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 796.307869][ T2387] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 796.318232][ T2387] usb 7-1: config 135 has no interface number 0 [ 796.327547][ T2387] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 796.338705][ T2387] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 796.352104][ T2387] usb 7-1: config 135 interface 230 has no altsetting 0 [ 796.566491][ T9037] ------------[ cut here ]------------ [ 796.571920][ T9037] WARNING: CPU: 1 PID: 9037 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 796.579862][ T9037] Modules linked in: [ 796.583520][ T9037] CPU: 1 PID: 9037 Comm: syz-executor Not tainted 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 796.593348][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 796.603348][ T9037] RIP: 0010:drop_nlink+0xc1/0x110 [ 796.608181][ T9037] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 b7 e2 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 76 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 796.627671][ T9037] RSP: 0018:ffffc900097c7bf0 EFLAGS: 00010293 [ 796.633546][ T9037] RAX: ffffffff81cd2d31 RBX: 0000000000000000 RCX: ffff88811a363cc0 [ 796.641361][ T9037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.649139][ T9037] RBP: ffffc900097c7c18 R08: ffffffff81cd2cb4 R09: 0000000000000003 [ 796.657031][ T9037] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 796.664782][ T9037] R13: 1ffff110247a9d4c R14: ffff888123d4ea18 R15: ffff888123d4ea60 [ 796.672612][ T9037] FS: 000055559393c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 796.681397][ T9037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.687774][ T9037] CR2: 000055559395f4e8 CR3: 00000001185b7000 CR4: 00000000003506a0 [ 796.695601][ T9037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 796.703405][ T9037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 796.711221][ T9037] Call Trace: [ 796.714326][ T9037] [ 796.717101][ T9037] ? show_regs+0x58/0x60 [ 796.719648][ T2387] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 796.721199][ T9037] ? __warn+0x160/0x3d0 [ 796.730271][ T2387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.734113][ T9037] ? drop_nlink+0xc1/0x110 [ 796.742079][ T2387] usb 7-1: Product: syz [ 796.746173][ T9037] ? report_bug+0x4d5/0x7d0 [ 796.754511][ T9037] ? drop_nlink+0xc1/0x110 [ 796.758764][ T9037] ? handle_bug+0x41/0x70 [ 796.759089][ T2387] usb 7-1: Manufacturer: syz [ 796.762953][ T9037] ? exc_invalid_op+0x1b/0x50 [ 796.767389][ T2387] usb 7-1: SerialNumber: syz [ 796.771928][ T9037] ? asm_exc_invalid_op+0x1b/0x20 [ 796.771967][ T9037] ? drop_nlink+0x44/0x110 [ 796.771989][ T9037] ? drop_nlink+0xc1/0x110 [ 796.789696][ T9037] ? drop_nlink+0xc1/0x110 [ 796.793952][ T9037] shmem_rmdir+0x59/0x90 [ 796.797988][ T9037] vfs_rmdir+0x398/0x500 [ 796.802089][ T9037] incfs_kill_sb+0x113/0x230 [ 796.806493][ T9037] deactivate_locked_super+0xad/0x110 [ 796.811736][ T9037] deactivate_super+0xbe/0xf0 [ 796.816223][ T9037] cleanup_mnt+0x485/0x510 [ 796.820501][ T9037] ? user_path_at_empty+0x14e/0x1a0 [ 796.825506][ T9037] __cleanup_mnt+0x19/0x20 [ 796.829796][ T9037] task_work_run+0x24d/0x2e0 [ 796.834191][ T9037] ? task_work_cancel+0x2e0/0x2e0 [ 796.839051][ T9037] ? __kasan_check_read+0x11/0x20 [ 796.844025][ T9037] exit_to_user_mode_loop+0x94/0xa0 [ 796.849040][ T9037] exit_to_user_mode_prepare+0x5a/0xa0 [ 796.854384][ T9037] syscall_exit_to_user_mode+0x26/0x130 [ 796.859736][ T9037] do_syscall_64+0x47/0xb0 [ 796.863968][ T9037] ? clear_bhb_loop+0x55/0xb0 [ 796.868482][ T9037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.874247][ T9037] RIP: 0033:0x7f88ee57fa47 [ 796.878466][ T9037] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 796.897953][ T9037] RSP: 002b:00007ffc3e43e3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 796.906197][ T9037] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f88ee57fa47 [ 796.914002][ T9037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3e43e470 [ 796.921793][ T9037] RBP: 00007ffc3e43e470 R08: 0000000000000000 R09: 0000000000000000 [ 796.929641][ T9037] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3e43f4f0 [ 796.937397][ T9037] R13: 00007f88ee5f15fc R14: 00000000000c21ef R15: 00007ffc3e43f530 [ 796.945239][ T9037] [ 796.948105][ T9037] ---[ end trace 0000000000000000 ]--- [ 796.953479][ T39] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 796.967037][ T9037] ================================================================== [ 796.974939][ T9037] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 796.981006][ T9037] Write of size 4 at addr 0000000000000170 by task syz-executor/9037 [ 796.988915][ T9037] [ 796.991078][ T9037] CPU: 1 PID: 9037 Comm: syz-executor Tainted: G W 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 797.002360][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 797.012251][ T9037] Call Trace: [ 797.015375][ T9037] [ 797.018155][ T9037] dump_stack_lvl+0x151/0x1b7 [ 797.022665][ T9037] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 797.027959][ T9037] ? _printk+0xd1/0x111 [ 797.031957][ T9037] print_report+0xe1/0x4e0 [ 797.036209][ T9037] ? __virt_addr_valid+0x59/0x2f0 [ 797.041078][ T9037] ? kasan_addr_to_slab+0xd/0x80 [ 797.045836][ T9037] ? ihold+0x20/0x60 [ 797.049573][ T9037] kasan_report+0x13c/0x170 [ 797.053910][ T9037] ? ihold+0x20/0x60 [ 797.057644][ T9037] kasan_check_range+0x294/0x2a0 [ 797.062417][ T9037] __kasan_check_write+0x14/0x20 [ 797.067188][ T9037] ihold+0x20/0x60 [ 797.070744][ T9037] vfs_rmdir+0x268/0x500 [ 797.074825][ T9037] incfs_kill_sb+0x113/0x230 [ 797.079253][ T9037] deactivate_locked_super+0xad/0x110 [ 797.084460][ T9037] deactivate_super+0xbe/0xf0 [ 797.088973][ T9037] cleanup_mnt+0x485/0x510 [ 797.093231][ T9037] ? user_path_at_empty+0x14e/0x1a0 [ 797.098258][ T9037] __cleanup_mnt+0x19/0x20 [ 797.102512][ T9037] task_work_run+0x24d/0x2e0 [ 797.106939][ T9037] ? task_work_cancel+0x2e0/0x2e0 [ 797.111798][ T9037] ? __kasan_check_read+0x11/0x20 [ 797.116664][ T9037] exit_to_user_mode_loop+0x94/0xa0 [ 797.121690][ T9037] exit_to_user_mode_prepare+0x5a/0xa0 [ 797.126987][ T9037] syscall_exit_to_user_mode+0x26/0x130 [ 797.132375][ T9037] do_syscall_64+0x47/0xb0 [ 797.136622][ T9037] ? clear_bhb_loop+0x55/0xb0 [ 797.141134][ T9037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.146862][ T9037] RIP: 0033:0x7f88ee57fa47 [ 797.151121][ T9037] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 797.170553][ T9037] RSP: 002b:00007ffc3e43e3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 797.178807][ T9037] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f88ee57fa47 [ 797.186724][ T9037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3e43e470 [ 797.194535][ T9037] RBP: 00007ffc3e43e470 R08: 0000000000000000 R09: 0000000000000000 [ 797.202342][ T9037] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3e43f4f0 [ 797.210153][ T9037] R13: 00007f88ee5f15fc R14: 00000000000c21ef R15: 00007ffc3e43f530 [ 797.218068][ T9037] [ 797.220931][ T9037] ================================================================== [ 797.266600][ T9037] Disabling lock debugging due to kernel taint [ 797.272680][ T9037] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 797.280231][ T9037] #PF: supervisor write access in kernel mode [ 797.286126][ T9037] #PF: error_code(0x0002) - not-present page [ 797.292042][ T9037] PGD 11af8b067 P4D 11af8b067 PUD 0 [ 797.297159][ T9037] Oops: 0002 [#1] PREEMPT SMP KASAN [ 797.302197][ T9037] CPU: 1 PID: 9037 Comm: syz-executor Tainted: G B W 6.1.112-syzkaller-00017-gdefe0024cfb0 #0 [ 797.313759][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 797.323858][ T9037] RIP: 0010:ihold+0x25/0x60 [ 797.328194][ T9037] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 6e a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 72 a8 [ 797.347639][ T9037] RSP: 0018:ffffc900097c7c30 EFLAGS: 00010246 [ 797.353537][ T9037] RAX: ffff88811a363c00 RBX: 0000000000000001 RCX: ffff88811a363cc0 [ 797.361353][ T9037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.369161][ T9037] RBP: ffffc900097c7c40 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 797.376972][ T9037] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102376f6b2 [ 797.384896][ T9037] R13: ffff8881005a9ee0 R14: 0000000000000000 R15: 1ffff110200b53e2 [ 797.392692][ T9037] FS: 000055559393c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 797.401456][ T9037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 797.407883][ T9037] CR2: 0000000000000170 CR3: 00000001185b7000 CR4: 00000000003526a0 [ 797.415787][ T9037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 797.423591][ T9037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 797.431400][ T9037] Call Trace: [ 797.434527][ T9037] [ 797.437304][ T9037] ? __die_body+0x62/0xb0 [ 797.441485][ T9037] ? __die+0x7e/0x90 [ 797.445200][ T9037] ? page_fault_oops+0x7f9/0xa90 [ 797.450128][ T9037] ? vprintk_default+0x26/0x30 [ 797.454721][ T9037] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 797.460108][ T9037] ? add_taint+0x44/0xe0 [ 797.464180][ T9037] ? panic+0x667/0x667 [ 797.468110][ T9037] ? preempt_schedule_thunk+0x16/0x18 [ 797.473297][ T9037] ? exc_page_fault+0x529/0x6d0 [ 797.477986][ T9037] ? asm_exc_page_fault+0x27/0x30 [ 797.482838][ T9037] ? add_taint+0x93/0xe0 [ 797.486917][ T9037] ? ihold+0x25/0x60 [ 797.490646][ T9037] vfs_rmdir+0x268/0x500 [ 797.494726][ T9037] incfs_kill_sb+0x113/0x230 [ 797.499155][ T9037] deactivate_locked_super+0xad/0x110 [ 797.504359][ T9037] deactivate_super+0xbe/0xf0 [ 797.508874][ T9037] cleanup_mnt+0x485/0x510 [ 797.513126][ T9037] ? user_path_at_empty+0x14e/0x1a0 [ 797.518160][ T9037] __cleanup_mnt+0x19/0x20 [ 797.522413][ T9037] task_work_run+0x24d/0x2e0 [ 797.526842][ T9037] ? task_work_cancel+0x2e0/0x2e0 [ 797.531702][ T9037] ? __kasan_check_read+0x11/0x20 [ 797.536561][ T9037] exit_to_user_mode_loop+0x94/0xa0 [ 797.541593][ T9037] exit_to_user_mode_prepare+0x5a/0xa0 [ 797.546887][ T9037] syscall_exit_to_user_mode+0x26/0x130 [ 797.552271][ T9037] do_syscall_64+0x47/0xb0 [ 797.556785][ T9037] ? clear_bhb_loop+0x55/0xb0 [ 797.561300][ T9037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.567026][ T9037] RIP: 0033:0x7f88ee57fa47 [ 797.571277][ T9037] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 797.590728][ T9037] RSP: 002b:00007ffc3e43e3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 797.599062][ T9037] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f88ee57fa47 [ 797.606871][ T9037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3e43e470 [ 797.614682][ T9037] RBP: 00007ffc3e43e470 R08: 0000000000000000 R09: 0000000000000000 [ 797.622498][ T9037] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3e43f4f0 [ 797.630309][ T9037] R13: 00007f88ee5f15fc R14: 00000000000c21ef R15: 00007ffc3e43f530 [ 797.638122][ T9037] [ 797.640979][ T9037] Modules linked in: [ 797.644743][ T9037] CR2: 0000000000000170 [ 797.648711][ T9037] ---[ end trace 0000000000000000 ]--- [ 797.654000][ T9037] RIP: 0010:ihold+0x25/0x60 [ 797.658340][ T9037] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 6e a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 72 a8 [ 797.677782][ T9037] RSP: 0018:ffffc900097c7c30 EFLAGS: 00010246 [ 797.683681][ T9037] RAX: ffff88811a363c00 RBX: 0000000000000001 RCX: ffff88811a363cc0 [ 797.691493][ T9037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.699309][ T9037] RBP: ffffc900097c7c40 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 797.707129][ T9037] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102376f6b2 [ 797.714934][ T9037] R13: ffff8881005a9ee0 R14: 0000000000000000 R15: 1ffff110200b53e2 [ 797.722857][ T9037] FS: 000055559393c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 797.731732][ T9037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 797.738151][ T9037] CR2: 0000000000000170 CR3: 00000001185b7000 CR4: 00000000003526a0 [ 797.745977][ T9037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 797.753783][ T9037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 797.761593][ T9037] Kernel panic - not syncing: Fatal exception [ 797.767785][ T9037] Kernel Offset: disabled [ 797.771923][ T9037] Rebooting in 86400 seconds..