0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r8) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(0xffffffffffffffff) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='consume_skb\x00', r13}, 0x10) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:40:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12a490ec2729f521bf6a01000000000040580410500000896c000000000000000000000009040000010300000109210000000122070009058103000000000000e64a5d20cffde05e944399c9e805227383586c48c9619e22a57c42f0321293293c0aa21e3d0b0c976a00484573ad36c941b764bc38c09a9cd910b93f400a7bc3fa18bb51"], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x2010c15, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r2, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) ustat(0x0, 0x0) unshare(0x6020400) fchmod(r1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capget(&(0x7f0000000140)={0x19980330}, 0xffffffffffffffff) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1687, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local, @local, @main=@item_4={0x3, 0x0, 0xb, "c5fea2d4"}]}}, 0x0}, 0x0) 23:40:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) 23:40:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0xd) [ 109.177400][ T3495] overlayfs: statfs failed on './file0' 23:40:32 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_bt_hci(r3, 0x400448e0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080), 0x4) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:32 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00010000002a09040000010209"], 0x0) syz_usb_connect$uac1(0x4, 0x92, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x32, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x25}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x3, 0x1, 0x3, 0x3f, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3af, 0x1, 0x3, 0xbf, {0x7, 0x25, 0x1, 0x82, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1f, 0x4, 0xda, 0x3, "8d", "ea"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x20, 0x3, 0x2, 0x7c, "d76da0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x80, 0x7, {0x7, 0x25, 0x1, 0x81, 0x1, 0x5}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x2, 0x9, 0x10, 0x9}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x8, [{0x4d, &(0x7f00000001c0)=@string={0x4d, 0x3, "ad723248a1245f37a5f04d6ac6b0b64d25036db768b57ca2c1e00d59f15da02b851d72e7722fd712d1c4c6991076af0da1acf75faf4809af690924434e1d58b92284b6e4a01bd253bea961"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0xb6, &(0x7f0000000740)=ANY=[@ANYBLOB="b603052900ea33771b611ccf03b255a407e98228271ffb7cbee96111cf0000000001000000d6f39befae7c6f000000000000764da6985e89adeeae7db9cd7f3a8d38ac5bf59c90dbfb6523ec1f82ce09faf3aa0734c9311bad50efd002190e28927e3445d6adb9b901001b22a45d5f795052b3ad6c6d8b109dbff5c6f7561c4fb10d7d8f539f3e70007f03070d955136c2090000041ce79b522f1f4d33535e32a8c13c015bfe867811f8f1b636009f004fc6c81a52eea4731fcc3adca1e96b24e01893918e679268793ea54b6aa9cbf1b1de5670a46681904005a0eea7913752"]}, {0x92, &(0x7f0000000340)=@string={0x92, 0x3, "4ed4bc825afb445016c7bba57a6128a628845b49b7d12713e3f423794bae5cb39c77f58f63fcc8c2f36bb6b2bbf85ef6dd5f2a786982729e9f1960618c74ccf0f27089d4d001ec204afa7721b1631d9ddbdfbe5e607528b81546d1e534780d2b91b118ccb177cce4080653a53d2adb09c1ce08941b4ef96330a48f679a3d561c57dfc0e9d0fa0e7b65b25958998ad24c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40e}}, {0xd0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d0032a1e15078adfda07efe8735d4215ba79479daccc3547389c80f3e2cf1bf8a93af161890115ed638579d83294ab8554005ee4699d65a2d276f46003000000000000006bc2df4c76c716f1ca79f5542ad6911838b0ae23003ee14edeb6cccdecb5b3d9e8aa6ec568446357a9cc39c9d2b6b7960f3edb95a589eccc623a0f13c07184b3dd34febc19a5a539aa45bef647eda9d998312f88f50dbde164d03bdb68b684a5c460e4235752077826225c2ee84cafc0ceae00a942c290b05cf647b825f036777c9fa208251241809c391554"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3801}}, {0xbc, &(0x7f0000000600)=@string={0xbc, 0x3, "e04644e303f13e755643b1c6fb1942124244d239a5fce8c4ab4cfb983dfd8009603842a6a54fcff05c50e09b420d8b3bd2dbc6f81e888299d2df5209e546be1592ebd38652f9483b4028521c67dc08f899a56c710bfedfbf51333e5ae7fdcdbb4476ec81e0c243100842ef1e280447ee29d5bf9d6f9fd93244b5afa63e87fc06a442496c7f88e513aab747d5e72feab702f6c22d9b554683a8887fc8b066a6760d175cb230c5248e218fbcf35c1c8fcd5d4ef017a32abffbd46b"}}]}) [ 109.237211][ T30] audit: type=1326 audit(1712446832.645:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x0 [ 109.421306][ T302] usb 5-1: new high-speed USB device number 21 using dummy_hcd 23:40:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c080000000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 109.481389][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 109.487252][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.494437][ T323] usb 3-1: USB disconnect, device number 20 [ 109.561297][ T377] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 109.691263][ T302] usb 5-1: device descriptor read/64, error -71 [ 109.791242][ T374] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 109.811343][ T377] usb 2-1: Using ep0 maxpacket: 8 23:40:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0xb, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:40:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x35) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=0xffffffffffffffff, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='task_newtask\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000000000200000000000000ea04850000007b000000959f8805e1c5fa060eaa39f0dbd487e13cf49e4f8560f11aa9195cb30a0282a8c0013d055e63ec1045a8a61a122381a05e2d401d8842fc5f12a4e1a7f749fb20b038"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) vmsplice(r5, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r8) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(0xffffffffffffffff) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='consume_skb\x00', r13}, 0x10) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:40:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 109.971766][ T377] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.990668][ T377] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.003945][ T377] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.013183][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:40:33 executing program 2: mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x300420, &(0x7f0000000280)={'trans=tcp,', {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5018444, &(0x7f0000000180)={[{@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@fat=@debug}, {@shortname_winnt}, {@nonumtail}, {@utf8no}]}, 0x5, 0x279, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) [ 110.021928][ T377] usb 2-1: config 0 descriptor?? [ 110.037572][ T30] audit: type=1400 audit(1712446833.445:288): avc: denied { remount } for pid=3522 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.037581][ T3523] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 23:40:33 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "14436ab289bb29c5a371988c7b11ce7e95965083f14b4e579f46ab79714b84dddc9849b92866a7a9cf7448c03a861bcf6d2ddd36025a44ee0f237d7ba0c0eb545911f87ad4f3dba98efaff6582e6c999b8aa25cdabc79ffad91be333b43d55039629fa041dc25fe82df8f80cc414e9e1830ac4f3feafcc5b58e59f1adec7b3f92da81f22f486c18c858e5c52c8caf4423f032668400439186e139b7a187d7cc1aa15035b5a290ca49f903c3ee77275231ca6e96852cf8abf17ee1da3135729738a1c9a0718d4270cb78736e5a4362cfd199f56f3558fd5156ba5bf637eb18b97671f3a57d307679cac9053e1ceedd2fac76422ff6de2c06664ed22cfe4bc"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 110.037609][ T3523] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 110.078778][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 110.084372][ T377] hub 2-1:0.0: bad descriptor, ignoring hub [ 110.090099][ T377] hub: probe of 2-1:0.0 failed with error -5 [ 110.096988][ T377] cdc_wdm: probe of 2-1:0.0 failed with error -22 [ 110.097770][ T3525] loop2: detected capacity change from 0 to 256 [ 110.161810][ T302] usb 5-1: device descriptor read/64, error -71 23:40:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x8c77, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x11, &(0x7f00000017c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc66, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000019c0)='bpf_lsm_task_prctl\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x3e, 0x16, &(0x7f0000001880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x2, 0x1, 0xa, 0x4, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @ldst={0x0, 0x3, 0x1, 0x5, 0x7, 0xfffffffffffffffc, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @ldst={0x1, 0x2, 0x4, 0x9, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x80000001, 0x66, &(0x7f0000001700)=""/102, 0x41100, 0xabddf16c2b4992b4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0xb, 0xffff, 0x3}, 0x10, r3, r2, 0x0, &(0x7f0000001a00)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x90) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x3, 0x23, {0x23, 0x1, "bc1ddfbe65364df8335104c40507f116fd0835a60e64dffa841d8cda2f0b9d9f43"}}, &(0x7f00000000c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "c9f54d9258e732d2a7227823ec042a604ef9d478f5cd2fb3263a65f467fac80bd9d2c9f8792bd1486c2625c8a9506156d5ca6a11ae8a8ed4d17e1b346f8c41ddff627b131f53a16b8113ecff85563d6b3bf5b7a49103d8b212a0a233ed1e27d99ca9d1728f2f2dc9cf65d7c1d9efca761131d5d0c1ce0c9b2585bec5ea80709ed96abd6e037146a620da5dec46e448a5f9b471bd576f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00220d0000002bd7da9c8a9a83010004e2"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb503, 0x6a, 0x1, {0x22, 0x3d8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x40, 0x2c, 0xf2, "e1a4b334cf8d5d1f52ea7e6a030068ffd8e94b836fd9765bc2ea33b16db683020468e6f7a897591143c6bbc96451f6f9eb7b893fe1fc2fd13c5d1c71c6436832fe30ad2f78febef121b110c946e353772bbb29eb0a9d418a28f1c93066063370f731b007086f202bfe29f347996d2e3b00055015d3beae914d4a76ea8cfb253850d498f94719d1c5063dd4c008e2f22a5ee90b3fb4afc2baa76f0fcb76aeb852a23309a6b55133c1b4d70e0e7583db7b45850e05559fdc46f1bd08f8ba2357b5ad030dccec44a00ecc2cf4a799f9d262c4817c516c8b3c859d01d5f3712c33a4198b985aa96cb6147d7a4123acfcc1fc452c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0xab, "fb3726ebc0ef10eb3907924f70e2820898b1579a1f03a193e7bd778fe67ca12837077a91cb1954a61553f1847b259d3db683fdab3185df113c3c04b0d601e52ad731aae7548c07678c0e307f779e92bc6e2cec96de7d5657ff09fd97e8187d32ac3fe912d2e8998cd1c4b484920ea002cf504b7683790644f2e9952cc6166dd3ad738df7aab2bcad9970be05f0f36704fad25e3c81cb8e1217a789015c1efba65532647d59121cfd45d936"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfc}}) [ 110.241317][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 110.253108][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 110.264205][ T374] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 110.273155][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.282399][ T374] usb 1-1: config 0 descriptor?? [ 110.311384][ T3512] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.332720][ T374] hub 1-1:0.0: USB hub found [ 110.401309][ T377] usb 2-1: USB disconnect, device number 31 [ 110.431259][ T302] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 110.438700][ T323] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 110.541385][ T374] hub 1-1:0.0: 2 ports detected [ 110.571243][ T555] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 110.731345][ T302] usb 5-1: device descriptor read/64, error -71 23:40:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x18, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) 23:40:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0xc, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:40:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 110.811360][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.822332][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.832111][ T323] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.840971][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.851865][ T323] usb 4-1: config 0 descriptor?? 23:40:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) [ 110.971333][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.982199][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.991893][ T555] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 111.000826][ T555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.011265][ T555] usb 3-1: config 0 descriptor?? [ 111.131272][ T302] usb 5-1: device descriptor read/64, error -71 [ 111.251319][ T302] usb usb5-port1: attempt power cycle [ 111.561339][ T323] usb 4-1: string descriptor 0 read error: -22 23:40:35 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) [ 111.691269][ T302] usb 5-1: new high-speed USB device number 23 using dummy_hcd 23:40:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x4}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0xfffa, @none, 0x5a}, 0xe) (async) r5 = dup(r4) sendto$inet6(r5, 0x0, 0x2, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ffa6a40000bfa20003000008000000b70400000000000085000000010000009544575b10860e1ea364a75914a9600a99a82aaddb7856d102503a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='nilfs2_mdt_submit_block\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 23:40:35 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe6, 0xe6, 0x7, [@const={0x1, 0x0, 0x0, 0xa, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x24, 0x2}, @datasec={0x2, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x2be}, {0x5, 0x8, 0x766a}, {0x4, 0x5}, {0x4, 0x9, 0x3}, {0x2, 0x8a, 0xc15}, {0x4, 0xa8}], "7002"}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x68, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x1, 0x4}, {0xb, 0x3}, {0x2}, {0x8, 0x2}, {0xc, 0x4}]}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x8}, {0xc, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f, 0x61]}}, &(0x7f0000000a40)=""/4096, 0x107, 0x1000, 0x0, 0x902}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008c62249a799d39c4b5977e717c55b1677dfa38f542eeed01844fe2f41ece8d006658e9ed15f62c42c02e9817259c92601d2ddd07e2a27b6bbe161e7768f0b6f4e621e76b2150702beeb4ee", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x457bb, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000005107001400e18cd48ceadf623bcaf3598103c1d600000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff0007040000f0ffffffb70200000800000018230000a7d6b84b46289b6151cf576c14e251a182500c3c57e005a7461d06958f03a09fcf8500"/126, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv6_getroute={0xa4, 0x1a, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x1, 0xfc, 0x2, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r12}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_METRICS={0x5c, 0x8, 0x0, 0x1, "464ea0c7dd53e7fa5c576392e95bc60630dbec71d7dc6ba8f6351473557d7168e8c87f5f4d0461431627a9e24649d7faf7e23506394f7e842f70b1e26057cbafa61c070485a6ec6021c085bf20dcf38548485681fcb5b9e4"}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x25, 0x1, r12}}, @RTA_MARK={0x8, 0x10, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x24004801) [ 111.763211][ T555] usb 3-1: string descriptor 0 read error: -71 [ 111.791328][ T555] uclogic 0003:256C:006D.0067: failed retrieving string descriptor #200: -71 [ 111.800010][ T555] uclogic 0003:256C:006D.0067: failed retrieving pen parameters: -71 [ 111.808081][ T555] uclogic 0003:256C:006D.0067: failed probing pen v2 parameters: -71 [ 111.816163][ T555] uclogic 0003:256C:006D.0067: failed probing parameters: -71 [ 111.822752][ T323] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0066/input/input39 [ 111.824165][ T555] uclogic: probe of 0003:256C:006D.0067 failed with error -71 [ 111.843983][ T323] uclogic 0003:256C:006D.0066: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 111.849318][ T555] usb 3-1: USB disconnect, device number 21 23:40:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x80, 0x9, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x8000, 0x20, 0x1, 0x8}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000009500"/24], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="04c1000000050000000000"], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x3b, &(0x7f0000000040)=""/59, 0x41100, 0x24, '\x00', r2, 0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r5]}, 0x90) r6 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r6, r6) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@delchain={0x2c, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0x2, 0x4}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x36}}]}, 0x2c}}, 0x4004000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000031f58c3aafee13c1fbc331a214b3bfc4b43a91e0c54d6f9147f4233660fb782529bedd90f908d00c26713638ff555f6c26"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_insert_delayed_block\x00', r11}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000080)={0xe0002004}) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000040)={0x4}) [ 111.871321][ T302] usb 5-1: device descriptor read/8, error -71 23:40:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x19, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) 23:40:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 111.933004][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:40:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) [ 112.011010][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 112.011026][ T30] audit: type=1326 audit(1712446835.415:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f20379e69 code=0x0 [ 112.042645][ T377] usb 4-1: USB disconnect, device number 41 23:40:35 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:35 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:40:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 112.141347][ T302] usb 5-1: device descriptor read/8, error -71 23:40:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000008000000000000000000000181100006014df8c0915e9346f62d4795a98f982d5bdb9a771dc1f13b0f0d2125166883ba1f02fb3e8bd4b3e2fee877420925d2eee5e73a0b1aaec114b8f8afb78b06dd88345be21291fde630c417608c7f2cf5376605a08469b4c24052e10e1440ed7f2bd7c8fc26a4fe2ea97def1a9dcb3d23757a3c421df19df881c3546f04826b678a59325aca924dc43ea38b990b8ef587a70c105263c71912dea03451511f506fe53d4d759080333b11d81d399cb2387abc23363c7aa0ce6e284da1730d4e31c", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) unlink(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='dlm_lock_start\x00'}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0xa00368bc, &(0x7f0000002c00)=[{&(0x7f0000000100)="c7ee341b8127e4367f1de4c38f4ba163a3b2f5843e3d2189acc6b6ba75c700e7631251c3cedff5c2fe253aafc7af521c36f1d78b4a5d8260314edc6620e97c1dda762f7a82e24f41b9a41310fa4869a09886dd1083367675b96a2a8bbcf90734d48de12c599fe1687b598aecdd8fe70e70121a8acbb2c9cf38fe24a596049eab947a4ddf8381da09b865cf2de45fb0cd0574cb84a6a27c0c37f08d8b4f0049e1e226952ffd0fd4952fafdc00a4c9e1d9ecbf5b4a7a0bbc26", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000002980)='|', 0x1}, {&(0x7f00000029c0)="f5", 0x1}, {&(0x7f0000002a00)="fe", 0xfffffc5d}, {&(0x7f0000002a80)="f0", 0x1}, {&(0x7f00000028c0)='-', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="80", 0x1}, {&(0x7f0000000000)="054c508cb2547e1302c6c5e095d2b2ad93bd99cfcdfd48ff683372c51b476bcbd3b6abbcbe4c6c8991a39aebb0ff0ebd825f029f79de6300000000", 0x1}, {&(0x7f0000002e40)='\x00', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000240)="c06940a8686be6575e44b48667d8738b70d318ea861eaf18e3737d0925cb82efc174e436b30093721a192cc28e9c6dce7850bf1dd7ea90d902e8319e0d2c5589a7f5954c7803a3b7d5075bbe9248254b4a5eaf62e587e301d70f374dfadfbc88b140f5537a4becfd7754adbd18f22a0130dc032843312bdf7f0018c979c5d78bd4dfe21fc6bfc9e9a1ac864490900778f89c23f989647b6ecd5dba55bb2d30504f56ef9aad0bf5b7a7a1b3e8c3e246164581a48b941b135f7a94287fa4d977b9b1baed41aedfadc4ee"}], 0x1}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003200)="8c", 0x1}, {&(0x7f0000003300)="bf", 0x1}, {&(0x7f0000003400)="12", 0x1}, {&(0x7f00000034c0)="8f", 0x1}, {&(0x7f00000035c0)='_'}, {&(0x7f0000003600)="14", 0x1}], 0x6}}], 0x2, 0xf000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3d0, 0x2e8, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) setsockopt$sock_int(r6, 0x1, 0x4, &(0x7f0000000340)=0x7fffffff, 0x4) 23:40:35 executing program 4: mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x300420, &(0x7f0000000280)={'trans=tcp,', {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) (async) mount$9p_tcp(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x300420, &(0x7f0000000280)={'trans=tcp,', {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5018444, &(0x7f0000000180)={[{@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@fat=@debug}, {@shortname_winnt}, {@nonumtail}, {@utf8no}]}, 0x5, 0x279, &(0x7f0000000580)="$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") socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 23:40:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 112.234172][ T3571] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 112.238134][ T3572] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 112.249678][ T3571] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 112.265609][ T1480] usb 1-1: USB disconnect, device number 17 [ 112.271489][ T3572] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 23:40:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000001b40), &(0x7f0000000200)}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/79, 0x4f}], 0x1, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r5, &(0x7f0000000200)="7f3c5b00", 0x4, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001b80), &(0x7f00000017c0)='./file2\x00', 0x0, &(0x7f0000001900)={[], [{@flag='nolazytime'}]}, 0x2, 0x1508, &(0x7f0000000200)="$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") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5}, {0x6}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000540)={@random="a47055d574e2", @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @loopback}}}}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r8, 0x801c4803, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001740)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000001c0)=""/63, 0x3c}, {&(0x7f0000001800)=""/226, 0xe2}, {&(0x7f0000001a00)=""/131}], 0x3, 0x0, 0x20}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000001780)='svcsock_tcp_recv_short\x00', r1}, 0x10) [ 112.283171][ T323] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 112.283387][ T323] usb 1-1-port2: attempt power cycle [ 112.291658][ T3571] loop4: detected capacity change from 0 to 256 [ 112.374768][ T3576] loop2: detected capacity change from 0 to 256 23:40:35 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:35 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x1, 0x9, 0x8, 0x7, 0xa2, 0x0, &(0x7f0000000040)="d5d16a8a8e821c404b4ecf1e288f6d02c4aa28239a38f9e5ab5e706c5578814bd960790bd28c811a81a46e19817e1522c8381dd16c67c25c7f04ae670a5255bf5fb8f14262db1a2d37a2025fc0b41c3f77e97ab94b43deb2d29fa4153dcce2160a21d1ecb42ed531397c64a83ac3f921a9051039d525d9e96c694476f788215b1be09b70b116c6aadbba0753b37fe1e03f170838f7b1091cb481037fcd77661f33bb"}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x810, r0, 0xf4365000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sync_file_range(r0, 0x100000001, 0xffffffff, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'netpci0\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'wlan0\x00', 0x100}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000200)={0x8, 'vlan0\x00', {'veth0_to_bond\x00'}, 0x20}) r3 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newlinkprop={0x8c, 0x6c, 0x323, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4045, 0x70288}, [@IFLA_GROUP={0x8, 0x1b, 0x7}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x6}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x3}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x59}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x2}, @IFLA_MACSEC_ICV_LEN={0x5}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_WEIGHT={0x8, 0xf, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20040041) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000440)=0x1) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) fcntl$setstatus(r1, 0x4, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfe, {0x80, 0x14, 0x10, 0x0, 0x0, 0x0, 0xfd, 0xb, 0x2000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004880}, 0x4000) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x0, 0x7, 0xc0, 0x7, 0x3, 0x6, 0x6, 0x36b, 0x40, 0x2e4, 0x9, 0xf277, 0x38, 0x2, 0x781, 0x290, 0x2000}, [{0x60000000, 0x4aad, 0x8, 0x1c800000000000, 0x2000000000000000, 0x4, 0x0, 0x2}], "7edfa4640973ded6ac2d97f77a6780f22ed84a9ac8165d0dd1ba544e0f0a257f0d8d5895db441c327458563a6962d835d8cafb2e675adfa25644f69407b4036d7b6624fce95cb0e47575f8238542be8bdda710a3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5cc) fcntl$addseals(r2, 0x409, 0x1) open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000c40)={0x1, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) faccessat(r4, &(0x7f0000000c80)='./file0\x00', 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000cc0)={'veth1_virt_wifi\x00', 0x8000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x280100a}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) recvfrom(r2, &(0x7f0000000e00)=""/167, 0xa7, 0x80, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x128, 0x6, 0xe2, 0x9, 0x80, 0x8, 0x5, 0x17b, 0xc0a}) [ 112.425711][ T3576] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xddb45fa8, utbl_chksum : 0xe619d30d) 23:40:35 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:40:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2}) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 23:40:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x8c77, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x11, &(0x7f00000017c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc66, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_btf_id_by_name$bpf_lsm(&(0x7f00000019c0)='bpf_lsm_task_prctl\x00') syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x3, 0x23, {0x23, 0x1, "bc1ddfbe65364df8335104c40507f116fd0835a60e64dffa841d8cda2f0b9d9f43"}}, &(0x7f00000000c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "c9f54d9258e732d2a7227823ec042a604ef9d478f5cd2fb3263a65f467fac80bd9d2c9f8792bd1486c2625c8a9506156d5ca6a11ae8a8ed4d17e1b346f8c41ddff627b131f53a16b8113ecff85563d6b3bf5b7a49103d8b212a0a233ed1e27d99ca9d1728f2f2dc9cf65d7c1d9efca761131d5d0c1ce0c9b2585bec5ea80709ed96abd6e037146a620da5dec46e448a5f9b471bd576f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00220d0000002bd7da9c8a9a83010004e2"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb503, 0x6a, 0x1, {0x22, 0x3d8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x40, 0x2c, 0xf2, "e1a4b334cf8d5d1f52ea7e6a030068ffd8e94b836fd9765bc2ea33b16db683020468e6f7a897591143c6bbc96451f6f9eb7b893fe1fc2fd13c5d1c71c6436832fe30ad2f78febef121b110c946e353772bbb29eb0a9d418a28f1c93066063370f731b007086f202bfe29f347996d2e3b00055015d3beae914d4a76ea8cfb253850d498f94719d1c5063dd4c008e2f22a5ee90b3fb4afc2baa76f0fcb76aeb852a23309a6b55133c1b4d70e0e7583db7b45850e05559fdc46f1bd08f8ba2357b5ad030dccec44a00ecc2cf4a799f9d262c4817c516c8b3c859d01d5f3712c33a4198b985aa96cb6147d7a4123acfcc1fc452c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0xab, "fb3726ebc0ef10eb3907924f70e2820898b1579a1f03a193e7bd778fe67ca12837077a91cb1954a61553f1847b259d3db683fdab3185df113c3c04b0d601e52ad731aae7548c07678c0e307f779e92bc6e2cec96de7d5657ff09fd97e8187d32ac3fe912d2e8998cd1c4b484920ea002cf504b7683790644f2e9952cc6166dd3ad738df7aab2bcad9970be05f0f36704fad25e3c81cb8e1217a789015c1efba65532647d59121cfd45d936"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfc}}) 23:40:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x7ffffffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x71}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000b00)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) write$cgroup_subtree(r3, 0x0, 0x7ffffffff000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xd3, 0x80, 0x9, 0x6, 0x1, 0x3e, 0x6, 0xfb, 0x38, 0x2cb, 0xf0, 0x8, 0x20, 0x2, 0x200, 0x9, 0x400}, [{0x6, 0x101, 0x18, 0x9c, 0x1, 0x9, 0x8}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 112.721251][ T555] usb 3-1: new high-speed USB device number 22 using dummy_hcd 23:40:36 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "14436ab289bb29c5a371988c7b11ce7e95965083f14b4e579f46ab79714b84dddc9849b92866a7a9cf7448c03a861bcf6d2ddd36025a44ee0f237d7ba0c0eb545911f87ad4f3dba98efaff6582e6c999b8aa25cdabc79ffad91be333b43d55039629fa041dc25fe82df8f80cc414e9e1830ac4f3feafcc5b58e59f1adec7b3f92da81f22f486c18c858e5c52c8caf4423f032668400439186e139b7a187d7cc1aa15035b5a290ca49f903c3ee77275231ca6e96852cf8abf17ee1da3135729738a1c9a0718d4270cb78736e5a4362cfd199f56f3558fd5156ba5bf637eb18b97671f3a57d307679cac9053e1ceedd2fac76422ff6de2c06664ed22cfe4bc"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) 23:40:36 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x4008ae48, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x3, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 112.827448][ T3595] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.861251][ T1353] usb 4-1: new high-speed USB device number 42 using dummy_hcd 23:40:36 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:40:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c080000000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 113.081372][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.092144][ T555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.101918][ T555] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.114809][ T555] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.123881][ T555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.132427][ T555] usb 3-1: config 0 descriptor?? [ 113.141261][ T1480] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 113.211275][ T322] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 113.221430][ T1353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.232208][ T1353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.241806][ T1353] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.250643][ T1353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.259320][ T1353] usb 4-1: config 0 descriptor?? 23:40:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) [ 113.333407][ T30] audit: type=1326 audit(1712446836.745:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3610 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f79901e69 code=0x0 [ 113.451245][ T322] usb 1-1: Using ep0 maxpacket: 32 [ 113.541320][ T1480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.552039][ T1480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.561592][ T1480] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.570407][ T1480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.571324][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 113.578934][ T1480] usb 2-1: config 0 descriptor?? [ 113.592855][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 113.605225][ T322] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.614877][ T555] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 113.622153][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.629931][ T555] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 113.637810][ T322] usb 1-1: config 0 descriptor?? [ 113.642863][ T555] plantronics 0003:047F:FFFF.0068: No inputs registered, leaving [ 113.651848][ T555] plantronics 0003:047F:FFFF.0068: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 113.664139][ T3607] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 113.681799][ T322] hub 1-1:0.0: USB hub found [ 113.882954][ T323] usb 3-1: USB disconnect, device number 22 [ 113.901304][ T322] hub 1-1:0.0: 2 ports detected [ 113.991281][ T1353] usb 4-1: string descriptor 0 read error: -71 [ 114.011290][ T1353] uclogic 0003:256C:006D.0069: failed retrieving string descriptor #200: -71 [ 114.019957][ T1353] uclogic 0003:256C:006D.0069: failed retrieving pen parameters: -71 [ 114.027874][ T1353] uclogic 0003:256C:006D.0069: failed probing pen v2 parameters: -71 [ 114.035761][ T1353] uclogic 0003:256C:006D.0069: failed probing parameters: -71 [ 114.043061][ T1353] uclogic: probe of 0003:256C:006D.0069 failed with error -71 [ 114.053150][ T1353] usb 4-1: USB disconnect, device number 42 23:40:37 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180021f9aa38564cae980000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000772000/0x4000)=nil, 0x4000}}) 23:40:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040002f5ffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_FLAGS={0x8, 0x9, 0x2}]}}]}, 0x40}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r9 = timerfd_create(0x9, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, 0x0) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/56, 0x38}], 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000000)='ext4_da_write_pages_extent\x00', r10}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000140)="0b03060003001000020047c8aa96a13bb1001911000088ca1a00772bfc0d166321f30f7d26e3a9c898fa5645f412", 0x2e, 0x0, &(0x7f0000000040)={0x11, 0x0, r13}, 0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r8, 0x20, &(0x7f0000000480)={&(0x7f00000003c0)=""/133, 0x85, 0x0, &(0x7f0000000b40)=""/4096, 0x1000}}, 0x10) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', 0x0, r8, 0x2, 0x0, 0x6}, 0x48) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x4, '\x00', 0x0, r8, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x61, &(0x7f00000002c0)=""/97, 0x41000, 0x70, '\x00', r13, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x5, 0x71}, 0x10, r14, r8, 0x1, &(0x7f0000000640)=[r8, r8, r8, r8, r8, r15, r16], &(0x7f0000000680)=[{0x2, 0x4, 0x9, 0x2}]}, 0x90) 23:40:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x7ffffffff000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x71}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000b00)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) write$cgroup_subtree(r3, 0x0, 0x7ffffffff000) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) (async) write$binfmt_elf32(r8, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xd3, 0x80, 0x9, 0x6, 0x1, 0x3e, 0x6, 0xfb, 0x38, 0x2cb, 0xf0, 0x8, 0x20, 0x2, 0x200, 0x9, 0x400}, [{0x6, 0x101, 0x18, 0x9c, 0x1, 0x9, 0x8}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 114.191961][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.205355][ T30] audit: type=1400 audit(1712446837.615:292): avc: denied { wake_alarm } for pid=3616 comm="syz-executor.4" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.242687][ T3619] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.276560][ T3619] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.284533][ T3619] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 23:40:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 23:40:37 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1be0}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5aa383e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1000, 0x54, &(0x7f0000000180)=""/84, 0x40e00, 0x2, '\x00', 0x0, 0x16, r2, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x3, 0x6, 0xda4d}, 0x10, r3, r1, 0x4, &(0x7f0000000440)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x5, 0x2, 0xe, 0xc}, {0x3, 0x1, 0x9}, {0x1, 0x1, 0x0, 0x2}, {0x4, 0x3, 0x5, 0x4}], 0x10, 0x20}, 0x90) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000280)='\\/\x00') [ 114.284532][ T1480] usb 2-1: string descriptor 0 read error: -22 23:40:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)={[{@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@shortname_lower}, {@rodir}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@sys_immutable}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_win95}, {@numtail}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$tmpfs(0xfffffff6, &(0x7f0000000740)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) 23:40:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) [ 114.335339][ T3627] overlayfs: unrecognized mount option "\/" or missing value [ 114.353807][ T3629] loop4: detected capacity change from 0 to 256 23:40:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 23:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x7, 0x4b2, &(0x7f0000000100)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000003880)={0x2020}, 0x2020) dup2(r4, r5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read(r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) [ 114.438283][ T30] audit: type=1326 audit(1712446837.845:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77dcdf7e69 code=0x0 23:40:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) [ 114.496926][ T3635] loop3: detected capacity change from 0 to 512 23:40:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) [ 114.544939][ T3635] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 114.558951][ T3635] EXT4-fs (loop3): 2 truncates cleaned up [ 114.560015][ T1480] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.006A/input/input40 [ 114.564812][ T3635] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:40:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback={0xfec0ffff00000000, 0x2}}}) [ 114.602013][ T30] audit: type=1400 audit(1712446838.005:294): avc: denied { write } for pid=3634 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.627900][ T1480] uclogic 0003:256C:006D.006A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 23:40:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)={[{@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@shortname_lower}, {@rodir}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@sys_immutable}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_win95}, {@numtail}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$tmpfs(0x8000000000, &(0x7f0000000740)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) [ 114.653109][ T3635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 114.666166][ T3635] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 114.676482][ T3635] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 114.687310][ T3635] syz-executor.3 (3635) used greatest stack depth: 19344 bytes left 23:40:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000fc0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:40:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 23:40:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) [ 114.741773][ T3651] loop3: detected capacity change from 0 to 256 [ 114.779144][ T1353] usb 2-1: USB disconnect, device number 32 23:40:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) readlinkat(r2, 0x0, &(0x7f0000019240)=""/102393, 0x18ff9) 23:40:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140), 0x14) 23:40:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x9413, 0x400800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) ioperm(0x0, 0x3d, 0xe) close_range(r0, r0, 0x2) ioperm(0x0, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv6_newaddr={0xa8, 0x14, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x78, 0x20, 0x0, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x10000}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1, 0x0, 0x10001}}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8000, 0x7, 0x7}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1f, 0x1ff, 0xffff}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xa8}}, 0x44094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x40086607, 0x20001412) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="7369740e00"/16, @ANYRES32=0x0, @ANYBLOB="00400008000000010000003f461a0098006700000629907800000000e0000001014454e6b16401010000007fff6401010000000003ffffffff00000000ac1e00010000008100000000000000086401010200000006ac14144000000b27ac141438000000050a0101020000013ce0000001000000710189077c7f000001862400000003050882dc1731f27e010514b1d407116def5831e00aab3d9ce7b0c3bb5ab9000000"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x11, 0x9, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x5, r11}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f00000020c0)="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"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r12}, 0x10) getitimer(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000003f0000007a25daebfef720386a4630a8feff0400000095000000000000001842000004000000000000008a9787fb9547feff04000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b762d1f8bcff0000850000000600000095000000000000003a79f3620dc665fcf51bcae3eca7da9729290e149d06f0074019c88c7563e8e3a964fc0cba36365018adfc13d345c38448ed628388acd81b42462a4decbb16d67a2535d8c3547ba02fb3c86a0af86a4eeb5d65b7b0f59f10e71f19f5ad5bbfd4784ec2a007d971ad59ebc59ef2e9eeb565058b52062108ae83997193de4025e9f83c0a207742f058220bfc94e96dcfff21c7230e049bb8c9f0174a849042e1002fa774fbb50440fa9af074fb606907d694816389439ddbe50b80b59230c34b7dd369"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x48, '\x00', r9, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x2, 0x6, 0xffffffff}, 0x10, r10, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000b40)=[{0x3, 0x2, 0x0, 0xa}, {0x2, 0x5, 0x6, 0xa}, {0x0, 0x3, 0x8, 0x4}], 0x10, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x19, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000012000000000000000000008000094e8c0074f57ebe50f55bcfb5a03d4665acf0b709500f569c9cf0cab14d6a3ece8f8436a0e5a011af783e4c69caf975a629a1ce3d5af955e212b5398a4e1e18a548ee3f10381c1af7d869b58d19cc00"/105, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000002d250c00ffffffff334ad8ffffffffff851000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000186600000100000000000000f8ffffff18250000", @ANYRES32=r0, @ANYBLOB="000000004000000095000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x40, 0x8f, &(0x7f00000004c0)=""/143, 0x41000, 0x12, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x3, 0x6}, 0x10, r10, r1, 0x2, 0x0, &(0x7f0000000400)=[{0x4, 0x3, 0xa, 0xc}, {0x1, 0x5, 0xf, 0x9}], 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 23:40:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='task_rename\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRESHEX=r2, @ANYRES64, @ANYRESHEX, @ANYRES32=r0], 0x1, 0x4fa, &(0x7f0000000540)="$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") 23:40:38 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup(r2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x5}]}, 0x18}}, 0x0) 23:40:38 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8000, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x247}}, @generic={0x3, 0x4, 0x3, 0x40, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xf0000000, 0x57, &(0x7f00000003c0)=""/87, 0x41000, 0x4c, '\x00', r8, 0x2f, r7, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x5, 0x10001}, 0x10, r9, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000005c0)=[{0x5, 0x2, 0x0, 0x9}, {0x3, 0x1, 0xe, 0x9}, {0x4, 0x5, 0xf, 0x3}], 0x10, 0x8}, 0x90) [ 115.083632][ T3666] loop3: detected capacity change from 0 to 512 [ 115.102115][ T3666] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.111811][ T3666] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 23:40:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) [ 115.125267][ T3666] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 115.137500][ T3666] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.148114][ T3666] ext2 filesystem being mounted at /root/syzkaller-testdir62747457/syzkaller.9tCUR7/217/file0 supports timestamps until 2038 (0x7fffffff) 23:40:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) 23:40:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) readlinkat(r2, 0x0, &(0x7f0000019240)=""/102393, 0x18ff9) 23:40:38 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000fc0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0) 23:40:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:40:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) [ 115.449924][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.456977][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.472606][ T3687] device bridge_slave_0 entered promiscuous mode [ 115.479263][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.486269][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.493459][ T3687] device bridge_slave_1 entered promiscuous mode [ 115.536314][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.543171][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.550261][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.557067][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.578212][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.586022][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.593385][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.605000][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.613034][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.619884][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.623066][ T1480] usb 1-1: USB disconnect, device number 22 [ 115.627091][ T322] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 115.639579][ T322] usb 1-1-port2: attempt power cycle [ 115.647495][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.655542][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.662409][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.669929][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.687653][ T3687] device veth0_vlan entered promiscuous mode [ 115.694451][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.702710][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.710421][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.718104][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.725557][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.739099][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.748326][ T3687] device veth1_macvtap entered promiscuous mode [ 115.757699][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.771029][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.921975][ T8] device bridge_slave_1 left promiscuous mode [ 115.927933][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.935503][ T8] device bridge_slave_0 left promiscuous mode [ 115.941597][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.949297][ T8] device veth1_macvtap left promiscuous mode [ 115.955378][ T8] device veth0_vlan left promiscuous mode 23:40:39 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16=r1, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") 23:40:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) 23:40:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3801, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) rt_sigsuspend(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:40:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) 23:40:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 116.145563][ T30] audit: type=1326 audit(1712446839.555:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f20379e69 code=0x0 [ 116.184801][ T3695] IPv4: Oversized IP packet from 127.202.26.0 [ 116.206645][ T3695] loop0: detected capacity change from 0 to 1024 23:40:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) [ 116.255086][ T3695] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 116.278314][ T3695] EXT4-fs (loop0): write access will be enabled during recovery [ 116.285982][ T3695] JBD2: no valid journal superblock found [ 116.291631][ T3695] EXT4-fs (loop0): error loading journal 23:40:39 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@snprintf, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x200, 0x4b, &(0x7f0000000080)=""/75, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xd, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x5, 0x2, 0x1}, {0x5, 0x4, 0xf, 0x3}, {0x2, 0x2, 0xc, 0xa}, {0x2, 0x1, 0x7}], 0x10, 0x1000}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r1}, 0x11) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, &(0x7f0000000600)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000066c0)=ANY=[], 0x338) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003500)={0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x16, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x0, 0x1000}, @alu={0x4, 0x0, 0x2, 0x5, 0x0, 0x1, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcf13}], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) 23:40:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c080000000002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:40:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:40:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) [ 116.432029][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x1 [ 116.439240][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.447617][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.454883][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.462600][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.469828][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.477073][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.484279][ T1480] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 116.491667][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.498835][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.506346][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.513667][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.520895][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.528138][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.535478][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.542729][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.549908][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.557320][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.564483][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.571690][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.578886][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.586175][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.593421][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.600603][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.607838][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.615139][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.622369][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.629542][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.636772][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.643977][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.651153][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.658382][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.665605][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 116.672788][ T302] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 23:40:40 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001000)={@remote, 0x0}, &(0x7f0000001040)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8000000, 0x8, 0x4d1, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x63) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_ext_remove_space\x00', r2}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x2, @val=@perf_event}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r2, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1d, 0x2, &(0x7f0000000940)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}], &(0x7f0000000980)='GPL\x00', 0x1, 0xf, &(0x7f0000000b00)=""/15, 0x41100, 0x28, '\x00', r6, 0x21, r4, 0x8, &(0x7f0000000b40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x8, 0x8, 0xa8}, 0x10, r8, r2, 0x2, &(0x7f0000000ec0)=[r1, r3], &(0x7f0000000f00)=[{0x3, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x0, 0xa}], 0x10, 0xc17}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x15d, 0x6, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x1c, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6ee338c8}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x2, 0x9, 0x5, 0xffffffffffffffc0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x51be7e1e, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x8, '\x00', 0x0, 0x23, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r2, 0x8, &(0x7f00000007c0)=[r1, 0xffffffffffffffff, r3, r1, r3, r1, r3], &(0x7f0000000800)=[{0x4, 0x4, 0x8, 0x6}, {0x5, 0x5, 0x0, 0xb}, {0x2, 0x4, 0x0, 0x7}, {0x1, 0x3, 0x2, 0x1}, {0x2, 0x3, 0xe, 0xb}, {0x4, 0x3, 0xd}, {0x4, 0x1, 0x8, 0x3}, {0x0, 0x2, 0x80000000, 0x6}], 0x10, 0x1}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 23:40:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:40:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) [ 116.683767][ T302] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 116.841302][ T374] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 116.891342][ T1480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.902055][ T1480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.911710][ T1480] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.920548][ T1480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.932035][ T1480] usb 4-1: config 0 descriptor?? 23:40:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/43, 0x2b}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x36c, 0x1d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x8}, [@nested={0x327, 0xc1, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r1}, @generic="d5b812f96989218934da92fbbf2acafb9399887b40dd2bb6b89cb24cbc5972a4e771d89fc466b0f5d94f65d3153fb9114616564b18632f044175213fc926a687cb5d212993454791b554a85542ee7025e69550bb9bfb04f16b3ffa2bac4bd6fc16f90b22179f03d5929acb12a18f081332f34337b84897e56014471d4518fee8160e7e70fad9779b230f1ef58614f1008fee2a3204a1fb8e99ba596bb0908bfe876fe6705a21f1eee835", @generic="3d1a695e0d6bbd7d1a1d5249dcae57121285decf7f6023e9a82d7ea731d4b265f562700d7780431f3e24c77b5678036f9c644a01376a9c13959e1b25c42b783e45659c0220c32addaf116a2f97f8c958ca1ac5014242d748b5dd17b98baa4f6b4b60288b30f25f47f3fafb1472f1e6c9215c4c928ab4f6572d628ba3c5de9a1a794146bc2bb6d59f66b8830a685479a57e79bf53ebbab8466dc4d47684a2deaae36511b72f4449cd27dbd8fa9b96bb2e43ce3918591e295308733ce9f2c1e95d7638", @generic="052bc78d605d424e13cd74e3f9df5dd1a7dabae16d84e37df3bf0f4c0d81983cac96d4e62e3c0a504e5c902216a57ba1ed44c6d156477bb43ff3d077a3a5650d59f8da62fd324c25e46bb1d8faeccc44008e390bf3d90687f29889b756d9b5fcdfb4e11ede7afcef", @generic="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", @generic="a438b187a06ce8336dda8e58b9018a1ae5436aec754ac6cee2935842bf74d657dda4055421d4d9cd8e1ddcf13eeb273fd257b39130be0043ed533d88b3196de88a6cbd315d448a50334cfcc01d"]}, @generic="54cdaa3238f27a3b8ed5d6db3caf09c40f68644f130fc5e7bced39397ff0e3b4592809f2d236bd1b16a1b2dd08303b54"]}, 0x36c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000019c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={&(0x7f00000005c0)={0x13a8, r2, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xbc, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_a, @from_mac=@device_b, @from_mac=@device_b, {0xd}}, @a_msdu=[{@broadcast, @broadcast, 0x91, "f0ebb413a964ae8a3b29154bad1ca9f987e132c6687fda238a100cab842fae7efc0200d1265f3161baa05f811424140b13416a05156adb3a199f84a6c153eb2c715bc1ef39ab16aad348cfb2782d10794f8212ce0e16e9ae5c19cff566aa134c0038c8f4a01eeba7dbe637b4dcbac926085396cac1b3a3f4740867629dd28f0d91c8c6ba927efd51ae711dcc1e7eda5aee"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x51}, @broadcast}}, @NL80211_ATTR_FRAME={0x12b0, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac=@device_b, {0x1, 0x5}}, @a_msdu=[{@device_b, @broadcast, 0x2e, "6e8033e722010af3da5e348ffc1b47282081f34eda8f9df4695898e8f20fd4a65d38a02677f86ac176ae7dccbc48"}, {@device_b, @device_b, 0x27, "6f11b109018955916499f810a35e45b76af1a24792a63e1bdb5e0c7fb9a8f650864f084598329b"}, {@device_a, @broadcast, 0x1000, "44936e24ddc53485c810adc936f2403d54477c6a8a802b2574b7cc4ee5521d1030aaff54d4d59bec26a9f8dbd24c43251c3229d20514c371a3720d180db15987e2c781d153bcc5cf4692f19f3a3fcaba40f62053d42ceb2126902ee63eaa025464c070ecd819ddca79d9820e0748f619e88f247f666e1425c0df3c312da997cd0b324a3e5a536162b43429f047f24f7da374a20ddd4a4a7377f59611e66695975943663ab2cf977d4bbd252255e0e308d0a179690dd6ea43c8b279c7a75f40687e732bdedd26ebbef63d4031e3a10cf5433b5e51aa204ee5cc3fdab00fd425b1f8cf077cd3235910476400de60863e9407a15780314ad288f3fb9bd864d9e6f6b654ed4b25583015f81cf2a4fd2a8811f0055003e8309eaafb2e903fb921a654e6b9f506a5b39576d39161c6d6c684e479b08423dfe4e14670565776d8d44c154c7b648a8ca5744585c886182b4f1b5e9c4da3bcebf2416b909a7d1d119500baf3eb0dca261cfc9d9953a1a736c1bdd0627aa91e49f1e8d23023edcf0e4011ebba067bcb5a4ca5c8017aa963398140628ebfd63eb363bbc4ff87c4378210b80a0f2171f3bc4e671692f5cff1ff2b056e4b58e346988c65bda731bc7b46390b5716ae550a75025b7564e19cf1e84656d754c3db911895642d940e6cc7c338d3deca665326f8aa37cc3a995455be1000ddae2720e55c1b1620b254e296b860b0aec276218b68534bdc7bcd5acf6860f52d1fd7d5e09a00e7cd0a62758a8cf0395cb74e3ef12a5f28096b71dd0e0c7569e4a85be0651756bd97002822c55fced72743be67ef14822c73edae7133d5e45406be42ccead994eb0c77208c070c72fe60f20b7280811f77097b3e63b40f52d255017056974a5141705566a286f954d2ed7b62cf7df4e4de0e7c29ffbf1b52652d1de3d980e01ebd493b0e92b61493082329109029fa78320156f126fe774dcaf90030744520a7708ea7c0db0e9c017f6a2ebb45bb5f7556de972a3fc3c33c52f3e73a2dbc7989271b55a113c99b801461099f0236e47af71962beffb4b912b676526d743170431eaec1d1aa3bbc53a75a201561d2b5f49961ddd77737779c6981503cdf2f615296138ff595012fa8c973a14bb5b20685bede0b4b93592b98e67d98169fe9117845f4484622ede2312762b3afd7b489716704fb0006824b9e62dfc89b3e9939e60a1f6f8887d50dbbdb0b5aab8ef14209aae32969c48a319483ef66420e5ab11fc973380c7e1dd5b6a6b90ef776fb4be0c81401b62c794d7e384b9dff86af62d52b4e65d49fd7946768b1a8816e652655634311c227be0530f2a570cdcc7b1c3be3c39cd40e38937807bee50dfa9b611c4509e2486711cf59d2e2e5d8da8ead4747870284f94e03d4270dfa620688091e522896ff054c4bdbe2a321dfddb5999f3ef7a126f682c4721cc697c3603080d859b0a491c2aa66c1c2f2b2035bf95f1bb140939a53bd7083f37f2fa5465431bdc8fbf52be67e48857f1e377cdcce476bb352ed78125691ff76b1e3eb3c989349457f8e9d9be0fde30fd689d39534cf9f911959dd97bfe3fc4c2555ea26a6ec84c386ecca58ef3602e9fae22f8b28f12ad7b5459ff4517b6af03b3da43439bad92935e4151b8a923f9a4f14ee5d8e520977c83d247c8c4724a67c0a05ef9a318e4918fdd60775bce96e27f4746b47fa1161db639ec933300491e4b1e34e4d9b94455f01ff881e8a66cd092e3ba545eca38c9a6f84cf6165a1464d45b456ce738b56c4b0014414a1690245f0d3e2e6a7c7688d3729b61ae054fe0cb3b109d82dcba195e8c8246dcf8f6b1cf60c0980d8f06601707f9f5eabe62bf0aef8bfba6eb5f9486bd25d16fac377dbba5d62c0de59d91e9d08f582fe5de789bd39b2c0483f851611ed2ccc684875c91e581caddbb2f8075038d85734a43e2febeba64a2869016ff1d0150e5b4c7e9d61351987f98398527b82cc8898ff768a4598e292aeb009e300d9f820e961e88851dd8e45b1ffce727b0603fdbcbaa14efeeca3e6ffb90d72c844a7c82aaa046f17489e28813caeb9a184ac143197f4c8d28366ae51a5f58b452829fac7b3f3f827c03eff6d64077d6c801d5ed4311fdb00a537f125b4b88e519cfd1ce09eede44dcb64b8a39edabb9850d9d97c091aaac65f39093b0b0a79505ee7bc4bd2fa6fda7f2d2514118e3d69f700b8e5d64d502af1a76a9c1df9484ad8916fb87ec910c988876d02b63dfccd642161eb21d1713dc0e66bde30826f1da355405de10009699aee4b608737263c086ff13e850e0d8d7e899d8635629c9813e23e19f697f13346e50566daaa9409448d86924fccad43a88a4b45c17f8d7e6200140e181dad0722662afd6102f65b132f8a1f6012cb748e75228ff77f5c0f17e700e1cb902b219320728691d3665060048ac477cf595a3def8bad45c29a83f974e3171a92d7f85eab58d8295a3b2a3a7aa465b8ee309d5bf9f8d8969aeb93870bb09e6e8033ca5e3389fa9c7df5b3cd284541861af7e93c669647edb7d7929fc695c2ea300f1f32a7341a9de76e18199118c0dcb7ab5228ccc8b95971903df2158a1eb2df7c8cd036930e29b869cd193af711fecb0fc51f56faf8587aeefd1279c2caed66c24520a78d3347beb999d3bd35955ceeb3ba72731c17011c1fee61753e80a9a2051996ff618dec36d31c38728e2544e745e9f30154bb5f231567675b884a092a860ba56868a51edf1c9574e4ff72f5a1dbe7b9e3af69827714e387df98d2952a3023913c50d488fed095e76f1ba51ffb7b17c8de49db8700c537666f5fd74214308f73c5e90e45973e1c50810de28da5d86fdaf05908e20c5b14225a63064d40400d2ba1abf8a60816f29685c76a40bc7e1f6d453343080f45395a9552ef45f6313f8765e7d2f5a6585c3eb4f72db7b3039285e0f8d90f282c97411458cbb3d4de6b91273a2dc0d7dd105a50eabc3d8ee021c3c15b48c6b80905ca351a95fee219da2ad7fa99d314133ed6ebf6cbe5982d217f29e3983dc10e17818f08088fcbc833e897872da53f8617ee1a5a15cdfaccf6c0019c7f873580acaea82a0cef55b0ce7060040bf85cf07a88c847a91b7b6847f1114798278efcc0eab542e072ff0b75d6054337a1a9b41c53781d1ee1a2b7afad2ec286362597e4772688123c102fc2fdcd4423851c0a0ac5ec01afa3f057d819bf0aaa8ed316a11d649025003bacfbd605eebb0bd9676e44ac7ac41819b5ce834d31a27703172dd9976793fb6bde1240e0cbc4176f5fa63de55acabe9f506f2f12132c95902a52d121cb11c08eab613edeb921344a536711e67910bae3723a648900d0c7ab6b651b0aef583c70593e554cbcf8c5bb6cd72d1076a1b0f5cb5541c01fe750aaa6b2046cade0fcf4b760c8b344807facd928a9994fe5bf3a1ef0ffb050e19e357c792c79380df44a869d2c540fc638f00299e6a5b929d8fe1bd0256b595d86e65902f44a933510ddc088ee7f448e56e027d07d204a9ecf25b97de8f21c4553c097169291f9c7c0e6bb4dae0ebbaebc0a41cf56064bccfa82fa22c45188a4469b8371664d370ada2afcfd418165288aab688a851cd686c7db2265de856e703220bdef4ddd7f0fee493d460ad421b9a04798ff9cf53c878f7783a6f089bc53c5dca6c6159dbc9ddfef2ec434182159c4d4ad7ad4de0458b799fd865198e69c2e8f5f75c175ecc751faf19ddb0f81a6d8dd9e02ebe3752f15bb90c6848990c4070bf5c76c80ffbc97e23553bb2893148ea907e567fc996493ff873d41c18d54a9ac431a3c026402ba9ea5af1839de11b87c46d7c91635759bd56c495f889cd57f41f6cdcf013bb80cf1d945a71f052c71992530eeea1678cd3eff40b2d118824f65f8a85f8528d96a9858a214701fc184dad88630eda6c6c18ddd7b4f4b8e43e33db6f07881133b22ab516b83c85c810037150c39adf752854371ee0e88198cb7876b533fc8fd4985d251f86a22bc101ae63c10686afb60b2a5f8ea75cd5a58df382b102524077998bf39807435ad426fcfe66bb3164d608e36c847843ec3af2cda75cadf640405936394d38b4053f17595fda3223c3904e006c975eb0db2f8aaf00b77995376709bf4cdd0a74f4ea73367b133acc74bbe5be7516566ce5529a5b9fbd807320e59f23f60c51bfae3c19efc135400b6121fe52cd80a39180aa5bd23e261e1b96f72e6f514c1961b806291eb1923dd46a2ecadd8471a05c60755d7184b2a9d9bcb126d859ec7f4f652972e288da142ae6be714888858536551bef7015304ff68fa9b11472a0ad05e11c633e6d69c9531abeb393d7b76d7dc25e3675a3a0957cde2083046cc5f6d5316706cde57e8748966cc6f3e4f3aea866710d1b1fccfa16132bb476ef3a7f9317b17622007821671f102fc92e1fed1fdd9f4ddf2414cb9ea20288b8a3309c8e9674d5b9465fbe6b6eacbe1b5c87259fab1851132854a80a24c274e1e4dd4490dc6524042f0a86cd6da06e71e9bbe5a64a21383da2dc6d068642aad89ac857d87281afd5234cfb70c8bc5f3f0c5b25d01971151fd72d5caed7d641ad7cab419bbbfe3835b25cd4457e8852d77bc984b26e0886d87b286a4dc023acee32c034399db96fedefeb32636005f12f4c2df88814afb447143c9a3a6b12585b938a1923177093a3ed81d1b35de96707d9189936c34900829b3a69dd1e9b8dd12832396dc09977c8c8b28f46d45b0462f867e3185d566d56587b66e9c63d064c8e164aa0a48eceba9372cbc4828f34925ea42f287745f5418107f0429ac14ad4dfe65c62e7eda2cf3ff7bfab03da56bfc784291e2751ed4c6e8a4c4e3ff6f9e32ae3395150acb6c4e42edb57b03ffcd4608c3a1a465a58b6b5215cd744f72c5219e10f307a611e36a46e0dc1ec9f26075d130c4413754f4731d1333bb111e2887c450f2b1f30ca74ea1951203f15e6be34cb5c1ccb369d38fd2bf20bbc7837afb4863e899cd13f01fba5e4def9b5d221f4892d298c2814ffab706e53490f39e72badeda6b43e9f858c6447fb6c697515ec472b99cd7342d1d9fbad68ba7c58b853f28a514cfc67c214d90ec3fbd9790252c89ea9d32e0afc8b628c4bf80b335e5f67b75831d038f6306c965d9847759ed2034cafbc840ed3ead3795b6e4393b742fbaa1044ea8452bb5a6b1af15e65229c3d541ec11e53566fd5648dcb86deb375ce595a852e2fd2caf5c2e2ab06faeee6c99bafc26db7c681ee44fe7374a6dc1ee01f41dbbc8c692ed6987be764b05a720700dcdfc840424b6ffcafd46547d947f99192c8f92e95a6f04ca1d86f3d4f1fa1d4aa436053e2c9922375e2b407cb9b896c2881ef4abc3373f95fbc2afa116b9a2c78aad51ee1de68bc7b21a48e7cea5c619fab2bfd484c96e1270f983e4632518df717d95e76b2d9031fd1ae06e1b12de2d78805b8f53ebe411be10d53c471d8a4e859c3d4d2fa7f26def7a8b7abc287022c63431bfad7bdd5fc51e92a8f7c47ffdc07e6175d22ca97017fe0a31928eb3654105037ec65cc96c744d55b7cdfdc227d69556d2f8d152779b67f3f8d54c59b14b838e72c08ff1c38d8dff9c72b58d6b6a0e284785e31df991fb15378f5317a303e91184b495da2d78db806f5703e189687c0fe1d712f19234d32499040ce69f8ca82878049fb1b007a2b151f6d6107b8e4b6359d1ff33e8ca8d242583258f33546fa254811a4f9d3b5df987857c593a282eaa5ffed904b4e46d87d04026adaa6e9c90bb34fec2a991a57abeb8fe"}, {@device_b, @broadcast, 0xa7, "33f197fd29248f220ba8b418c9d37d24e489014094235c86c3bbd1d4aae1e253ea62120ba0d8428bd084ab05241c998c5c088ef5e2084d9cabc24efa08e447842b76b46012f0b9bc0562d69feb41aa77ba3c17ac6036ae5068f50448503d7632211e8032541439d8daf6f5a3d6f69d12781f89be923432f818255e37f7e42b335629e954b14441c2e493ed2b10886e9d8b4d4f48f67d08550258c31d126c44d65032ec2a9011b2"}, {@broadcast, @device_a, 0xa5, "e6d711c23b967ec4a1a81a254e5cd94ed3b172dd8f755ae88e69758ee9addb6cb8ce714890082e2e5d98393b12921cdf8c592fec0b72656a37d585cbba75877076f6f1f53c4d6761c32b30732ff0b1347aa6f2a1b57234c9c0f0e6220f3d52189696e43702a2f6621ab017631305c5ffbc00d9bc517eab399ec063d83f7b51945dc9d58e1722a2a8066287e4a189277390d16d87aa429356a7fc51346a518868f4bba41b08"}, {@broadcast, @device_b, 0xc, "749d202a7bb51068d692e3e8"}, {@device_b, @device_b, 0x7a, "161c6c7bd331c1d09806860c0391f165e97620f78143287333eb412012f7ad0cc0adb5409580fd2c15ebe1d107491acfd6e9baa913eaeb8feae370b8f7c060f5873ae7910b295f1770c39cacfb589fde6669e3f261387c7b2ee3bb0ce8f55f099b13fa9bb68b99573fe49e1e671e761b6812009e3b47d6c7f7b8"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a40)=0x14) connect$packet(r3, &(0x7f0000001a80)={0x11, 0x18, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = accept4$packet(r0, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b00)=0x14, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b40)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4e22, 0x7, 0x4e24, 0x4, 0x2, 0x180, 0x80, 0x2b, 0x0, 0xffffffffffffffff}, {0x8, 0x7ff, 0x5, 0x8, 0x3, 0x1, 0x0, 0x8000}, {0x71ec, 0x8, 0x1, 0x2}, 0x4, 0x6e6bbe, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0xff}, 0x2, @in6=@mcast2, 0x3506, 0x1, 0x2, 0x1f, 0xffffffc1, 0x100, 0x91bd}}, 0xe8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) getresuid(&(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200)=0x0) statx(r0, &(0x7f0000003240)='./file0\x00', 0x0, 0x4, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003380)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000003480)=0xe8) getresgid(&(0x7f00000034c0), &(0x7f0000003500)=0x0, &(0x7f0000003540)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003580)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000003680)=0xe8) r13 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0}, &(0x7f00000037c0)=0xc) fstat(r5, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r4, r0, 0x5, 0x3, 0x1}, 0x48) r18 = epoll_create(0xa770) r19 = openat$null(0xffffffffffffff9c, &(0x7f0000005d40), 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000005d80)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005e40)={{r0, 0xffffffffffffffff}, &(0x7f0000005dc0), &(0x7f0000005e00)=r0}, 0x20) sendmmsg$unix(r0, &(0x7f0000006500)=[{{&(0x7f0000001e80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000001f00)="122d029641d5b7e3d39ceae968e1e56abb0afe0d3ef66de0b815cd70", 0x1c}, {&(0x7f0000001f40)="73ea3ec4b639dddc240242169f7c481fb3cdb658f12a1f3c29ce94d0f8fe6b5fef8d25d7ae4e79c3fb96be37b84eec36b91875efea32b7f5053f87804dffc2ef", 0x40}, {&(0x7f0000001f80)="875f562127bbd5453e756dbfd64328cf04886d9b0e283421dc846650e12fb4953fab7b1a05282ce78f894a060f92c3dbbb3dfc2cb58f38ba1ebe2ecd61ce93f14a3d597bf420bbd9f60552d8c40d0969611d7c78892773bce16c5926574664542db6824a0ccfe8f4bc43ceb54e3e15d3e803f0bc81313e51834469b5891805a5114aa235877d7faaf2f89fdc0a3c733056b0ba306d3e138bc413019a2f0a607514ec293fb7054ce25f495f9f56d42a581d32821b311eb91e2ecc0648315343724b5ee6d42e9cfa46bcd0b518cd6b05ebf2", 0xd1}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="04aa14d951e13de7b7ee8ce43af11819a49360d74ad153c3ab668982b612e744aef4c06b911bebc12bf6c0f61cb62d2d3fdd005ad75c29db63866b8c0095e7c7745287abf8f305b4a018fb53744be6152d", 0x51}], 0x5, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r0, r9, r5, r0, r3, r5]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r12, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r1, r15, r16}}}], 0x100, 0x8000}}, {{&(0x7f0000003980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="1c31116a575b4457461e2e98c754237b4dd14262972e3dfcbdf1d3332fe20d490dbb295fd114a17cf90d270753d8e3b7494b730321d268d46559d0abd0855a0c0107c429486a452c3e01a3a73be0c91303fa26258f2ae00d88543736d8237adfb316082a5d707f3c2e9dfbb8a375f6f8f966ebef8084a5d762aa3511e2413f53513fa3c26f4ddbebb845da31d33dc02ef445d939374f880ca378ab0fa49a9ba839e3d0285e09435d311ab415b1b08193411e99a5a601a22e6bd7475547", 0xbd}, {&(0x7f0000004ac0)="8af16b8d825d7361", 0x8}, {&(0x7f0000004b00)="7e2f12b818b60fbef307b2cfc942f5ac57a15baf961e2906de07a97141b9d5c0cea857623d7f423b37043c0516171312946a615d3cd20aa8d2b4a2c7ecb679e9a33fc1c041ecff5de8b77304a44d19a277846670cbc765f0e40e398cde9a0c7ec0e1f6bf20dc94bf190bbca5607e94de5635dd60a133e01f93529596936936f7bb0d6a7f3cd00d4b2425c3d869d6cf1183bf7b3d3368ed34485fcc9577f00a01767d33e47d838f81c8db2270e539157d21bf3cfacd0985077bc83b6b", 0xbc}, {&(0x7f0000004bc0)="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", 0x1000}, {&(0x7f0000005bc0)="960889595976a3b6533a2c4cc82e9c1090bba0653e076174ec318972d09443a09d08ed4ede64187398ab2df9f92aced46fce025ca11ec5cb51a4b05730441d9b9aa4a546d4fc42aa7fba8cf8b928ef79248e2816ea98b02936962b64334678bbbad2b72f0349", 0x66}], 0x6, &(0x7f0000006080)=[@rights={{0x34, 0x1, 0x1, [r17, r3, r3, r3, r5, r3, r18, r3, r19]}}, @rights={{0x24, 0x1, 0x1, [r0, r5, r5, r20, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r3]}}, @rights={{0x30, 0x1, 0x1, [r21, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0xf0, 0x40084}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006180)="28b9aed0534aba098ac094ce9f0bf1dc2f541d705dff3e606adb67fd5ed026d9d6a5634a7b92e19a4abb41c1581215a3bbc269ce94ab21c8c672458a3b02", 0x3e}, {&(0x7f00000061c0)="abf42d71c7151002d12ec7a1f1f646446706e6fcd6fc870af04b77a515ba01d0f963b795efcab6f5d54f515df83e3ca8f7b098f3248e1d91ff1b129c8336235df9e213f7c65dfc9835e287b520d526636c17ed674c13c2b95f9c02c67ebb6a38de9a31c94193df42675910815b6abc9597867b8f3e42a2ed9b5e15c89a0b42a9dd5ed2dc00680f02326e4784831f25afd28f3f36fcd39f564f846f51e1cfd70c46b33d2cc95059c571e0cc23ed41176ea51845b3191d43", 0xb7}, {&(0x7f0000006280)="949865d4e201a64454d9d37ec919ea98b9d414613b774d00ae78e7ed70e00c2195f9123d0d853224eafdd9cd46cfb7c09e9b1599f56592740bb6e4a0e83f7c7c59d48c7da195541809af331336681f9c03347f32991b8762102215d3719d1c4d50ed1c301f37", 0x66}], 0x3, &(0x7f00000064c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40800}}], 0x3, 0x8000) 23:40:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 116.987409][ T30] audit: type=1400 audit(1712446840.395:296): avc: denied { connect } for pid=3730 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.007435][ T30] audit: type=1400 audit(1712446840.395:297): avc: denied { create } for pid=3730 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 23:40:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:40:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) [ 117.027554][ T30] audit: type=1400 audit(1712446840.395:298): avc: denied { getopt } for pid=3730 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.076813][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x1 [ 117.084409][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.091827][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.099062][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.106402][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 117.111461][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.118692][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.126056][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.133399][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.140631][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.148185][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.155821][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.163157][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.170408][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.177881][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.185249][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.192699][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.199937][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.207463][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.214905][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.222285][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.229513][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.236861][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 117.247857][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.255132][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 117.266205][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.273522][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.280752][ T374] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.289729][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.297042][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.304978][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.312609][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.320022][ T374] usb 1-1: config 0 descriptor?? [ 117.325030][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.332377][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.339625][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.346953][ T3714] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.353891][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.361123][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 117.368918][ T374] hub 1-1:0.0: USB hub found [ 117.373471][ T302] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 23:40:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000980)='jbd2_handle_stats\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800009680ffffff0000efffff03000085000000c400000000000000000000000000000000000000607daf64"], &(0x7f0000000300)='GPL\x00', 0x29a2853c, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000380)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x5, 0x7fff}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r1, r1], &(0x7f0000000500)=[{0x1, 0x4, 0xf, 0x5}, {0x5, 0x5, 0x5, 0x9}, {0x3, 0x5, 0x0, 0x6}, {0x2, 0x4, 0x2, 0xc}, {0x7f, 0x3, 0x2, 0xa}, {0x3, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x9}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0x4}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='jbd2_handle_stats\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) 23:40:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 117.382253][ T302] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz0 23:40:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r1, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 117.454910][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x1 [ 117.462221][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.469470][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.476968][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.484252][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.491788][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.498986][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.506224][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.513440][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.520596][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.527965][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.535139][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.542365][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 23:40:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x404}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4b47, &(0x7f0000000080)={0x0, r1}) [ 117.549518][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.556949][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.564132][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.573901][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.581253][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.581795][ T374] hub 1-1:0.0: 2 ports detected [ 117.588467][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.601365][ T1480] usb 4-1: string descriptor 0 read error: -22 [ 117.601364][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.614644][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.622128][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.629336][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.636800][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.644185][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 23:40:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) [ 117.651718][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.658936][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.667840][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.675876][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.683291][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.690510][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.697986][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.705384][ T555] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 117.713478][ T555] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 117.811749][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.818605][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.826063][ T3752] device bridge_slave_0 entered promiscuous mode [ 117.833472][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.845223][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.852494][ T3752] device bridge_slave_1 entered promiscuous mode [ 117.862459][ T1480] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.006D/input/input41 [ 117.875169][ T30] audit: type=1400 audit(1712446841.285:299): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=948 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.899072][ T1480] uclogic 0003:256C:006D.006D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 117.904462][ T30] audit: type=1400 audit(1712446841.285:300): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=948 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.941642][ T30] audit: type=1400 audit(1712446841.355:301): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=948 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.994655][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.001553][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.008593][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.015423][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.036426][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.043887][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.051056][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.062198][ T1353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.063820][ T1480] usb 4-1: USB disconnect, device number 43 [ 118.070591][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.083996][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.103503][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.112113][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.120045][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.126898][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.134479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.142307][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.153092][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.161778][ T3752] device veth0_vlan entered promiscuous mode [ 118.167892][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.178591][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.192599][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.201049][ T3752] device veth1_macvtap entered promiscuous mode [ 118.210614][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.222452][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.391782][ T10] device bridge_slave_1 left promiscuous mode [ 118.397768][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.405103][ T10] device bridge_slave_0 left promiscuous mode [ 118.411053][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.418870][ T10] device veth1_macvtap left promiscuous mode [ 118.424861][ T10] device veth0_vlan left promiscuous mode [ 119.291680][ T374] usb 1-1: USB disconnect, device number 27 [ 119.311284][ T1480] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 119.318065][ T1480] usb 1-1-port2: attempt power cycle 23:41:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:41:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {0x0, 0x4}]}}) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) creat(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="a0000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x6c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb00, r6}}, 0x24}}, 0x0) 23:41:08 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002a20640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mknodat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) fchownat(r2, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = dup3(r5, r3, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x44844) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) 23:41:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) [ 145.088624][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.106692][ T3787] HTB: quantum of class 8005000F is big. Consider r2q change. [ 145.116721][ T3786] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.118592][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000fc0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDFONTOP_GET(r3, 0x2, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:41:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r1, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 145.135617][ T3792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3792 comm=syz-executor.3 [ 145.187854][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x1 [ 145.196140][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.206594][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.213928][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.221158][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.228447][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.236067][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.243432][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.250785][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.258064][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.265259][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.272476][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.279642][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.286862][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.294054][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.301663][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.308854][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.316115][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.323281][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.330464][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.337717][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.344938][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.352115][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.359281][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.366514][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.373715][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.380893][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.388225][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.395420][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.402618][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.409816][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.417037][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 145.424222][ T1480] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 23:41:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f00005a3000/0x3000)=nil, 0x3000, 0x1800001, 0x28011, r2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000007f2511eb71b1875595edec9b600000b7030000ffff840000000c000000b700000000000000950000aea54974624c59fcfa981519d6d9000000000000000065d3a04ce72867c60300c90c4c8142502e4a1e816a3778771713a708d71525e69846d90424f24f6d7bf3c7fb8f92d8fea91876fe3282ef7d60e98ce2e08db018f86de7338cfc92d339bd5bc2a3e86fc2a5625ef229c457fdbd7b2f908a560a061928d45d50280d209f324db5f955f1942c4d85b2b6a0c43a5bc5c3640fadd7a189a0b4f5d15d81e7251b52087c4449e04f5ac327be62a7266d7dca482a0c38b6636a0d848333c35b543fa033a9832d579720f2f174e2370047d63e316d37c0c0bb2b8262d4c06245bf425cfb15"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x48, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0010070000000006000000614d1c0034006800e4ff2f9078ac1414bb00000000440cfad3ffffffff0000000801019404000000830b390a0101766a19d3000000"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x98, 0x6, 0x5d, @loopback, @local, 0x10, 0x10, 0x0, 0x80}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0xc0, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r12 = dup(r1) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 23:41:08 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 23:41:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10040600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:41:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) [ 145.431900][ T1480] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.477591][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.489619][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.497280][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.504719][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.505821][ T3809] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.512206][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 23:41:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 145.533196][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.543879][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.552696][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.560710][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.568452][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.576730][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.584215][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.591868][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.599425][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.606961][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.614480][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.621953][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 23:41:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000000)=""/149, 0x95) lseek(r3, 0x7ff, 0x1) getdents64(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r3, &(0x7f0000000000)=""/149, 0x95) (async) lseek(r3, 0x7ff, 0x1) (async) getdents64(r3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}]}}, 0x0, 0x26}, 0x20) (async) [ 145.629219][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.636674][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.644216][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.651516][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.659380][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.667128][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.674717][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.682772][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.690035][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.697232][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.704467][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.711657][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.718789][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.726074][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.733371][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.740529][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.747741][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.754972][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.762197][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.769317][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.776614][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 23:41:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r1, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:09 executing program 3: syz_usb_connect$uac1(0x0, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xe4, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x5]}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x6, 0x1, [0x7], 0x1f}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "dadbc3061a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x54, 0x2, 0x3, 0x1, "1651fc", "4c8e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x0, 0x80, {0x7}}}}}}}]}}, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb323, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x2d, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x6a9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x0, 0x3f}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x6, 0x4, 0x10, 0x40}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4a, &(0x7f0000000280)=@string={0x4a, 0x3, "78d2432c46fd1b21079999e0c32a0cda8b2b9ef30084f3221347c6f01555179c7090eeeb1c6f14b3018fe34316d319358daa599f1e02d7e08eff540ad7a75509195e1477e82e347f"}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xffff) read(r2, &(0x7f0000000100)=""/176, 0xb0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f5fccc0d783b987b037c9f4cedcd9b4abe837b"}) socket(0x17, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000380)={0x20, 0x2, 0x10, {0x10, 0xd, "821d8f20e48edbecc1562711136a"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f0000000400)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x9, "fc7d0f11"}, @local=@item_012={0x1, 0x2, 0x5, "1e"}, @local, @global=@item_4={0x3, 0x1, 0x7, "82f9300b"}, @local=@item_012={0x1, 0x2, 0x2, "b1"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x20, 0x64, 0x1, {0x22, 0x36}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0x31, 0xc0, "72c148b8126780db0a522a67b71bad88f7dfb8519ef8bced8afa6262c03c1dd802a25ec184656fa6c0894347a028677aef669a53493791631a2797913b41bd2dc8b4f9b2f2f7842885303c46bd8a03b21b558dce831ade113067bbfb9421dabaa66bcd5dc3eea9141c4414682a971ef0047b9f9df0b914db10d0975957acb73752a797e174d9a8bdc3d05dd28985e184e1b3371466a94df5f37f1b4eb6e54ca8847b85031cca175785b9554a0792f351db15694bb0a7ccd90c97f906b62be6b5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000640)={0x20, 0x1, 0xa4, "8c1e4b402639bd4328e6cefdfd4966b962d426756ab313dac534d50cb1c2b0d9cd5b465951df23dfd260d6ff52e2fecd7847ed98c7a2626e4c9b18539ee98e0173cedd1e221734a4c4176812225f021975da605e80d120574812a24b1119a3f65e409e5863f9c7d387e17aa95ca37de6e8ab4de6e4ca3ef5565a6e1de21011654f61fbdf9f300bbeef9b3b78cb37f02ee86bf98d95d27b63c5c8b4634d11114786ab02f8"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x7}}) 23:41:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file2\x00', 0x14552, &(0x7f0000000000)=ANY=[], 0x3, 0x1224, &(0x7f0000000100)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x40c) [ 145.783907][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.791212][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.798417][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.805698][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.812900][ T555] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 145.824582][ T555] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 145.855796][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x1 [ 145.870585][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.881623][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.888851][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 23:41:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) [ 145.904113][ T3822] loop1: detected capacity change from 0 to 8192 [ 145.911351][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.918575][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.926137][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.933571][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.941147][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.948852][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.956272][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.963724][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.971056][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.987498][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 145.992661][ T3840] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:41:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) [ 145.995140][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.011381][ T3822] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.012019][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.028961][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.037849][ T3822] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 146.046083][ T3822] FAT-fs (loop1): Filesystem has been set read-only 23:41:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000d80)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r2, r5) [ 146.056709][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.067573][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.078007][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.085551][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.093044][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.100252][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.129052][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.131247][ T1480] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 146.136571][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.151052][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.158557][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.167457][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 23:41:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x7, 0x0, '9p\a\n\x11b\x06'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x5, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) [ 146.175959][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.185400][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.193851][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.201090][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.208523][ T555] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 146.218558][ T555] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") 23:41:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) [ 146.306516][ T3857] loop2: detected capacity change from 0 to 1024 23:41:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1807000000000004000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0xbd08, 0xfffff21e, 0x0, 0x808, r3, 0xfff, '\x00', r8, r6, 0x4, 0x5, 0x3}, 0x48) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r7, 0x0) r9 = dup(r1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 146.365976][ T3857] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 146.376512][ T3863] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.377480][ T3857] EXT4-fs (loop2): write access will be enabled during recovery [ 146.400071][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.403490][ T3857] JBD2: no valid journal superblock found [ 146.411498][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.416255][ T3857] EXT4-fs (loop2): error loading journal [ 146.421783][ T3858] device bridge_slave_0 entered promiscuous mode [ 146.432029][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.438956][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.446215][ T3858] device bridge_slave_1 entered promiscuous mode 23:41:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r2, 0xfffffffffffffffe, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) [ 146.501299][ T1480] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.540124][ T1480] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 23:41:10 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x40087602, 0x0) 23:41:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 146.548012][ T3858] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.555704][ T3858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.562827][ T3858] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.569665][ T3858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.603205][ T555] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.610515][ T555] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.618395][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.625751][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.643705][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 23:41:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 146.651762][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.658607][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.666644][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.676893][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.683780][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state 23:41:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00ffff", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) close(r7) (async) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r7, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = fcntl$dupfd(r7, 0x0, r9) write$tun(r10, &(0x7f00000005c0)=ANY=[], 0xfdef) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000024000b0e0000c0204b267c3d832a50c0", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001008f6574656d00080040000200000000000000000000100000000000001c000580a99bf9fee0ffffff"], 0x70}}, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x0, r6}, 0x14) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="6abeefe7e55c2c6ebbb51bb547e07ee3b7db3d313b1d759177c6795db9854a5c61a66ed2b12e0b8336da57a6589e7e8a44b311ccbff68029e5eb4f94cdbe5cc408933648ffcaf16cdb76829ce9fa9a3ff25e8d7629ea5d278e6b6525ae7fb94f19299938fc61078b5ab37c1308dc89378a790836fe3ffff7848d9db091a31b846c3e5d17f1e4e45068a6c0cfb6c319f575d879d44f56245cbcd930c8054bc20d0c8f7d143eeabb76", 0xa8}], 0x1, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x30}}, {{&(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000480)="1d278bf0870c60496b02649450c7dde5c02c085870e83ed1c7c8fc3235d5b2d4752adcc63c370d5aff1b624db9c8748de9019875166cc2b79cf11970a91443b064a023aec50011b5de7415e3b341da798df8d8d224f478b62a4a9284af6c92da3a1c3b2dc276e9ea43bec2a6628a103009ba92d156b5b07ab0150342f5fd411a39d6225541ba4abaa09a0f46d3873c7f44e887fa44e454973fdf919ede39e8ad79a55ef4e86a06", 0xa7}, {&(0x7f0000000540)="a4741c020af0c22f6cef5f46fe4e06", 0xf}], 0x3, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x7, 0xe, "7b8f58c47ef81705c9bcf1bc"}, @rr={0x7, 0x27, 0x5f, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @local, @remote, @rand_addr=0x64010101, @broadcast, @loopback]}, @rr={0x7, 0x13, 0xe6, [@empty, @private=0xa010100, @multicast2, @remote]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x10, 0x0, [{0x1, 0x4, "cde4"}, {0x5, 0x6, "61d8287b"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xf8}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="e72ef68eeb0f51cde642c08d8177a1c157b1de091bbc8707a3bd3a6dc4002b171c2249c29ba09f810ba38ae3cfe7492f80dabb281713a08e9a3d88978f0cb7837a14f2a0a89b0404cf1c4cbeeceb1ca1c91e53a8a250c19987553221ab6903d506f7e7dc871abcc4a16fb771c3bc52241e20adfef30348", 0x77}, {&(0x7f0000000780)="bbe19b4ee6883fade18686439997fffe66b4b1fd88303f5a7062b698e830ee81dfdaa4df7f8209765c32f1074538247209b3a8d692fce3db29c6d2dcfb86e4c2c3d300b23d24dbf4d9e263a83c624751bfb6e38bc94dc9ca5f8679e11032f5cf81988b488b6f95e28884cfbb7c2872d0b6d837f99dd6a43a0fd7ed8fe76745e99ec2c7a28fcbc51e4734dff522d2a4c7b4bfb18a17959f731e7d9a4c58bdd04bd610545f5c62ed5f094ef25a8e4fcf9ff06f4277d5a041f9e886faa8fb9f9c6ef043ac44753231194fd195daca3d7fb4ad32acd3bc1b239dc2b8a1ba50e379e40000ffc764aa99a2f0789d1b06ece319d9e28d3e", 0xf4}, {&(0x7f0000000880)="4124aa527105ff82631519fbd3ed5cdfb1f203b4a37ef93eed36b0dedd69205f62022240d1fd3a320e453a3bee7dcc18c655b4460b30270f7f1fbd148d8cf828686a459cf809be48c8e726b5b3c7542b4fcb880cd12a01efcbd879c47e9cc184ffa288c501011ea994cc4f0ea709c164cf941c77359d83945a4cdf24d439415a1e8fcc02de9f236c9f492b528bf65ac5c28e7edc16acb5a9658af196adb43c560c73d14398a09ba7b367458e7b406052b444e1ce3608e837c66b157af23efe78d4446a1b59f739fa2b6cd5f44137cc97fc994a5e2324141a823d6ef15f86843459c9b2a49ee1c54879a0b6a1244ba44a19", 0xf1}, {&(0x7f0000001a40)="f388372539718277a188bc5b78ac0c342522a9aa1d869ee3b95560603b04c04bf2f211a20c47e50144036d379ada091654321936c684c6bd9660e3345203abbe45d5cc567ecc3226588f46eb6b6ff80408a4b77d42a1cb27176392ef1044f25f59bcab2e003aaae308d8e575d84ebe8c55fa14f6aaac74c7ab07db6e668529cb5e98001d10487e4d97d7491cd4314ab460658c047334f0bea35643b8b75181d34817c3967653f202e587da36ee89615ad89d91786c388aa3d3d2903030efd77980fbe8ec676a4a", 0xc7}], 0x4, &(0x7f0000001b40)}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="d3e00058132597826a09b003a4ce9218db07a6d386d9458a6afeb9440410802b4ca27c8ea9a8c671868cfd395241b9b9ea186997c6fa20b15883fc4ac6e1d403761c64c79e66c274f2499a8dc915b959965949c2ff6947918e7f9350f42976773487", 0x62}, {&(0x7f0000001c40)="e3e092b1cde4f8319979b28481f70aa5650e284eb1577fccf98a0229e9dce30d140bf488d056252e096b5555d414bb976464583f0e431a357ed065b79667dc03620a4e39012d5b8b5231cc663e7189c5fac998ca0e624a836cca63ef0f72897856e487750c2431497e4a9b7fac23fc", 0x6f}], 0x2, &(0x7f0000002140)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x54, 0x1, 0x7, [{@remote}]}, @lsrr={0x83, 0x23, 0x39, [@multicast2, @local, @broadcast, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}]}, @end, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x3, [{@broadcast, 0xb43}, {@remote, 0x81}]}, @generic={0x83, 0x6, "bc815816"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x607}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x27, [@broadcast, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0xc, 0x30, 0x0, 0x8, [0x3, 0x8520]}, @end, @timestamp={0x44, 0xc, 0x6e, 0x0, 0x0, [0x8be, 0x2]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ssrr={0x89, 0x2b, 0x5c, [@dev={0xac, 0x14, 0x14, 0xc}, @multicast2, @local, @remote, @local, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @multicast1]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0xb, 0x9e, [@multicast2, @private=0xa010102]}, @generic={0x89, 0x8, "ecc0077b5070"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @loopback}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x3, [0x80000000]}, @cipso={0x86, 0x4b, 0x2, [{0x0, 0x8, "46978cdf5c02"}, {0x2, 0x5, "3e8592"}, {0x2, 0xc, "5a3b12283c3c5366e00d"}, {0x0, 0x5, "3b6ae1"}, {0x2, 0x8, "2dbaf3098d76"}, {0x0, 0xf, "34f1264ec9799b56db59584cea"}, {0x1, 0x10, "60df815a283ce2d5d7a911aa52f9"}]}, @timestamp={0x44, 0x28, 0xe0, 0x0, 0xd, [0x0, 0x0, 0x80, 0x3f, 0x0, 0x5, 0xcf28, 0x40, 0x8001]}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0xa, [{@local, 0xffff}, {@multicast1, 0x85}]}, @end, @rr={0x7, 0x13, 0x5e, [@private=0xa010102, @multicast1, @remote, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xc6, 0x1, 0x0, [{@loopback, 0xf3a9}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3a}, {@private=0xa010102, 0x4e0}]}, @end]}}}], 0x220}}], 0x4, 0x10000080) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002040)=ANY=[@ANYBLOB="1800040000000000000040000000c61f52000065801b813f27f4b79ed89ce624f011194440db215e65a1a649f21b511c10bd6c42b43cd9f7d16fdbadf574ad436e8799805c0901e334fbfa17f235e8a6ec8a4812a18975382aad08764129414c337d02c7488004ffb3168e448e86566bd1002dfbff32c8664e6673a3c7eb90e39e", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) [ 146.697571][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.716675][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.721310][ T1480] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.730688][ T3858] device veth0_vlan entered promiscuous mode [ 146.736400][ T1480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.740729][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.748871][ T1480] usb 4-1: Product: syz [ 146.755383][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.765760][ T1480] usb 4-1: Manufacturer: syz [ 146.767985][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.770201][ T30] audit: type=1400 audit(1712446870.175:302): avc: denied { write } for pid=3878 comm="syz-executor.1" path="socket:[32354]" dev="sockfs" ino=32354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.777530][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.801470][ T1480] usb 4-1: SerialNumber: syz [ 146.813497][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.822958][ T30] audit: type=1400 audit(1712446870.215:303): avc: denied { connect } for pid=3878 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.824567][ T3881] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newpolicy={0xc4, 0x13, 0xe73214a1691bd8d9, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0xc}}]}, 0xc4}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000003a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='block_plug\x00', r8}, 0x10) r10 = openat$cgroup_ro(r9, &(0x7f00000003c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000006c0)='bpf_lsm_audit_rule_match\x00') r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x3ff, '\x00', r1, r11, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0x28, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x7030}, @call={0x85, 0x0, 0x0, 0x34}, @alu={0x7, 0x1, 0xb, 0xb, 0x0, 0x20, 0x4}, @generic={0x0, 0x5, 0x6, 0x9, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x7, 0x87, &(0x7f0000000580)=""/135, 0x41100, 0x1b, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x5, 0x2, 0x3ff}, 0x10, r13, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[r10, r14, r10, r11, r4], &(0x7f00000007c0)=[{0x5, 0x3, 0x8, 0xc}, {0x1, 0x4, 0xa, 0x7}, {0x3, 0x3, 0x5, 0x6}], 0x10, 0x401}, 0x90) write$cgroup_int(r11, &(0x7f0000000200), 0x43400) signalfd4(r4, &(0x7f0000000080), 0x8, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001300290a000000000000000006000000", @ANYRES32=r1, @ANYBLOB="000010000000000004001a80100002"], 0x34}}, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 23:41:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1807000000000004000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = dup3(r3, r2, 0x0) (async) finit_module(r3, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0xbd08, 0xfffff21e, 0x0, 0x808, r3, 0xfff, '\x00', r8, r6, 0x4, 0x5, 0x3}, 0x48) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r7, 0x0) (async) r9 = dup(r1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 146.855054][ T3858] device veth1_macvtap entered promiscuous mode [ 146.862076][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.874457][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 23:41:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:41:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r2, 0xfffffffffffffffe, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) [ 146.906682][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.944643][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x1 [ 146.952036][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 146.966109][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 146.974183][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 146.981900][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 146.989194][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 146.998631][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.006454][ T26] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 147.014255][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.021715][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.028995][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.036562][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.047635][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 23:41:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 147.057825][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.065548][ T3835] UDC core: couldn't find an available UDC or it's busy: -16 [ 147.065579][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.080249][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.087755][ T3835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.096232][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.104379][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.111815][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.119110][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.126885][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.134196][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.141560][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.148797][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.156289][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.157424][ T30] audit: type=1400 audit(1712446870.565:304): avc: denied { create } for pid=3832 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 147.163572][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.190247][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.197467][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 23:41:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 147.204668][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.211974][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.219170][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.227166][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.234517][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 147.241893][ T322] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 23:41:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[{0x78, 0x0, 0x0, "de9b1e3887fee9375c8f2607cc951a216c5636cdcb77dcddd17a4fcd1a71a0f2eff4ee6b2bb1fe314c5152c28e2acd13a99ddbd2392b15bbd42e413723cfee6cce7dfbda1e0c716209ea2eb6223f2102fd69e2badccfde69e49cc9108a46cceea1"}, {0x80, 0x0, 0x0, "123071c4eed9aeec4f923810f91bf2c903c072053c2dc4e159770e67c17fbc8970ca616a87e71101b9cccf699314e5e68f4092590554a50292dc2c8393192e2d31e7e9ff4580be3dcda715dec18befce75be81346c8556c5278b9aab1ae71012f554a0eec6e595e2e7"}, {0x50, 0x0, 0x0, "93440038ae9c2dfe6ed4af6e771b78bc64a2e4ffdc2f151ce2f674ff6b378813edc2a1ecf0a82fbb12a256e2e2d6473669f3415b7b29c98674"}, {0x1010, 0x0, 0x0, "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"}, {0xeb0, 0x0, 0x0, "244810037d88058dbd40e5d3109ac5308b026bc814b867a8f0d8cdabd831bbc66f5e5150e77f17e9653ffe435cd44303fb6dcec316d98932064c6cd69dce97e95771bc4334f4892ea4ed0fb5397dcdd78b44e82344f923378821a6c6cd0c2c8558cc14ab9d3a41323a21ea445dc31e7e480c0dd7d316db6f3a60118032f55f1ac4df92caf4b7560f477fdc46b49a67bd111d1289e58927700087f583026293a1d085ba3b6bb53b54810ef5017987d98cec5cbd21b2f03ce3e52eebcbfcce9e425ba91dd60e51b9ce056a703263f426e6922b364c95029f0def9e805969033b02194133c94e578904c63ea5c759676e16796ac89a8826c582729cde424e60e39a0305d05f688974a67aa665827e635345048f3b5fe315137dc9be3469cee968ba04b9597f296622296a83000e0106b13e89a6201815fbdc67dbc5e1ed5887ea9f7dc4d2168469d8b3082721bac79d42fea740b595b56e413e62644e7325ab78ec2c0318c3b9072ff77b02d3c848935c7839939a75300022eacfa94d67c8ec6cbe05bd6b661f48191db160433a3d00428e4d0a4e2b62b94ba47404b264b4222db88150f2745d8a11489385ed0de26472049d11e1fa3edc13d774e8f842e75aeb311e11661bcccad21f1be875715ef47bc6feee0de142cbfb16892aca3bb7db3a57219987dd645cbc56472595b0e4379e2dee925ba08480408235e01d12a9ccd5b49290dab835971916c838240c8bac2166b5b04b80b4e7f0b1606a86a7b44a6b16c8b04dddcb60597d6f0c7749fbc8699d85314c4b04b18670912b35375ba11cfa29e18a458091927c78df59607952d9edb1cb93d1f0fd7cb4dcd475e32d3b466646b743321ebbfcfe7e48375e0debdb03ee97cb2c7b21b01fcf48aeacfa0459ccd68be382f547e98729ceedaa3c0bf0672bd481823fa97a20691d37e108d5e999ff094d8220ece8f09284baece181fab9fd6973376d81c19969394cbb190eeacbd0b2bc7e347f0f4ef95e2d560505d8333d2be93a32a73a0d802d68a866be0e3fa590b8029898db429665717fd51f994c7434236d668cccbcde3da9981378d96eb2a8cdc756c0d5c1902be1979a8258c21150b28ca9727aff45b40421db29ee7c10d2875ad16db5f61cd19cea9cdb31fe42fefde2df6b6e491cf065e14c37cb83deb9fa9aa38db54caf37f38e9ec9b79665f27b136b451404195721a7c05cedddf3822afb5a65a3f65b4157f44780814bf6811727483239c5bcb3b1064875a6e0bd4717f4939d4a1aa2d057afb2ab42e272f6a4f97ed1afc54c0bbb463126aa6e2cfeea05eb175c83478ad7ff7f4ad391d9b49f03f1612b4a55e1f7e097596d27bc152c2c3e9c783d9c3d02954e7687235e6b28ec7e5769dff747c6f54372c4def1a89108834bc4eb6dc467a6a9a84c5b49f3bc1bbbe43d4f4749ca25a203d71a9c67a880f778d46042cc4a8cfc857c768094a20ca3699849a9896dc9f185b477d3786b7e577b9296e8ba25631556efec6a1db3c926cc843f20e60d54c6d6325397c9db613f9bc2b56fb1a04918ea64b915395a7e1ae40feb2ccc4a9c5b737e49263faab1aa855bdd3c3d64ac53e1c2a28e3e03dee24a170460e1e90c3fb3964afc445fe287a2afa8d233fcaccfb2132b1109931ca6190edc46d807b250cfa66bc4fd3b248b104e28a4a66b35980b145c39bfcfda0367cc3858bd6e043ac6b119491de6bdbeed5faa928c4005cc725d5bbe8842a74defbc47864ae9fc99a8425daf42ed1d3468de93ade4f2020134daf0b2732bd0b1fe6b2d09a5a5707b93424b649776dd07a3d5cfd40135aca79dbcd584109e1602b8123e9a8f87639ae6504d293c13d78bb3b891a8d6e073cecab9f1a2bcb29d25918813c350638b212396957d23204c62010f1aa59266e3735f23a787ba3642ee0b58a0f3194ab3c2f1591762e300b03ff0a5a0160e63e41fb4358f9ad8cc53242585a091415f40d6425ed2751599d54c984033d5fdcc85e770b1d948fa263e4ef5ebcb99371548e39a35f1e50ca437a95b65bd133966a67b08650b5e4010a7699f146780c64d2b9185e807df64bb2a3fa75e277ab0b1b585bc11a89b60442feff8b31c5d4493887b72531ba3d67dd645980a5f18ddf99ca7dc8bb554533c6befe42e2b9e692b2429aba306ee9d7816e80d81b3b8e0a424ba4e241cff039a683f33ee2ab0cbe2cc0614c479ebb03cddb27af6ae7c9c24d6da210aafb85129922ef592afd96ecc24e592a8aa9a34c535e9e97df6d72af70c336d7ee0893a3edb319f5056636fb709e64b7abf0e303b2ebac26c9a6c3da547383e68d9ab05efa41ad73a4f2984d75569d32b0908055723cfb6bb6d5bb6a47496c62fc8f029dfbfa2d1d7611ae351925c1ac349a2245c65d910ab5a7d39812d3248534a2b3f8bbf1bb947928a5ed5c219fa528c4b08f2bb2dc57d51a4e472a10d54287646e2439e7556acbe0963bcf0681c060eecfa43cbd19fa0855059f0623a8e9e642436f223ef53745037208f4a6c4d4850b39077c77c3d0cd2d2099ec32f3d08ddc5bd777c7eb545da7026e5dfea6c686e39e6c159559fdd80b7f0d1ae3f637083012e588acc6ec27cf86698be7e1d7fb9f1a66f5dfb0d883f94cb71cd58bf825b1ec50576345417869b7d9b73a075b9e3770018467f066f2558991c5ea6a320fecfad463de6cc010629f3a1402e898b9116bfdc7b57d369e22609f8a51f23c5cec6bba27cb558c97fbebe41c6982d5badeb107542c0b1ec7df380c6c4f27fc24b04d9674a7131b09e74c8ec431f8c5fb52e2cf0caafc0595ea0ee42f4774f8aec65175c16e1b2660e93042448e36b279d8cdfb79036b68a81bcd5e9a46119f54f08133891c0bc6b3abd65a1d4fc707f8471c96d9c7f551088899ec60b52d159a690c338e16790a48d981f3530491745e84280e8b723dcdcc08a22db6b9bfc1403cf7d15b05109bb3ac44a794c21927e14597e049d22d7cdda59f202409a0ad2d30d2d125e41293927a8bfef9b79fcc670f896dcee83b508cf6740a155c2c591b9e7126857796e311ff03a6522736a1d0bae0c8af9b8dd7b7da24eca7b61383844e33f510a70ea824251f22ede38c7ce5f038bf18b66334fa0aab5cb7533170ee5e82aeca7e1110750edab89ac0f6c3fd17b3f07220dddcc1ddb190f258287650bba1dd00ba1e91083e37743acc8a25992f1bc3b2ccc9d20c1c53779bb0e133418c76c9f59620e18a4650d6845be25629874647812a16b17e8733f93d41c4fbaaac3fc888956c6e79be65f60e005a55ea4af837f65a7e4e249710bc04384728d8cca851e5d0ecf9ae62447134387a20a00fe1248e74ff28f0c93b5acb4dac0f7a34b4ca2f3f0972805fae83c6e8ee35a856485f48e9b4efb0b3046831fd881d98b2e70135aa3c99078f64c1f8cc22a33cba0a86bbef656eee910c1e8a485e4ee1e3a069757677a5974e33b0c4898e1f22aea529d4c18f929170ec2bf869ebb22ec25080125e07dbaea1d45296cebedfa85e500706cae51365fe9090a3050306a0e7ec17deeef0ee4f6107c593daf0d197cca979828de0acb368ddb1d62cf8d711f4d9439f084961cde8006fd11e96ac020293cae5f0b4e8b0b242bd25ac480706671dcaeea44520a8bb16883b3607c05e9d7b4c6374ab02488892953d72f8f91c3bc0b9960180df2754d9654a4afac0f1a6c82165514985156bc0deb745d7df1131336a409a3ba2c4c71358aa9245944686cb8e921490120b2a3c1f38f40e789eb499c665c1f40dc942a6677cd361e691b0c17273736808a1a9bd1b8ba89d72e0248b658bcc7b291b3348a0d0a3704f8479d3ea4ba2e3555b266e67ba7536bb5ff57fcb1df765121d2d7fe5d3882642c1b8302f685dae84d212abf9beb317da6e1974e58eadadf7027994f2b7e9a6d3c191b08bb36cb6a8c8744daf8bb76e851fdbb1ca20912614d1d2bbbba562a9eec74aa3f209f23d336c6944c7c3129f74fa84a16e39071129f79b7aed8e1c70351eca679febbc8106fe5a5c186053bc687c006a8bf68215a330800cdd51c7a89228380f73765fd39cfb7adc75163b7e3c4d6860bdc78632c3cb7642453a999c01566778c494575bba39f8b050aa6f8df040764f5423fe8309c061103a1f9359e8c386ec8020d40018a4d9feba9fb3fc4aa34a12a743607d167ae61ae153f5d94d82c15909da8ae56be2569e13fe8ca2ea8439440329451573a4f9ba3550a8aaef019844c8a4d2e725c52195a1e36ba5cf05b8b965c9a4f6b61436e4a4c5d1564484689030c4f41c9c981e982f3b162888c7620b25f22b024de70c25123909c69123c505969ba033c785ce0e84258114d8a127cac64001cdebe540bbdb8671f247c35a9bb8292e1a7728882c2de28113112cfad2467edc9ad068062ffff3512544251579fd09e73ed90c1e31e30a5a9eba87017b9e8bcfb19184fbeabd93acd7803ed13346ae7c7ef3861e2367f172a0a27874225778d987f4755000fb86a23fec8dbbc2b2c8cef5adccded34c7854625b4660db9263065dbd189c762494408291a1b3377d8e3f38f58a84fde17b6b77f88cf592823bc4d2273bd4fa7ec63b9994063dba3305bf38a63420e9615fc7d617b967109dd108f3395f2149a3ab5eba8a98d0a0687b8902754552477fc72b3ce931ad985fd152605d634446790fce2bfd402d27dfd0cf78d2ab65ad02ab4c46c8e5805d745563ef877fc52696a380138df0b250f4f5b3e21c5bd3e680d1473323fe96affe914a6a8e9e4c506148301a55d7252cf0cd7ad4079964d4b2ed8685a335856344b5b5bba751e6452fe6ef9a9e3ffc10ab97c9e745b43965f53af37580b9032dfac9c3add02311d204e04f7c5dcfa6668ef0fba17461b7bf6ce0041e1409e0765ec168614f330aabecf837b944ee62215b9f30581555aab4ae3407c6e2654eaea259f3557473c6d2665229330e3b50c108c480ff6bc33d2b51e79acff0ffc077a2f36659982434616fb0a3ebc49ac32781ae1b28868347e4c0803b847238872a8197e88e923d948f5966ef3f3f3bda87e1c8c51b06ea0000000000000f3c317df056aea0d9619e3c333eeba5a036dfad86388df4566bd80b7c42fa138f87f42cb5becade00445693bdb48bb2076b29833a362731c73db348192c3cf10bb6d13ae7d4103c6b778899310f193e0ce1c4c0029f88a0765fcee7df4bdc99288898dcd190f2a027dc23bb2ccec31e7b9f81f615711175962e7acb9f82f138819c229b9a71fe3f998dc8f"}], 0x2008}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$inet(0x2, 0x3, 0x100) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {}, 0xe4}) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000600)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x7, 0x0, '9p\a\n\x11b\x06'}}]}, 0xb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000340)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x3, 0x0, '9p\x00'}]}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@loose}, {@mmap}], [{@fowner_lt={'fowner<', r12}}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@euid_lt={'euid<', r13}}]}}) 23:41:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af00, 0x0) 23:41:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) 23:41:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local, @main=@item_012={0x2, 0x0, 0xb, "22af"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local, @main=@item_012={0x2, 0x0, 0xb, "22af"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) [ 147.264594][ T322] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz0] on syz0 [ 147.281620][ T1480] usb 4-1: 0:2 : does not exist [ 147.295488][ T1480] usb 4-1: USB disconnect, device number 44 [ 147.401338][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.412183][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.422091][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.431505][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.440198][ T26] usb 3-1: config 0 descriptor?? [ 147.591238][ T374] usb 5-1: new high-speed USB device number 25 using dummy_hcd 23:41:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 23:41:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000019c0)='bpf_lsm_task_prctl\x00') syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x3, 0x23, {0x23, 0x1, "bc1ddfbe65364df8335104c40507f116fd0835a60e64dffa841d8cda2f0b9d9f43"}}, &(0x7f00000000c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "c9f54d9258e732d2a7227823ec042a604ef9d478f5cd2fb3263a65f467fac80bd9d2c9f8792bd1486c2625c8a9506156d5ca6a11ae8a8ed4d17e1b346f8c41ddff627b131f53a16b8113ecff85563d6b3bf5b7a49103d8b212a0a233ed1e27d99ca9d1728f2f2dc9cf65d7c1d9efca761131d5d0c1ce0c9b2585bec5ea80709ed96abd6e037146a620da5dec46e448a5f9b471bd576f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00220d0000002bd7da9c8a9a83010004e2"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb503, 0x6a, 0x1, {0x22, 0x3d8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x40, 0x2c, 0xf2, "e1a4b334cf8d5d1f52ea7e6a030068ffd8e94b836fd9765bc2ea33b16db683020468e6f7a897591143c6bbc96451f6f9eb7b893fe1fc2fd13c5d1c71c6436832fe30ad2f78febef121b110c946e353772bbb29eb0a9d418a28f1c93066063370f731b007086f202bfe29f347996d2e3b00055015d3beae914d4a76ea8cfb253850d498f94719d1c5063dd4c008e2f22a5ee90b3fb4afc2baa76f0fcb76aeb852a23309a6b55133c1b4d70e0e7583db7b45850e05559fdc46f1bd08f8ba2357b5ad030dccec44a00ecc2cf4a799f9d262c4817c516c8b3c859d01d5f3712c33a4198b985aa96cb6147d7a4123acfcc1fc452c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0xab, "fb3726ebc0ef10eb3907924f70e2820898b1579a1f03a193e7bd778fe67ca12837077a91cb1954a61553f1847b259d3db683fdab3185df113c3c04b0d601e52ad731aae7548c07678c0e307f779e92bc6e2cec96de7d5657ff09fd97e8187d32ac3fe912d2e8998cd1c4b484920ea002cf504b7683790644f2e9952cc6166dd3ad738df7aab2bcad9970be05f0f36704fad25e3c81cb8e1217a789015c1efba65532647d59121cfd45d936"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfc}}) 23:41:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) read(r1, &(0x7f0000000240)=""/136, 0x88) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200), 0x200000, 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000080)={{&(0x7f00008c4000/0x1000)=nil, 0x1000}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) [ 147.771904][ T30] audit: type=1400 audit(1712446871.185:305): avc: denied { read } for pid=3923 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 147.961350][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.972185][ T323] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 147.979616][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.989385][ T374] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 147.998459][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.008977][ T374] usb 5-1: config 0 descriptor?? 23:41:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 148.131294][ T26] usb 3-1: string descriptor 0 read error: -22 23:41:11 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xfffffffffffffff5, r1}, 0x10) [ 148.251265][ T323] usb 4-1: device descriptor read/64, error -71 [ 148.392198][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0073/input/input42 [ 148.404796][ T26] uclogic 0003:256C:006D.0073: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 23:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r0}, &(0x7f0000001200), &(0x7f0000001240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) dup3(r3, r2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r4, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a07}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = io_uring_setup(0x6479, &(0x7f00000001c0)) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000a80)=r8, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='ext4_discard_preallocations\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40485404, &(0x7f0000000040)=0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r11, 0x0) ftruncate(r11, 0x796c) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r12, 0x29, 0x1, 0x0, &(0x7f0000000080)) [ 148.592614][ T1353] usb 3-1: USB disconnect, device number 23 23:41:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 148.641361][ T323] usb 4-1: device descriptor read/64, error -71 23:41:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x7, 0x0, '9p\a\n\x11b\x06'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x6, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) 23:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) [ 148.692042][ T3911] UDC core: couldn't find an available UDC or it's busy: -16 [ 148.699351][ T3911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 23:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x7, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 23:41:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 23:41:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r2, 0xf13, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r0}, @val={0xc}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x7fffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7ff00000000bfa200000000000007020010f8ffffffb703000008000000b70000000000000085000000240400112937e778f0a17b7952b58524e2239b009584d9f7de1b3c03c90d51ac52d90312aead4660bc4c6daf4af5131a441b2278474af4a2fdbe32563118de34643c631379a150ed136b5cda9d077648a6a53699f1f2adfcc0bf4a189133c8a2e207d3167f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_mb_release_inode_pa\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, 0x0, 0x32600) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r11, 0x0) r12 = dup(r10) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) [ 148.911255][ T323] usb 4-1: new high-speed USB device number 46 using dummy_hcd 23:41:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r3 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes256, 0x0, '\x00', @d}) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file2\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000240)=""/113, 0x71) getdents64(r7, 0x0, 0x2000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000100)=r4) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) [ 148.971359][ T374] usbhid 5-1:0.0: can't add hid device: -71 [ 148.977334][ T374] usbhid: probe of 5-1:0.0 failed with error -71 [ 148.984404][ T374] usb 5-1: USB disconnect, device number 25 23:41:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) [ 149.039033][ T3957] overlayfs: unrecognized mount option "xino=luto" or missing value [ 149.040223][ T30] audit: type=1400 audit(1712446872.445:306): avc: denied { mount } for pid=3956 comm="syz-executor.1" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 149.074902][ T3957] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only 23:41:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000013a00000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x61, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) open(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008001d000000", 0x24) dup3(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000), 0x48) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) dup3(r4, r5, 0x0) dup2(r5, r6) sendmsg$nl_route_sched(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x8e0}}, 0x0) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzszzuVAkEQBdA32zu/bB2sBCSMAGIsYAMPyEAGAsiJMYCD5swZJsAAENybdFfVq6DCZ/2mKYeUZBqTnzK9DIe0SbZJ+rX1vzy11PNwS+775C9jrbWuK90z2SabdGmW72xMf7y01yU2l7vTe44EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO/2CAAA//80oA5a") 23:41:12 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xa326}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) [ 149.084901][ T30] audit: type=1400 audit(1712446872.495:307): avc: denied { mount } for pid=3956 comm="syz-executor.1" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 23:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r1, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:12 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x10fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 149.128449][ T30] audit: type=1400 audit(1712446872.535:308): avc: denied { unmount } for pid=3752 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.163928][ T30] audit: type=1400 audit(1712446872.535:309): avc: denied { unmount } for pid=3752 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 23:41:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000800000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_da_write_pages_extent\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xca, &(0x7f00000001c0)=""/202}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r6}, 0x10) write$cgroup_type(r7, &(0x7f0000000000), 0x9) [ 149.184053][ T323] usb 4-1: device descriptor read/64, error -71 [ 149.196418][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x1 [ 149.208150][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.215688][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.223183][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.230573][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.238169][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.245619][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.253324][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.260878][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.268345][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 23:41:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 149.283062][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.298711][ T3961] loop2: detected capacity change from 0 to 8192 [ 149.306278][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.314337][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.321658][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.328916][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.336390][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.343671][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.350843][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.358115][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.365405][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.372653][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.379933][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 23:41:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) close(r7) setresuid(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10906ce2, 0x0, 0x0, 0x0, 0x77f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x101, 0x7f}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0xc, 0x7}, {0x1, 0x4, 0x4, 0x9}, {0x1, 0x5, 0xb}], 0x10, 0x10000}, 0x90) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x0, @desc1}) write$P9_RVERSION(r2, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0xa, 0x8, '9P2000.u'}, 0x15) mkdirat(r12, &(0x7f00000001c0)='./file0\x00', 0x0) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 149.387144][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.394354][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.405724][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.413726][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.420991][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.428363][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 23:41:12 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@dev, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") 23:41:12 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000005c0), 0x18) futimesat(r5, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f7ffffffb704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) mkdirat(r5, &(0x7f0000000240)='./file1\x00', 0x16a) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'hsr0\x00', 0x1000}) mount$incfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 23:41:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 149.435699][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.443238][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.450527][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.458094][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.465488][ T1353] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 149.475672][ T1353] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x840300cd85a4c474, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7, {{0x31, 0x4, 0x1, 0x34, 0xc4, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x27, 0xc6, [@loopback, @local, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x27, 0x9e, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010100, @remote, @multicast2, @remote, @multicast2, @private=0xa010102]}, @lsrr={0x83, 0xf, 0x31, [@dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x5}]}, @rr={0x7, 0x23, 0x50, [@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @generic={0x94, 0x12, "bf1eebe680d84ea57a3cb5352137d731"}, @cipso={0x86, 0x1e, 0x0, [{0x6, 0x8, "0f5faf933af7"}, {0x1, 0x10, "b21463dc12161a3ea40e7759af70"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x21, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xb8, &(0x7f0000000300)=""/184, 0x41000, 0x35, '\x00', r3, 0x1a, r2, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x4, 0x9}, 0x10, r4, r0, 0x4, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0xf, 0x8}, {0x1, 0x1, 0x0, 0x8}, {0x5, 0x2, 0x4, 0x5}, {0x4, 0x4, 0xc, 0xc}], 0x10, 0x10000}, 0x90) 23:41:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) [ 149.523807][ T3980] loop4: detected capacity change from 0 to 1024 [ 149.535678][ T30] audit: type=1400 audit(1712446872.945:310): avc: denied { create } for pid=3981 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 149.561525][ T302] usb 1-1: new high-speed USB device number 32 using dummy_hcd 23:41:13 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1f, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x4a, 0x14, &(0x7f0000000200)="35f75625e5560b8fe276b3952018e11be9343395df4658250b383060e6bfbf559193ba2ac8b82cf833abd5b8f194e87fd84ebe7a0722d8f9d2d0b0d3de38a0cd173ee2b67a59d35ccb51", &(0x7f0000000000)=""/20, 0x2, 0x0, 0x9f, 0x63, &(0x7f0000000280)="63ea011b4674b78d7176caa8a513d963dd9b1b1aeb2fce6a00880e1e77a6dfec16f3bb4a2ace9b496d9e9784a05144212ccc830a491d12aea135a046a48cd3db4240b4b94064ba9b030b4dfa2e13ab9ddfc46b0263b5ff396c9ceabd8662f2ff697531ecd9d119cfb4fa1aba44f11b84921914841c65f9d27908320aa273576722471d5ee21061b38bb521027db1d28020e01840fb4302845e58886a906900", &(0x7f0000000340)="48b525131d2710d11d3b0490abe4f2662fdcc08c1051486e899fc4b76b14e9b3fb6644be5d8139aff80e0d7321d22260da4805193712f8df1658f8f6d67353b64c79361046397f33290ff14848581939a7ff5cf4195f2f76ceb5ea74033d2ec5dc0b0e", 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f00000004c0)=""/162, &(0x7f0000000580)=0xa2) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xca03, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x8e, 0x1, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x1ff, 0xd1, 0x1, {0x22, 0xa02}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x80}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0x7, 0x9, 0x40, 0xbf}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xa, 0x81}]}, 0x6, [{0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "6b359866906337ea78b1238dd233bd9efaaf69132607672cdfdf6b746f9e353f4454c2d2113146378f2b6eb1616748be47a8b41da423d6be115c881163a8828bbbf1c5adebe94076d957a62125f85cccb875f5e49fe1968d55604837156cdcf49a08ceb1a59a88d74cbfce8aaeddde3e3843524a2f4bbd4c4fcab61b8df2053a79dbf97a25b3911dd72a9ebc515de98e9f8aa94b1026e09e6867933da025559ef31409f95f41fb9f73623841fe131baa7794f1"}}, {0x27, &(0x7f0000000140)=@string={0x27, 0x3, "5da66a297d9a420e898394ab643c52852fbcdf6cd31bdedf3f5831ca5524b43aa32ba38215"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "08f3b435e06442efd789720b75c903be92c4a65b7ab98209c59e7cbc5a338b8c0fc819501119caf116f736acbbbec18f720c94a84e119220a4dcd023df1344cdc8f07d9e678ac567f7ac41faeebc5ed5a7006e9ec17583cc487854f5a28071142773c4f57c6c9b811c4d630d219cde86b591f3b908959644fa0a071358b47af36078ac972cad41f112c1fea4d9f0c3ed"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3406e6dae2cf72eb7bb1bbff7f5900224b4ccd63"], 0x0}, 0x0) [ 149.571298][ T323] usb 4-1: device descriptor read/64, error -71 23:41:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 149.602371][ T3980] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 149.610141][ T3980] EXT4-fs (loop4): write access will be enabled during recovery [ 149.617721][ T3980] JBD2: no valid journal superblock found [ 149.623483][ T3980] EXT4-fs (loop4): error loading journal [ 149.644017][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x1 [ 149.651344][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.658570][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.665993][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.673627][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.680842][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.688358][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.695763][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.701347][ T323] usb usb4-port1: attempt power cycle [ 149.703294][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.715433][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.723103][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.730302][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.737739][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.745116][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.752294][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.759489][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.766727][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.773899][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.781067][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.788409][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.795758][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.802949][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.810147][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.817506][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.824790][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.831965][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.839158][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.846378][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.853575][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.860754][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.868038][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.875277][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.882482][ T26] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 149.890071][ T26] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz0] on syz0 [ 149.921338][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.932133][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.941842][ T302] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.950666][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.961767][ T302] usb 1-1: config 0 descriptor?? [ 150.051241][ T26] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 150.111269][ T323] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 150.281294][ T323] usb 4-1: device descriptor read/8, error -71 [ 150.411335][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.422182][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.431986][ T26] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 150.440858][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.449284][ T26] usb 2-1: config 0 descriptor?? [ 150.581283][ T323] usb 4-1: device descriptor read/8, error -71 23:41:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) (async) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$tipc(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) close(r7) setresuid(0x0, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10906ce2, 0x0, 0x0, 0x0, 0x77f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x101, 0x7f}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0xc, 0x7}, {0x1, 0x4, 0x4, 0x9}, {0x1, 0x5, 0xb}], 0x10, 0x10000}, 0x90) (async, rerun: 32) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x0, @desc1}) (async, rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0xa, 0x8, '9P2000.u'}, 0x15) (async) mkdirat(r12, &(0x7f00000001c0)='./file0\x00', 0x0) dup(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:14 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000951ddf86cc868f36483fe1e866c274ea91249d0559d1cd18c1acd0884b61531c2aece4fe400bb43498d3935a4f1fbf0b2e51d49bd61924c4f8cf849756cdc6658f59ad9d3c4d9eb1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000840)='./mnt\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000e0812c04851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000040000000006a000000000000001800004000000000000000008000eb009500000000000000d50a0000000000009500000000000000211fd4b7aa7cabf035a035b8f758f1b09e3714a416cd02903cd62756ef249cc8e73d47f26fce4cb60ccec601c2c69fe67b34b30f3a762782e06a6ff687be2b19f6ef5ebe4a46b4e7b62cb65e62d583a1aab86a0fb1de5370311bff03c102dd3fd5a49ce59cf7fd0696a5be65ea5948"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) 23:41:14 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="00208d6f4bcccf", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) [ 150.671295][ T302] usb 1-1: string descriptor 0 read error: -22 [ 150.691715][ T3991] UDC core: couldn't find an available UDC or it's busy: -16 [ 150.698909][ T3991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 23:41:14 executing program 2: personality(0x60000a) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) 23:41:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x80}) 23:41:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 150.719252][ T4005] 9pnet: Insufficient options for proto=fd 23:41:14 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:41:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000dc0)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000080)="4e8fc38e71", 0x5}]) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ec0), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r7, 0x1, 0x0, 0x0, {0x2}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xba0}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x880) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r9 = dup2(r8, r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r10, 0x721, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2711, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f00000001c0)={0x80003}) 23:41:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xc, 0x0}}], 0x300, 0xc68, 0x0) 23:41:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000001ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) tkill(r1, 0x34) tkill(r1, 0x15) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x6}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x2, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='GPL\x00', 0x5, 0x96, &(0x7f0000000300)=""/150, 0x40f00, 0x22, '\x00', r6, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0x3c9}, 0x10, 0xffffffffffffffff, r2}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}]}]}, 0x7c}}, 0x0) [ 150.831843][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.832078][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.851606][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.861109][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.871089][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f1f10600000000e334bc5d000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008001a00", @ANYRES32=0x0, @ANYBLOB="00000000001011610c62434cb8b433a20a56ba2679e7078228212f92681a4d9e"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @private}, &(0x7f0000000380)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x20, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x1, 0x0, 0x5185925d2ffdb443, 0x9, 0xb, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd7e6bb8042b32d7c, 0x2, 0xb, 0x1, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xfa, &(0x7f00000004c0)=""/250, 0x41000, 0x4, '\x00', r3, 0x0, r0, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xe, 0x3, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x5, 0x3, 0x4, 0x1}, {0x4, 0x4, 0x6, 0x7}, {0x0, 0x2, 0x1, 0x7}, {0x3, 0x3, 0x1, 0xb}, {0x2, 0x4, 0x10, 0xa}, {0x3, 0x5, 0x4, 0x6}, {0x0, 0x2, 0x2, 0x7}, {0x4, 0x5, 0xf, 0x1}], 0x10, 0x3}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000f90afa60000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000800)={0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@RTM_GETNSID={0x54, 0x5a, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008004}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r8 = gettid() r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @tid=r8}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) signalfd4(r9, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) [ 150.880582][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.889859][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.899295][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.915934][ T302] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0076/input/input43 [ 150.917074][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.938768][ T4033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.944394][ T302] uclogic 0003:256C:006D.0076: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 23:41:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 150.963307][ T30] audit: type=1400 audit(1712446874.375:311): avc: denied { setopt } for pid=4020 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.001284][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 151.007063][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.014935][ T26] usb 2-1: USB disconnect, device number 33 23:41:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:41:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af60, 0x0) 23:41:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r0, &(0x7f0000000980)="71cd5bf61ff691726289063b8d8e36f5e320be21c4351bfae605b034169ce23c6182c54f0c943f95a6d7df733208b0b5", &(0x7f00000009c0)=""/19}, 0x20) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1f, 0x7f, {{0x23, 0x4, 0x3, 0x8, 0x8c, 0x65, 0x0, 0x3f, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xe2, 0x1, 0x7, [{@empty, 0x8000}, {@remote, 0x3}, {@private=0xa010101, 0x7}]}, @timestamp={0x44, 0x14, 0xa2, 0x0, 0x9, [0x80000001, 0xc7d8, 0x10001, 0x2]}, @rr={0x7, 0x1f, 0x89, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast2, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0xb, 0xc5, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x1, [{@rand_addr=0x64010101, 0x200}, {@empty}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x10, &(0x7f0000000580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57fc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000640)='syzkaller\x00', 0x9, 0xab, &(0x7f0000000680)=""/171, 0x41000, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x8f, 0x20}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0x4, 0x8}, {0xfa0, 0x5, 0xc, 0xc}, {0x0, 0x4, 0x9, 0x179ea5a5d3d50ed0}], 0x10, 0xd9af}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x25}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x22}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x1, 0x1, 0x4, 0xc, 0x10}, @ldst={0x0, 0x1, 0x4, 0x0, 0x8, 0x18, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x7, 0x1, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x17, &(0x7f0000000200)=""/23, 0x40f00, 0x0, '\x00', r4, 0xc, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xf, 0x2ed4, 0xa2}, 0x10, r5, r6}, 0x90) (async, rerun: 64) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) (rerun: 64) syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') mkdir(0x0, 0x0) (async) chdir(0x0) (async, rerun: 64) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) (rerun: 64) 23:41:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000340)={0x0, 0x0, 0x0, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r6 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r6, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000280)={r5, 0x0, 0xe8, 0x0, &(0x7f00000004c0)="87e46813c3b223afb83831264bf023af1c9305a9741460c927a023dd8ed2392e21402bc4b6b888f09da41fea10369a8cbe97d522465b864b9355dfc72c125df55c76335a2ec1c2698b98c38fa0d0ca69a53269727b57309eb8b74c7199bd573e7ed68f97f8d19a30fb0b46edbada732b8220f34d00b537a6e1f0a8acf1d30575e222945378f676a311bdbc738af4daab6b3a5bc69b93c1804cb8e39c3c2d53658127b8bcb76a3991a731e2504254c5d92f4e25f0eadc3c9a2c3eb74e858df64c4b16b47ff414dc29cf00d919c2de6a155ee22c82e5d1a0fa8a9f5f956fe6086639c2415e73b0402c", 0x0, 0x81, 0x0, 0x95, 0x0, &(0x7f0000000380)="3b84170d17e6b50cd87e4d07db624929bf66d08811c5b72ac2dfe2f11403b63cd442f3e840be1bc02099cd28e8885f7e96e3eaac6270cf6de59aad8e721b16637739d8e382cedd7850ae124e9669ddca1536d070d2fa80933a5395e5264d697c4f8d51ab1425ec8cbd4ef9a54be5ad4e5bdaf3ded0c3c982808aba03ff1d79a91d74075245fb286686a42c7702f283e6dd473474eb", 0x0, 0x2, 0x0, 0x400}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 23:41:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) [ 151.116655][ T1480] usb 1-1: USB disconnect, device number 32 23:41:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:15 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\fgroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x20d00, 0xd) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x2, r2}, 0x10) 23:41:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r3}, 0x10) fchmod(r2, 0x0) 23:41:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x840, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000240)=ANY=[]) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200), 0xc06620, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x40010, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x7) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x40000000}) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008000200000030302e4c"], 0x15) dup(r5) 23:41:15 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@dev, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in=@dev, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") (async) 23:41:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="0800aaaaaaaaaaaaaaaaaabb88a80000810000005142f2960bdf82cac6529b0404065c86dd6000"/62], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x10000, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="04000000001e238a7f3bf585fdc656a12a0b4db863000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000002008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x5, 0xa, 0xb, 0xfffffffffffffff8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x81, 0x62, &(0x7f00000003c0)=""/98, 0x40f00, 0x40, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, 0x0, &(0x7f00000005c0)=[{0x2, 0x2, 0xe, 0x2}], 0x10, 0x2}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', r4, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x202000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) 23:41:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) userfaultfd(0x80001) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) inotify_init() pselect6(0x40, &(0x7f00000006c0)={0x0, 0x1, 0x1, 0x0, 0x2}, &(0x7f0000000700)={0x7f, 0x8001, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x78) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) tkill(r2, 0x25) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, 0x0) tkill(r3, 0x25) getpgid(r3) wait4(r3, &(0x7f0000000180), 0x40000000, &(0x7f00000001c0)) r4 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x210cc1, 0x181) close_range(0xffffffffffffffff, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x80000000, &(0x7f0000000380)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x1440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000958d6af618c30ec831620a0dd65fff9a38420b265bcda4dcfbafd07877165dd7f50b620a6bbce74335b7d7e490fe3dfadcb938992f6e715cf05f0dbfcaddbb89dd6c4042159f515acee46a3b59a93269c76324c2ddeb1e1a1a53275229b0e05a54f9af3582f79aaa31c72b96463d71c7a8b573920b8f2fef16aafc3854f53a93ba297072cd0d5d56f12ba115dc19d738dd3b53d6267a16fc5e3e8593732b9067728c1406a2dc6e1cbafdbe0c7054c87db3796a2a3db924f55215ae88"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 23:41:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) [ 151.628870][ T4064] fuse: Bad value for 'user_id' 23:41:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 151.677512][ T4068] loop0: detected capacity change from 0 to 1024 23:41:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000780)='ext4_allocate_blocks\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r7 = dup3(r1, r0, 0x0) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020e0000030000d07002ab00000000005aab9a45624cf29e3de264c211ae25b6dff7a8a84f49e4435d83dd7847500d0eb830906658bd9b61be971919d721a80f967a0f18d2e4c172f27f"], 0x18}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) unshare(0x4000480) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_find_extent_range_enter\x00', r13}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000058110000c5def6a8f2b8c5ac22bec25041ded210e10241aa17f319a853cdaf9336959eb79bd8be1d31916e9ae60f341c06ce496e7721564fd6f93faca86c3d2a9a4ebc7e5ca40bd1e13dd8812636075a12d4dcd0a27b74a85c44504d69c12de88907b57ffb9aa21608e15e0950d0a13660acd2fa1578845fa098d6db26ee910100f7d4d84ff2f5663509511b4d7563a847c8387c4590e7f735a3658e226148bf216178c0ec7423543cd67126e15a3dd23abfa8d5d6044708e5aadb8dfd804fe36b2cd359aa33c771dae9e6b73a9458bb33ae975e81e2a7d5a5b38f7d933bf76adb7c4d", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80100ffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x8}, 0x48) openat$cgroup_ro(r1, &(0x7f0000000800)='memory.stat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000ad193060000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)=ANY=[], 0x3, 0x546, &(0x7f0000000180)="$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") readlink(&(0x7f0000000140)='./file2\x00', &(0x7f0000000740)=""/131, 0x83) mount$fuse(0x0, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000880)=""/202, 0xca) readlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000700)=""/60, 0x3c) [ 151.725284][ T4068] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 151.741763][ T4068] EXT4-fs (loop0): write access will be enabled during recovery [ 151.761020][ T4068] JBD2: no valid journal superblock found 23:41:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x840, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000240)=ANY=[]) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000240)=ANY=[]) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200), 0xc06620, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200), 0xc06620, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x40010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x40010, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffb) (async) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x7) (async) sendfile(r3, r4, 0x0, 0x7) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) userfaultfd(0x80001) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x40000000}) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008000200000030302e4c"], 0x15) (async) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008000200000030302e4c"], 0x15) dup(r5) 23:41:15 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=cp874,discard,fmask=00000000000000000003777,uid=', @ANYRESHEX=r1, @ANYBLOB="2c646d61736b3d30303030303030303030303030003030303030303135272c696f636861727365743d63703836342c6769643d2afd0000a086def9d89a7ce54e80df3590cbf11000ee1dd0177099eaccb5f38478b00d661b7778da16f6cf10d92fd26b24d32108c697", @ANYRESHEX=r2, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86eadfbd6"], 0x1, 0x1508, &(0x7f0000002a80)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd00) [ 151.778744][ T4068] EXT4-fs (loop0): error loading journal [ 151.797259][ T4085] loop3: detected capacity change from 0 to 512 [ 151.837240][ T4094] loop2: detected capacity change from 0 to 256 [ 151.851886][ T4099] loop0: detected capacity change from 0 to 1024 [ 151.876205][ T4085] EXT4-fs (loop3): Unrecognized mount option "memory.stat" or missing value [ 151.886924][ T4094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0x702bb370, utbl_chksum : 0xe619d30d) [ 151.902033][ T4099] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 151.913303][ T4099] EXT4-fs (loop0): write access will be enabled during recovery [ 151.930242][ T4099] JBD2: no valid journal superblock found 23:41:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:15 executing program 3: bpf$PROG_LOAD(0x10, &(0x7f0000000b00)={0x0, 0x3, &(0x7f0000000bc0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000ff00000000000000000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) [ 151.936120][ T4099] EXT4-fs (loop0): error loading journal 23:41:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) write$binfmt_elf64(r5, &(0x7f0000002400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, 0x0) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_socket_listen\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x11, &(0x7f0000000200)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @exit, @generic={0x7, 0x9, 0x3, 0xffff, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x3f, 0x2, 0xd, 0x9, 0xb67d}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0xfa, 0x3, 0x1, 0xfff, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xd2, &(0x7f00000002c0)=""/210, 0x1f00, 0x1, '\x00', 0x0, 0x35, r5, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0x6, 0x1}, 0x10, r9, r10, 0x3, 0x0, &(0x7f00000004c0)=[{0x4, 0x2, 0xf, 0x1}, {0x4, 0x1, 0x8, 0x5}, {0x4, 0x3}], 0x10, 0x9}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32], 0x9, 0x624, &(0x7f0000000d40)="$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") 23:41:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000200)='./file0/file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) renameat2(r1, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x2) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x5) 23:41:15 executing program 0: r0 = userfaultfd(0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000580)}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) execve(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x7, 0x71, 0x78, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x8, 0x23}}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x20, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x10f61565, 0xbf, &(0x7f00000004c0)=""/191, 0x41000, 0x4b, '\x00', r10, 0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000700)=[r11], &(0x7f0000000740), 0x10, 0x3f}, 0x90) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r0, &(0x7f0000000200)=""/183, 0x28) close(r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) 23:41:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000}}) 23:41:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 152.082114][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 152.082128][ T30] audit: type=1326 audit(1712446875.495:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fbddae69 code=0x0 [ 152.194144][ T4113] loop2: detected capacity change from 0 to 1024 23:41:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xd, 0x0}}], 0x300, 0xc68, 0x0) [ 152.245464][ T4113] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 152.253257][ T4113] EXT4-fs (loop2): write access will be enabled during recovery [ 152.260846][ T4113] JBD2: no valid journal superblock found [ 152.267308][ T4113] EXT4-fs (loop2): error loading journal 23:41:15 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_journal_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='ext4_journal_start\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x9, 0x2, 0x11, r1, 0x8, '\x00', 0x0, r7, 0x4, 0x1, 0x2, 0x2}, 0x48) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) chown(&(0x7f0000000000)='.\x00', 0x0, 0x0) 23:41:15 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=cp874,discard,fmask=00000000000000000003777,uid=', @ANYRESHEX=r1, @ANYBLOB="2c646d61736b3d30303030303030303030303030003030303030303135272c696f636861727365743d63703836342c6769643d2afd0000a086def9d89a7ce54e80df3590cbf11000ee1dd0177099eaccb5f38478b00d661b7778da16f6cf10d92fd26b24d32108c697", @ANYRESHEX=r2, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86eadfbd6"], 0x1, 0x1508, &(0x7f0000002a80)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf00) 23:41:15 executing program 3: r0 = io_uring_setup(0x78a, &(0x7f0000000180)) close(r0) io_uring_setup(0x6507, &(0x7f0000001300)) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, &(0x7f00000011c0)={0x0, 0x0, 0x5, {0x5, 0x0, '1Fy'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000200)={0x20, 0x24, 0xaa, {0xaa, 0x9, "532b75e56f3568e20aaeab4a296efd7ac01fd922e51357964d7dcb169aac48fcb65826f250e0c2c2ed3fe243d47e9a6789ab25d1e7ee4b46ff2b1ac94c5364ff6c4cb60da21c2bb36b8830a3ecf63a48cf17fb9786d3b841bafb0ef7bb2225d38a93c6123c6ce299973ebd5a5eda73716d27d9158990762c7fa70dca80ff7b3cfae035bcd74280718383cf67e2309e5daea65246720bf912e32c5a1519818fa38ed2ea8271e4d17c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000000c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xfa, 0x3, 0x1, 0x0, 0xf552, [0xc000, 0x3c5fdd4f1db36e9f, 0x3f00]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x0, "bf6f2601", "6ddcc343"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x7f, 0x8, 0xf6, 0x8, 0xfffa}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x13, 0xf3, "e9033c6ecab98122704476c19bb7819edea87617c46782a293c0f37dae2c00a99d0cc6f3cb837e1edd608113fb6be15bbf49a90e91f9dd0461895e82772e7667c16f91027c988947205503994a78ed815f2336426865f04cc1c9e50a86913bf0a98199a5c6b9ab213cf1a47d69f522ecbd76c8505ffaadd7e98da1a77ee5a193162c8e174a75dd994fb0280fecda41079b6247e449c63d20e8ae8f1d977dbf3896210f9ede974d11a444ae503c023bd7df14ceb54a996d39b02c6fbc30854fc6b1f9665f4896846f585b159dbee2484e43cb82f64b27e0550e755349b6e37fa38f8e243802fe0b3a9a5753d3651ec41e3d065e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x20, 0x10, [0xe10]}}, &(0x7f0000000540)={0x40, 0x7, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "00e7"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9911"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local, @local, @main=@item_4={0x3, 0x0, 0xb, "c5fea2d4"}]}}, 0x0}, 0x0) 23:41:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 152.401976][ T4139] loop3: detected capacity change from 0 to 256 [ 152.411954][ T4139] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0x702bb370, utbl_chksum : 0xe619d30d) 23:41:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xd, 0x0}}], 0x300, 0xc68, 0x0) 23:41:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xe, 0x0}}], 0x300, 0xc68, 0x0) 23:41:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) userfaultfd(0x80001) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) inotify_init() pselect6(0x40, &(0x7f00000006c0)={0x0, 0x1, 0x1, 0x0, 0x2}, &(0x7f0000000700)={0x7f, 0x8001, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x78) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) tkill(r2, 0x25) (async) wait4(0x0, 0x0, 0x80000000, 0x0) (async) tkill(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) (async) setpgid(0x0, 0x0) (async) tkill(r3, 0x25) (async) getpgid(r3) (async) wait4(r3, &(0x7f0000000180), 0x40000000, &(0x7f00000001c0)) r4 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x210cc1, 0x181) close_range(0xffffffffffffffff, r4, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) waitid(0x0, r2, 0x0, 0x80000000, &(0x7f0000000380)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x1440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000958d6af618c30ec831620a0dd65fff9a38420b265bcda4dcfbafd07877165dd7f50b620a6bbce74335b7d7e490fe3dfadcb938992f6e715cf05f0dbfcaddbb89dd6c4042159f515acee46a3b59a93269c76324c2ddeb1e1a1a53275229b0e05a54f9af3582f79aaa31c72b96463d71c7a8b573920b8f2fef16aafc3854f53a93ba297072cd0d5d56f12ba115dc19d738dd3b53d6267a16fc5e3e8593732b9067728c1406a2dc6e1cbafdbe0c7054c87db3796a2a3db924f55215ae88"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) shutdown(0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 23:41:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAgIi4cdOwFS0IBAogAJiSaUxnaikEuMYiORKIKAUChRJHpEicRfQAUNAiokWuhRpAilIVAd2rtd38N3ju2cvYH7/aTNzezOZea72bmb3fEGMLDGsn+SiN0R8VtEjDSy7QXGGi83b1ya/fvGpdkkarW3/kzq5f66cWm2KFq8b1eeGU8j0k+TONil3sULF8/MVKvz5/P85NLZ9yYXL1x89vTZmVPzp+bPTR8/fuzo1AvPTz/Xlzjvydp64MOFQ/tfe/vqG7Mnrr7z0zdJEX9HHH0yttrBJ2q1PldXrj0t6WSoxIawLpWIyLpruD7+R6ISzc4biVc/KbVxwKaq5XocvlwD/seSKLsFQDmKH/rs+rfYtm72Ub7rLzUugLK4b+Zb48hQpHmZ4Y7r234ai4gTl//5Mttic+5DAAC0+S6b/zzTbf6Xxv0t5e7O14ZG87WUvRFxb0Tsi4j7IuplH4iIB9dZf+ciycr5T3ptQ4GtUTb/ezFf22qf/xWzvxit5Lk99fiHk5Onq/NH8s9kPIa3Z/mpVer4/pVfP+91rHX+l21Z/cVcMG/HtaHt7e+Zm1mauZ2YW13/OOLAULf4k+WVgCQi9kfEgQ3Wcfqprw/1Onbr+FfRh3Wm2lcRTzb6/3J0xF9IVl+fnLwrqvNHJouzYqWff7nyZq/6byv+Psj6f2fX8385/tGkdb12cf11XPn9s57XNBMbOv+bO7blrx/MLC2dn4rYlrzeaHTr/unme4t8UT6Lf/xw9/G/N5qfxMGIyE7ihyLi4Yh4JO+7RyPisYg4vEr8P778+Lu9jt0J/T/X0f+j7UU6+r+Z2Bade7onKmd++Lb9f2wm1/b9d6yeGs/3rOX7by3t2tjZDAAAAP89aUTsjiSdWE6n6cRE42/498XOtLqwuPT0yYX3z801nhEYjeG0uNM10nI/dCq/rC/y0x35o/l94y8qO+r5idmF6lzZwcOA29Vj/Gf+qJTdOmDTeV4LBpfxD4PL+IfBZfzD4Ooy/neU0Q5g63X7/f+ohHYAW69j/Fv2gwHi+h8Gl/EPg6t1/CcltgPYUos74tYPyUtIrEhEekc0oz+JZJNHwe6yA1x/ouxvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP74NwAA//+7Iehw") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000c40)='ext4_free_inode\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 23:41:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000180)='./file0/bus\x00', 0x2, 0x0) 23:41:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xd, 0x0}}], 0x300, 0xc68, 0x0) [ 152.577353][ T4164] loop2: detected capacity change from 0 to 512 [ 152.613842][ T4164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.634364][ T4164] EXT4-fs (loop2): 1 orphan inode deleted [ 152.640036][ T4164] EXT4-fs (loop2): 1 truncate cleaned up [ 152.645768][ T4164] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. 23:41:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) 23:41:16 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r6, 0x1}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffb, 0x6}}]}}}]}, 0x58}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = syz_open_dev$vcsu(&(0x7f0000000280), 0xa7a0, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x76, 0x92e, 0xe341, 0x20, r0, 0x1, '\x00', r7, r8, 0x0, 0x4, 0x2, 0xd}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r9}, 0x38) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes128, 0x0, @desc4}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r12, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x0, '\x00', @a}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r12, &(0x7f0000000140)='./file1\x00') [ 152.674145][ T4164] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.689371][ T4164] EXT4-fs (loop2): Remounting filesystem read-only 23:41:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x10, 0x0}}], 0x300, 0xc68, 0x0) 23:41:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 152.801298][ T374] usb 4-1: new high-speed USB device number 49 using dummy_hcd 23:41:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0xd, 0x0}}], 0x300, 0xc68, 0x0) 23:41:16 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010010000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r4, 0x8914, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r7, 0x8943, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020e1ff2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020646c2500000000112020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d000000955dfce8623e3e0ca1ff79092c9de7787bb4b9a8ed700182dd8cb9f67801b1bd04dce9e09e0a4c7154b8874e3569c5e8a71b7ecc4e76ec"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='block_plug\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x16, 0x0, 0x4, 0x81}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002f40)={r12, &(0x7f0000002e00), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) mknod(0x0, 0x8840, 0x645a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xf7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x23, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) 23:41:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x10, 0x0}}], 0x300, 0xc68, 0x0) 23:41:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x200, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="200000001509ec9e00"/24, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f0000000000)="ae52811a67672ceb0755d10a9a7d98efd288ed9eb5221a829bec84c646e16868065786cb080cab096b2bec3e5446dcdcd96d1064dc36b5ca3311b25c1ab89fb7ca1943cb316bc96761ead6bcd7d1aa94d3e591651b8f7347c017b42cacbd02d601fda33820284d354b0b1dc817e55a2f9d4231d8ce21acd42a70fd3022c2ef12f73afbe9a360fbfaf068ad258e6c293ca87f09ceaafd5988049b3677ae0cddc28c4df89b003d16646798", &(0x7f0000000280)=""/67, &(0x7f0000000300)="c9d43316bae3be8c97bf75412d017d3e1c82a1c039311c9afc958dbefbf1a8df89ec9d4af987888e2d17cc8e4f27b5d5b041e2c27924fe34b08824d69d86e778674e40dea0d5b5dbd3189ac75cc40ae4f190f531ddea54ac277bc4ce91bfd9531634c2ce1519fd8fb7bcbe52bde73a3eeb0bf6a6a6dc6226ceeb3fcdcd08f8bb68a8c2b51cb8798a9183c74edd44dceba47b48e5fe88ccc3bf63e9f40f797d6510c089cc1a2e6287773d2209a4a2ab2c4b0e543ecb", &(0x7f0000000200)="b7b28f8d299b", 0x70000, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r6, 0x1, '\x00', r2, r6, 0x1, 0x4, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r0, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r2, 0x8, 0x50, 0xffff, 0x1, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x3, [{@multicast1, 0x7}, {@local, 0x3}, {@multicast1, 0x5}]}]}}}}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0x2d, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x26, &(0x7f0000000a80)=""/38, 0x40f00, 0x0, '\x00', r9, 0x2c, r6, 0x8, &(0x7f0000000b80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0xc, 0xfffffff8, 0x400}, 0x10, r3, r10, 0xa, &(0x7f0000000c40)=[r11, r6, r0, r6, r6, r6, r6, r6], &(0x7f0000000c80)=[{0x5, 0x2, 0x1, 0x7}, {0x4, 0x1, 0xb, 0x7}, {0x1, 0x3, 0x9, 0xb}, {0x5, 0x3, 0x6, 0x1}, {0x0, 0x2, 0x2, 0x8}, {0x0, 0x2, 0x5}, {0x1, 0x4, 0xd, 0x4}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x5, 0x8, 0xb}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x7}, 0x90) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50}, 0x50) socket$inet(0x2, 0xa, 0xfffffffe) r12 = syz_open_procfs(0x0, &(0x7f0000001040)='net/ptype\x00') read$msr(r12, &(0x7f0000000040)=""/59, 0xffb5) socket$packet(0x11, 0x3, 0x300) read$msr(r12, &(0x7f0000000080)=""/123, 0x7b) read$FUSE(r12, &(0x7f0000001080)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000640)={0x10}, 0x10) write$FUSE_BMAP(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000580)={0x50}, 0x50) 23:41:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 23:41:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 153.171322][ T374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.186049][ T374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.196152][ T374] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 153.212545][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.239658][ T374] usb 4-1: config 0 descriptor?? 23:41:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x10, 0x0}}], 0x300, 0xc68, 0x0) 23:41:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 153.711562][ T4151] UDC core: couldn't find an available UDC or it's busy: -16 [ 153.718781][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.732883][ T374] kye 0003:0458:5010.0077: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 153.743605][ T374] kye 0003:0458:5010.0077: tablet-enabling feature report not found [ 153.751571][ T374] kye 0003:0458:5010.0077: tablet enabling failed 23:41:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x1}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x94f) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001880)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x71, {0x71, 0x30, "9f3188422097bfd9cae9ecbb35415a75c522ba21471e54e3ffab99d0023531cc7011f546b0ba351b99da229ef86f299408eb644333273832046689ec23896c994b03488678598876d7d8c1a6ca1a43bdbb0e760b9df78abd1fd6c8c66889e5f444f8a44b1527e4de42bde785d05fa4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x17, &(0x7f0000000040)="97c016d72eecc71bad308fdbe67bea2f1d038f9d47e25e") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xaa, 0x328, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x7800, 0xa504, 0x100}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x60, '\x00', r3, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) brk(0x0) 23:41:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:18 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x10, 0x0}}], 0x300, 0xc68, 0x0) [ 155.467467][ T555] usb 4-1: USB disconnect, device number 49 23:41:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x404}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40049409, &(0x7f0000000080)={0x0, r1}) 23:41:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000019c0)='bpf_lsm_task_prctl\x00') syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x3, 0x23, {0x23, 0x1, "bc1ddfbe65364df8335104c40507f116fd0835a60e64dffa841d8cda2f0b9d9f43"}}, &(0x7f00000000c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "c9f54d9258e732d2a7227823ec042a604ef9d478f5cd2fb3263a65f467fac80bd9d2c9f8792bd1486c2625c8a9506156d5ca6a11ae8a8ed4d17e1b346f8c41ddff627b131f53a16b8113ecff85563d6b3bf5b7a49103d8b212a0a233ed1e27d99ca9d1728f2f2dc9cf65d7c1d9efca761131d5d0c1ce0c9b2585bec5ea80709ed96abd6e037146a620da5dec46e448a5f9b471bd576f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00220d0000002bd7da9c8a9a83010004e2"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb503, 0x6a, 0x1, {0x22, 0x3d8}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000300)={0x40, 0x2c, 0xf2, "e1a4b334cf8d5d1f52ea7e6a030068ffd8e94b836fd9765bc2ea33b16db683020468e6f7a897591143c6bbc96451f6f9eb7b893fe1fc2fd13c5d1c71c6436832fe30ad2f78febef121b110c946e353772bbb29eb0a9d418a28f1c93066063370f731b007086f202bfe29f347996d2e3b00055015d3beae914d4a76ea8cfb253850d498f94719d1c5063dd4c008e2f22a5ee90b3fb4afc2baa76f0fcb76aeb852a23309a6b55133c1b4d70e0e7583db7b45850e05559fdc46f1bd08f8ba2357b5ad030dccec44a00ecc2cf4a799f9d262c4817c516c8b3c859d01d5f3712c33a4198b985aa96cb6147d7a4123acfcc1fc452c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0xab, "fb3726ebc0ef10eb3907924f70e2820898b1579a1f03a193e7bd778fe67ca12837077a91cb1954a61553f1847b259d3db683fdab3185df113c3c04b0d601e52ad731aae7548c07678c0e307f779e92bc6e2cec96de7d5657ff09fd97e8187d32ac3fe912d2e8998cd1c4b484920ea002cf504b7683790644f2e9952cc6166dd3ad738df7aab2bcad9970be05f0f36704fad25e3c81cb8e1217a789015c1efba65532647d59121cfd45d936"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xfc}}) 23:41:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 155.761314][ T1353] usb 3-1: new high-speed USB device number 24 using dummy_hcd 23:41:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x200, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="200000001509ec9e00"/24, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f0000000000)="ae52811a67672ceb0755d10a9a7d98efd288ed9eb5221a829bec84c646e16868065786cb080cab096b2bec3e5446dcdcd96d1064dc36b5ca3311b25c1ab89fb7ca1943cb316bc96761ead6bcd7d1aa94d3e591651b8f7347c017b42cacbd02d601fda33820284d354b0b1dc817e55a2f9d4231d8ce21acd42a70fd3022c2ef12f73afbe9a360fbfaf068ad258e6c293ca87f09ceaafd5988049b3677ae0cddc28c4df89b003d16646798", &(0x7f0000000280)=""/67, &(0x7f0000000300)="c9d43316bae3be8c97bf75412d017d3e1c82a1c039311c9afc958dbefbf1a8df89ec9d4af987888e2d17cc8e4f27b5d5b041e2c27924fe34b08824d69d86e778674e40dea0d5b5dbd3189ac75cc40ae4f190f531ddea54ac277bc4ce91bfd9531634c2ce1519fd8fb7bcbe52bde73a3eeb0bf6a6a6dc6226ceeb3fcdcd08f8bb68a8c2b51cb8798a9183c74edd44dceba47b48e5fe88ccc3bf63e9f40f797d6510c089cc1a2e6287773d2209a4a2ab2c4b0e543ecb", &(0x7f0000000200)="b7b28f8d299b", 0x70000, r0}, 0x38) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) (async) mkdir(0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) (async, rerun: 64) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r6, 0x1, '\x00', r2, r6, 0x1, 0x4, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r0, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r2, 0x8, 0x50, 0xffff, 0x1, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x3, [{@multicast1, 0x7}, {@local, 0x3}, {@multicast1, 0x5}]}]}}}}}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0x2d, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x26, &(0x7f0000000a80)=""/38, 0x40f00, 0x0, '\x00', r9, 0x2c, r6, 0x8, &(0x7f0000000b80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0xc, 0xfffffff8, 0x400}, 0x10, r3, r10, 0xa, &(0x7f0000000c40)=[r11, r6, r0, r6, r6, r6, r6, r6], &(0x7f0000000c80)=[{0x5, 0x2, 0x1, 0x7}, {0x4, 0x1, 0xb, 0x7}, {0x1, 0x3, 0x9, 0xb}, {0x5, 0x3, 0x6, 0x1}, {0x0, 0x2, 0x2, 0x8}, {0x0, 0x2, 0x5}, {0x1, 0x4, 0xd, 0x4}, {0x5, 0x5, 0x6, 0x2}, {0x0, 0x5, 0x8, 0xb}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x7}, 0x90) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50}, 0x50) (async) socket$inet(0x2, 0xa, 0xfffffffe) (async) r12 = syz_open_procfs(0x0, &(0x7f0000001040)='net/ptype\x00') read$msr(r12, &(0x7f0000000040)=""/59, 0xffb5) (async) socket$packet(0x11, 0x3, 0x300) read$msr(r12, &(0x7f0000000080)=""/123, 0x7b) (async) read$FUSE(r12, &(0x7f0000001080)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000640)={0x10}, 0x10) write$FUSE_BMAP(r6, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_INIT(r6, &(0x7f0000000580)={0x50}, 0x50) 23:41:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:19 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x300) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 23:41:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz82pwkAYhtE33JvE4EKbSxf2YGoQO3BnNy7swDocSQiJDYgI5ywG5u+BL3zVpW3upTxLkv/5aGjf7sukXvabdOOS9Nt9kvNp+KtzTKr1wZhourlV3abvh6X32K3xob9+cjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BWvAAAA//++jheK") sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:41:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) 23:41:19 executing program 0: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x1, 0x3, 0x6, 0x7fff, r1}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b40)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e23, 0x9, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x5e, 0x0, r4}, {0x7, 0x1, 0x8, 0x5, 0x1ff, 0x1f, 0x7, 0x9}, {0x7f, 0x5, 0x2dd, 0x81}, 0x1, 0x6e6bbb, 0x2, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3505, 0x1, 0x0, 0x1, 0x3800000, 0x401, 0xfffffffb}}, 0xe8) mkdir(&(0x7f0000000380)='./file0\x00', 0x7) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) nanosleep(&(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x0, 0x10, {0x10, 0x0, "926dafcbcd7c17a949e2992f768e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 156.022816][ T4280] loop1: detected capacity change from 0 to 8192 [ 156.080628][ T4280] loop1: p4 < > [ 156.101255][ T323] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 156.122715][ T100] loop1: p4 < > [ 156.141313][ T1353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.152075][ T1353] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.160850][ T1353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.174252][ T1353] usb 3-1: config 0 descriptor?? [ 156.241302][ T26] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 156.461299][ T323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 156.474019][ T323] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 156.483051][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.493570][ T323] usb 4-1: config 0 descriptor?? [ 156.531607][ T323] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 156.653404][ T1353] keytouch 0003:0926:3333.0078: fixing up Keytouch IEC report descriptor [ 156.666620][ T1353] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0078/input/input44 [ 156.678004][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.688834][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.698556][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.711426][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.720302][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.730825][ T26] usb 1-1: config 0 descriptor?? 23:41:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 156.760756][ T1353] keytouch 0003:0926:3333.0078: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 23:41:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic}) 23:41:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000f31a895a23f4607b000000210000850000008600000095000000000000008c4e3bc3dc6a41c4659b19ee3a3017dd1c5ae412cd1383e9c7f9b00fe2f6b38fef5b51fdf3586215cb1fe50901d65767"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000480)={0x2, 'veth1\x00', {0x99}, 0x72}) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b01000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '+'}}, {@privport}, {@nodevmap}, {@mmap}, {@access_uid}], [{@measure}, {@measure}]}}) r6 = dup(r5) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000007"], 0x16) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@empty}}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x5800, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}]}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x8, '|'}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x400c4808, &(0x7f0000000000)={0x2}) ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x40184810, &(0x7f0000000080)={0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x18, r10, 0x31f, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)={0x1508, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x2cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x97, 0x5, "165b6725606491ea8e0580328949f217221367005656f671b43f0165b50a868bb0aedc9eda5731c0447354dc20181ed43130206e1c1f4f1ef2358e205abc12224b0669b17ca23f40548e10f1142c33b7710bc7612a70b8fb5533695355de5fec0df5183dc58e6a33bd69ffe0acdb77318532c18b0b750d2ac8b5cf4da3f33e39c2dfdb2a2d41a83edbb5fb9ded509e4d4af48c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "b548b8157bc742f2d860c7c46a4909e3294e53ab46d56a6fae24193821d7d07878f95ab90e6f1da83a657d193c73944e9ac28041c2325b1bf84dffb0df405e23ccefe95788184dbc81bf9a91bcea092f61071eedf250189c91b4c1a6998dc2b13d37753a29f2b9d9d2ca80292677b1f4934069ab11ed24bb1f2a69ffd9aa9c83b0590e75c6f0285a4cee458f47e022918c49061053e143c98ed110903bf3c56b4a05e31a77b5a314fcc0044720cde704f8d99ab86993d5cb5b56a09952da8a76b66e5eab3c"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xc1}#\')),\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{b\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nodevmap'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe75}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#)$/{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "2ae345f2ad8a1d6eb40233cd9d71ca7d4a33d1c0cc341ceb5faef382751c3b39855f8ddc5add7f351e88fea470f50ed4c3b6e4c84812dc471f9f771f9e67050d9da9a9b5d56e3a0d3bf6134004fc15b92f981bce57ee85af82d64247716a234e5bcff2cd08286d40d3c2d9696d5533383759a5f304de0e4ff7c721dc9747b8ad2858a1d0bc447ebf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x11cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "cb2d975df031b14a94b430e2d4131e6570621342cbec214fc03a41e640ab9b68a2ff43f43eca0b11e741b69e8e3adc62d47fc8a206999234a52a8d198bb759c52b56634d163b2d3e40f1bc1047"}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "2660c09aacd42b12a131fa56f4919de9c121ac94b1b274437bf4089e5f7733206b44cce64997df44081b923e0465b5a10fa474db714407eb2ececf6abc62f89f2ccf2ad6ef5a4099e921bf2d0add56b2669a800b87d711fbd1b2d0342325bc0443685503198d26eddb722f09313923ac55de36143601124256f3cd2b58ee649815b6c5dbbf2de18a3be73c4e7379dfaf9ce3950ddce46cc1b6a164eed2505b80b13f1f313008e8c95551ffdd7f375160550cbbe729a2c31ba4f4887a22d3a3dcd1a6989831b2e138feb672d9fe56b7343feb032e34a018ffaa9dd12037d808a15eccec3ea009da238576c394ae80ccd83075df97a0acff0b"}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "264076126e7fc9d291110d8913106cd77eb86f0d868f1b14e8a13d147326a443f29b492121a6b1ac31d81558"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb7b}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1508}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req={0x7f, 0x7, 0xffffff00, 0x3}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) [ 157.063555][ T555] usb 3-1: USB disconnect, device number 24 [ 157.251289][ T302] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 157.311270][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 157.317062][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 157.323925][ T26] usb 1-1: USB disconnect, device number 33 23:41:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x7fffffff, {{0x14, 0x4, 0x0, 0x3c, 0x50, 0x66, 0x0, 0x4, 0xb5c69dbe0e29b0e9, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x0, [0x2, 0x0]}, @ssrr={0x89, 0xb, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x2, [0x9, 0x0, 0x7, 0x81, 0x3, 0xffff]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r5, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8081) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:41:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x1004010, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0xffffffffffffff0a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000020c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) [ 157.651351][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 157.663878][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 157.675151][ T302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.691445][ T302] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 23:41:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) 23:41:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x11, 0x0}}], 0x300, 0xc68, 0x0) [ 157.701571][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.710309][ T302] usb 5-1: config 0 descriptor?? [ 157.731280][ T4295] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 23:41:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x1}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x94f) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000000c0)={0x77359400}, 0x10) recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001880)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x71, {0x71, 0x30, "9f3188422097bfd9cae9ecbb35415a75c522ba21471e54e3ffab99d0023531cc7011f546b0ba351b99da229ef86f299408eb644333273832046689ec23896c994b03488678598876d7d8c1a6ca1a43bdbb0e760b9df78abd1fd6c8c66889e5f444f8a44b1527e4de42bde785d05fa4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r1, 0x81, 0x17, &(0x7f0000000040)="97c016d72eecc71bad308fdbe67bea2f1d038f9d47e25e") (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xaa, 0x328, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x7800, 0xa504, 0x100}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x60, '\x00', r3, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) (async) brk(0x0) 23:41:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r2) 23:41:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000600)="e3", 0x1, 0x0, &(0x7f00000006c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0x40, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bind$inet(r9, &(0x7f0000000080), 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b5d468bb25b012ba00"]}, 0x0) [ 157.836853][ T4320] __nla_validate_parse: 259 callbacks suppressed [ 157.837068][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.871257][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.880602][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.890355][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.899935][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.909299][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.918642][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.928206][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:41:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 157.937610][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.947067][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 158.026253][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x1 [ 158.033536][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.040725][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.047953][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.055202][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.062435][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.069594][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.076829][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.084026][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.091248][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.098415][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.105810][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.113087][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.120219][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.127502][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.134660][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.141874][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.149035][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.156265][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.163458][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.170639][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.177900][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.185074][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.192284][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.199481][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.206697][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.213886][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 23:41:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @private}, &(0x7f0000000300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000180)='GPL\x00', 0x2, 0x80, &(0x7f0000000280)=""/128, 0x40f00, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x2, 0x9, 0x92b8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r0], &(0x7f00000004c0)=[{0x1, 0x5, 0x6, 0xc}, {0x4, 0x4, 0xe}, {0x3, 0x1, 0xd, 0xb}, {0x4, 0x4, 0xf}, {0x5, 0x5, 0x3, 0x9}, {0x2, 0x3, 0x9, 0xc}, {0x4, 0x5, 0x6, 0xb}, {0x4, 0x5, 0x10, 0x1}], 0x10, 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002a80)=@sg0, 0xee00, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xd4, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x9, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0]}, @generic={0x44, 0x2}]}}}], 0x40}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xc, 0x0, 0x0, 0xc, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x2}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) set_tid_address(0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r4, 0xa29b, '\x00', 0x0, r9, 0x5, 0x0, 0x2}, 0x48) [ 158.221069][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.228307][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.235515][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.242708][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.249898][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.257118][ T1353] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 158.265581][ T1353] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x4, @desc3}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "0f5b676b2de6cbc6ea61abc39d0a4fc4b27659a74f7a769bff4c95bd6039eb6742f2f13eed86048c0ea164d2a123cde57f11d04354869533f185505f85c8725b", 0x2c}, 0x48, r3) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(r2, &(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x20000f7a, &(0x7f0000000500)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000200)='./bus\x00', 0x60142, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800002, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6c6f61642c67727071756f74612c64656275675f77616e8949dfeb6d0de508275019745f65787472615f6973697a653d3078303030303030303030303030303034302c626c6f636b5f76616c69646974792c6d626c6b5f696f5f7375626d69742c64656275672c7573726a71756f74613d2c005a1ad798938bd2390372fed455a9717d6f5741c5514b46ceae635958b39c5de7f88a73032420c632c4c3295fdb228a8fa191242f361965feefde1ac673a03da57c6b95fdb619b37de123472f453e93502bf8c015a8a1b106df9a75be00801400da40fa5f36cdaf0ab55cc6d1aedb7b6a03425c69f5cfd0e332ca6bdb0c4cac3572"], 0x1, 0x459, &(0x7f0000000800)="$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") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIOCLEX(r6, 0x5451) [ 158.281262][ T374] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 158.312873][ T4340] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 158.330456][ T4340] loop2: detected capacity change from 0 to 512 [ 158.391566][ T4340] EXT4-fs (loop2): Unrecognized mount option "debug_wan‰Ißëmå'Pt_extra_isize=0x0000000000000040" or missing value 23:41:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x12, 0x90b83253ecd83317}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x12, 0x0}}], 0x300, 0xc68, 0x0) [ 158.451321][ T302] usbhid 5-1:0.0: can't add hid device: -71 [ 158.457139][ T302] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.465657][ T302] usb 5-1: USB disconnect, device number 26 23:41:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000041d8500000007000000650000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='jbd2_checkpoint_stats\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffff0, 0x1}, @ldst={0x2, 0x0, 0x6, 0x2, 0x8, 0x20, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x2e, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x6, 0xb, 0x4, 0x8, 0xfffffffffffffffc}, @ldst={0x0, 0x1, 0x2, 0x2, 0xa, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x36aa, 0xf7, &(0x7f00000004c0)=""/247, 0x40f00, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0xc6, 0xffffff35}, 0x10, 0x24b48, r3, 0x4, &(0x7f00000003c0)=[r0], &(0x7f00000005c0)=[{0x3, 0x5, 0x10}, {0x0, 0x3, 0x1, 0x2}, {0x3, 0x5, 0xc, 0xa}, {0x2, 0x4, 0x3, 0x9}], 0x10, 0x1ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(r3, 0x40086607, 0x20001412) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_clone(0x4034c000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:41:22 executing program 2: r0 = syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000040)="b8090310b97df5837bfd22089d7a9f26b309d46b12a3279361309c15bed2d42de96517a6ca56c552cc299359deb934d3fcb3410d458a3bded161b0f72972fe1d9518fb485e16a9f887d54670cd7b1c50a1c290df6dee488b49b16973a71c719baf8300357954cf7b8ee778c6601403a81887bd688552896bcd6ff78e24917a6757df966a89c2e95acfd184c45aa8026234c2da53996033511d03c5b6922b65b649b483696215abf34bc191793519b0305b23ce7374077f5bbfdd479a22a096", 0xbf) io_uring_setup(0x437b, &(0x7f0000000140)={0x0, 0x3cb7, 0x800, 0x1, 0xd6, 0x0, r0}) syz_pidfd_open(0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4002, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000580)={0x2, 0x6}, &(0x7f00000005c0)) pidfd_send_signal(0xffffffffffffffff, 0x25, &(0x7f0000000600)={0x33, 0xffff8000, 0xba2d}, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x553b, &(0x7f0000000200)={0x0, 0x95a4, 0x2, 0x3, 0x2bc, 0x0, r2}) getpgid(0x0) process_mrelease(r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000002240)={0x0, 0x2, r2, 0x8, 0x80000}) wait4(0x0, 0x0, 0x0, &(0x7f0000002400)) 23:41:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 158.691319][ T374] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.701330][ T374] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.791586][ T374] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.800486][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.808313][ T374] usb 2-1: SerialNumber: syz 23:41:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x4, @desc3}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "0f5b676b2de6cbc6ea61abc39d0a4fc4b27659a74f7a769bff4c95bd6039eb6742f2f13eed86048c0ea164d2a123cde57f11d04354869533f185505f85c8725b", 0x2c}, 0x48, r3) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(r2, &(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x20000f7a, &(0x7f0000000500)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000200)='./bus\x00', 0x60142, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800002, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6c6f61642c67727071756f74612c64656275675f77616e8949dfeb6d0de508275019745f65787472615f6973697a653d3078303030303030303030303030303034302c626c6f636b5f76616c69646974792c6d626c6b5f696f5f7375626d69742c64656275672c7573726a71756f74613d2c005a1ad798938bd2390372fed455a9717d6f5741c5514b46ceae635958b39c5de7f88a73032420c632c4c3295fdb228a8fa191242f361965feefde1ac673a03da57c6b95fdb619b37de123472f453e93502bf8c015a8a1b106df9a75be00801400da40fa5f36cdaf0ab55cc6d1aedb7b6a03425c69f5cfd0e332ca6bdb0c4cac3572"], 0x1, 0x459, &(0x7f0000000800)="$eJzs3M9vFFUcAPDvzLaA/GpFFEFUFI2NP1paUDl40WjiQaOJHvBY20KQhRpaEyFE0Rg8GhLvxqOJf4EnvRj1ZOJV74aEKBfQi2tmdma7LNulP7YsdD+fZMh7nTf73ndn3s6b93YJoG/ty/5JIrZGxO8RMVTPNtSKQlm5a1fOTf1z5dxUErXaW38lebmrV85NlWXL47YUmZE0Iv0sKSq53tyZsycmq9WZ00V+bP7k+2NzZ84+c/zk5LGZYzOnJg4fPnRw/PnnJp5tPmxjp1g2dNiXxXV1z0eze3e/+s7F16eOXHz352+z9m4t9jfH0S37ssD/ruVa9z0ekXa7vl7a1pROBnrYEJalEhHZ6RrM+/9QVGLh5A3FK5/2tHHAmsruTR1uqudrwDqWRK9bAPRGeaPPnn/L7RYNPW4Ll1+sPwBlcV8rtvqegcYD+mDL82037YuII+f//SrbYo3mIQAAmn2fjX+ebjf+S+O+pnLbizWU4Yi4OyJ2RMQ9EbEzIu6NyMvuioj7l1l/69LQjeOf9NKKAluibPz3QrG2df34r7E8M1wpctvy+AeTo8erMweK92QkBjdm+fEOdfzw8m9fLLavefyXbVn95ViwaMelgZYJuunJ+cl8UNoFlz+J2DPQLv6ksRKQRMTuiNizvJfeXiaOP/nN3sUK3Tz+DrqwzlT7OuKJMtMSfynpvD45timqMwfGyqviRr/8euHNxepfVfxdkJ3/zddf/61FhpPm9dq55ddx4Y/P8/f0jTYTzSu9/jckb+frzOWa74eT8/OnxyM2JK/Vj2r++8TCsWW+LJ/FP7K/ff/fURyTxf9ARGQX8YMR8VBEPFy0/ZGIeDQi9neI/6eXHntvsX3N8W8qzsOtPv/TbT//Gtd/y/lffqJy4sfvFqt/aef/UJ4aKf6Sf/7dxFIbuJr3DgAAAO4Uaf4d+CQdbaTTdHS0/h3+nbE5rc7OzT91dPaDU9P178oPx2BaznQNNc2Hjifni1es5yeKueJy/8Fi3vjLyl15fnRqtjrd49ih321p6v87di30/8yflV63Dlhzfq8F/au1/6+rX6YCHbn/Q//S/6F/6f/Qv9r1/49b8tYCYH1y/4f+pf9D/9L/oX/p/9CXVvO7fok7PhErPzzSXjd+PST+K/4fztulPQuJXn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMf/AQAA//+pj+28") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIOCLEX(r6, 0x5451) [ 158.836272][ T1353] usb 4-1: USB disconnect, device number 50 [ 158.849927][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x1 [ 158.858610][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.866655][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.874425][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 23:41:22 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x10, 0x1004, 0x7, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x10, 0x1004, 0x7, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x6, 0x10000, 0xd, r0, 0x0, '\x00', r1, r2, 0x2, 0x3, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./file0\x00') (async) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close(r4) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r6, r7) [ 158.881805][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.889068][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.896372][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.903771][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.914293][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.921992][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 23:41:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xab, 0x1b, 0xb3, 0x8, 0x789, 0x160, 0x1648, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x54, 0x42, 0xdf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="359759dbdc82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x6, 0xbe, {0xbe, 0xf, "ecd470ce3f43e0c90b6437b31ff50be515f0d3d037a2a34ffb22d6e83f3679b4d00ebfce77ff4f2fd832e69dcf123833ef1f4801a02d6c3ddb2fa7a4d5b1cca6ecd57eb7eb2bf7f9bbb7566e72e087094d45655882c1e4b1b00e5e3f5f900f1d61100783d074d3037851e0b03036aa47f2fe8e548ba5603d1d1ac0cfa564b5559ecbc72a31f204cd55cb848ff4842b7c44584c067c3d765cc8fd9bbcdf00823de073433ef0c8ee67818697ca765ac4be070aeb7d2f1770d5270b6b2c"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000001400)=ANY=[@ANYBLOB="000f24000000050f2400040710020a94200003100b0a10030204003f083f000b10010882100701810001ae84abe669cbc452819f848d7c6e3f565107963bc54718b5f57eff6a7b5ff0ae26fb07b953a4ee52ed000fcafd92e8f640290fdf8869ea85bdf0158dc9c488117ed38eb5691313979be68d5ab1f2c200fef9ce3f554f450acda4cedfdb34282cb4454d76d1a885fcc1b81962f5c6c1b530f0f98480c56ba6e3033668e33e398eb16c3602b763632723ee55794c0dff6350299da923b306d1aba3c4756980bcecc214f3049971a121963188b830ad6a5d790ac5835e2a50d851625cd5d77905fff0c7ad861a69"], &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x1f, 0x6, "d65d1fdd", "e8c0a620"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x4, 0x7f, 0x2, 0x852, 0x6}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0xd, 0x8b, "11760af52706ff1a4c86bdc8882cf5801fb5cf0aeb5fe15dc0b7b84e9b545d12e27d15060604ea95cf08d0bb1060ad2e5fc5ce314263cb750042b4a1be993e3038ee340349d45a0cd8bcd64c041516cc8ab6876e6c2d7302b8a9a6f5604a94ce2a279fdeb9d2436415e86e092178b1d63a1e0bda1d721803f04401c793499c26e6d2938d6db2fb8601ff35"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x10, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000840)={0x40, 0xb, 0x2, "d9d2"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "fe05"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xf800}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x21, 0x30, {0x30, 0x1, "26c8593d392bac2ffb2987f134745b04de8632e6cea92ec744b98ac069e784ecf966c2af6c36f950e7c0cef7aabd"}}, &(0x7f0000001c80)={0x0, 0x3, 0xea, @string={0xea, 0x3, "76f1c503962080d79f4acb55ddc2b07626c40d1f1ed361f8c8c1816bd1e57c508a9cb40a01536f3db2714f34fb71c8056d7b524b4ce7f6e2be007f16255a35ee827861673d7efe7340fa9058f9d017aa2cb7e29ba1d7bd1044a11943f54e218fc0731c19c37b799bc238f00ba68a790d4e649e36f6325f07ed15bd74eccc7e3d2e201d224030dbcf39bca4d9bf30ff4679feabde745998d4ddde67e134fbd46dc2905dfae38dfebf803666a0beb59f93292031d1c8b5a1cf168357f2ffc468d6ad78160941705c44cb04785e0a689d26552b4af27ccd7b5c65edd41f2b92ad62b97174ab0ea12385"}}}, &(0x7f0000001fc0)={0x44, &(0x7f0000001dc0)={0x60, 0xe, 0x38, "fe42c29c9ba844ad6183871bb5ef1f0cdf44a3b43ae9b8f607cc2ceff60ec9cc2f22ea66851c6d58197df7db51f02159930f48856b416d00"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001e80)={0x20, 0x81, 0x1, "81"}, &(0x7f0000001ec0)={0x20, 0x82, 0x2, "a876"}, &(0x7f0000001f00)={0x20, 0x83, 0x1, 't'}, &(0x7f0000001f40)={0x20, 0x84, 0x2, "ec4a"}, &(0x7f0000001f80)={0x20, 0x85, 0x3, "98931b"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)=@can_delroute={0x60, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8b4aa37b79a37e5a"}}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_FILTER={0xc}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "c348e4c50c19c068"}, 0x1}}]}, 0x60}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x0, 0xb4, {0xb4, 0x31, "a0610963ce7c23342ffaaa61ad039694301149caafba612be8277bfbf1a6bbb9679096276209a0400b22dc338b35b1f3be502eadaae1a39e6e4f595b20191ef6aa0fece95f344c9eb4c55681517b48855211dee5336b6f7d245b024c496596436492708583c0e74fc9a1b655aacfdc7cf96225ff9d751d31e0a11ee0a27a2e3532318228b0482bbc2a0d1594f357da90efee1b884baf4c200af15e211ac7b558bc7975e487e12d554c470330700354dc6923"}}, &(0x7f0000002100)={0x0, 0x3, 0x38, @string={0x38, 0x3, "58df05dbcef7be5aaf05c49a725e7f2237e02df286e70a3c98b09bd3daf0c172425e2e2bc021794d98cad5d9a158ccadc5cccbb30bf4"}}, &(0x7f0000002140)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x8, 0x7f, 0xc024, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x1, 0xf00, 0x0, [0xff00, 0xf0, 0x3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x1ff}]}}, &(0x7f0000002180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x1, 0x4, "3ddc3d86", "cf4f6ceb"}}, &(0x7f00000021c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x9, 0x0, 0x9, 0x6}}}, &(0x7f00000027c0)={0x84, &(0x7f0000002240)={0x40, 0x31, 0x99, "c0c18e28a6045f4eb0cd84c552535499d2ccc7a1674c04ad72cd739cb3ea706df9e8f432782652cc0f3768907e3282fbe682c8b2363f65ac132d110ddd7dceb647061f9682cd1a977b1e51c2f0f481cdf17d227f8f1305dac016c4759c514f738818712362c7e8686cbaedcfb6087763fd1d9474fd251f950689bf9cf0ade5dd7da444614f71b4064d7f14ecbe274d0fb5974081061ac822b7"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000002540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002580)={0x40, 0xb, 0x2, '%S'}, &(0x7f00000025c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002600)={0x40, 0x13, 0x6, @random="5e58d52b9dea"}, &(0x7f0000002640)={0x40, 0x17, 0x6}, &(0x7f0000002680)={0x40, 0x19, 0x2, "e62b"}, &(0x7f00000026c0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000002700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002740)={0x40, 0x1e, 0x1, 0x32}, &(0x7f0000002780)={0x40, 0x21, 0x1, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730000000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x3a, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c100806", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000003c0)={0x0, 0x24, 0x3, {0x3, 0x5, 'x'}}, &(0x7f0000001500)={0x0, 0x3, 0x18, @string={0x18, 0x3, "143b88fffb1f8ea555cf16a2791008f6ae839929509b"}}, &(0x7f0000001540)={0x0, 0xf, 0x10b, {0x5, 0xf, 0x10b, 0x3, [@generic={0xf8, 0x10, 0xa, "3320d77cb622e4546acfc7b86c6eecdb4eaa187547756ecfab383bb132f7b8568b539edc328044d86fcc1c0b0b98418a9f75c4cf4d39e93084d3b2a3e03b40fbcb16e9254e40bfedc759574389e7c47c7985130077315b8b61c00a454a4a774c0ae8f1559da4bd542234640246db94e5de1e78d01b4462151243d2769a87cb709079d33e399e4e9a3ce0ccfbd1e8a6c7f299ee972eeecb99a180618cdd27fcdb2bb77b804bb584d1028e9ea98b08dece9598ea315f250eb5f14835ed223de3231bb6784444e09a7eb0c702cc91f586c32c9bba75888aefe8f29278cb979d5f18ac4a8884ec1efdb001a554e2ef50bef9045d960f5e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x17, 0x80, 0x80, 0x7ff, 0x20}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xaa, 0x0, 0x2, 0x1f, "4c5450ac", 'mrs?'}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0xff, 0xed, 0x7, 0x9, 0x8000}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001740)={0x0, 0xf, 0x4b, "0c8960a6069d03c2afcc6dca96360fe57f42ae80f3a08af0eeca926fc0b6dc2332ca80fa9757b473e239164f0570521104a087aefbe0f720db3fa5ebcdb6b28ee3c727511f5b827d6e4ceb"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f00000018c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001900)={0x40, 0x9, 0x1, 0xe1}, &(0x7f0000001940)={0x40, 0xb, 0x2, "96b2"}, &(0x7f0000001980)={0x40, 0xf, 0x2, 0x3ff0}, &(0x7f00000019c0)={0x40, 0x13, 0x6}, &(0x7f0000001a00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x19, 0x2}, &(0x7f0000001a80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0xb4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x9}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x0, 0x7}, 0x4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) dup3(r6, r5, 0x0) [ 158.930826][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.941452][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.948757][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.956727][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.967311][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.974870][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.983176][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.990407][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 158.997810][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.005170][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.012580][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.019795][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.027268][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.034620][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.041988][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.049217][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.056555][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.064453][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.071763][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.071975][ T374] usb 2-1: 0:2 : does not exist 23:41:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78a4c}]}, 0x48}}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001840)=ANY=[@ANYBLOB="151100ac0dcab26d057700000000955e598f0659043610a3fd00f74d7beb76"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005a7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f18b70500baf80c66b8996c6f8766efbafc0cec263666f30f703bca0f799cbd0066b92d0b00000f32f30f01e867660f383c97208e0000ba4300ec440f20c0663509000000440f22c0363e0f1c830060", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180155e7cc6b9cb725104ebcda7e4d4e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) getdents64(r2, &(0x7f0000000380)=""/160, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r9, 0xb13, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4, 0x12a}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$netlink(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)}, 0x2404c880) 23:41:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic}) [ 159.078941][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.090800][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.098015][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.105196][ T26] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 159.114076][ T26] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 159.174535][ T4358] loop0: detected capacity change from 0 to 512 23:41:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x36ffff2f9097, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00'}, 0x18) [ 159.216994][ T4366] netlink: 'syz-executor.3': attribute type 298 has an invalid length. [ 159.231415][ T302] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 159.241876][ T4358] EXT4-fs (loop0): Unrecognized mount option "debug_wan‰Ißëmå'Pt_extra_isize=0x0000000000000040" or missing value 23:41:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x81) dup2(r1, r2) 23:41:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 159.274931][ T30] audit: type=1400 audit(1712446882.685:315): avc: denied { setopt } for pid=4325 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 23:41:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 159.336852][ T30] audit: type=1400 audit(1712446882.715:316): avc: denied { bind } for pid=4325 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.359098][ T374] usb 2-1: USB disconnect, device number 34 [ 159.370578][ T30] audit: type=1400 audit(1712446882.715:317): avc: denied { node_bind } for pid=4325 comm="syz-executor.1" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 159.397149][ T3992] udevd[3992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.424727][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x1 23:41:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78a4c}]}, 0x48}}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001840)=ANY=[@ANYBLOB="151100ac0dcab26d057700000000955e598f0659043610a3fd00f74d7beb76"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005a7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f18b70500baf80c66b8996c6f8766efbafc0cec263666f30f703bca0f799cbd0066b92d0b00000f32f30f01e867660f383c97208e0000ba4300ec440f20c0663509000000440f22c0363e0f1c830060", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180155e7cc6b9cb725104ebcda7e4d4e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) getdents64(r2, &(0x7f0000000380)=""/160, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r9, 0xb13, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4, 0x12a}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$netlink(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)}, 0x2404c880) [ 159.432437][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.440300][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.448006][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.455505][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.462999][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.470770][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.478421][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.485952][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.491269][ T302] usb 5-1: Using ep0 maxpacket: 8 [ 159.493629][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.505442][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.512721][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.519867][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.527150][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.534306][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.541498][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.548678][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.555942][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.563119][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.572513][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.579773][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.587155][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.594542][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.602050][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.609341][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.616702][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.621273][ T302] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=16.48 [ 159.624234][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.633062][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.642447][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.650509][ T302] usb 5-1: config 0 descriptor?? [ 159.655174][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.667073][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.674320][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 23:41:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='net_dev_xmit_timeout\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 23:41:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x4, @desc3}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "0f5b676b2de6cbc6ea61abc39d0a4fc4b27659a74f7a769bff4c95bd6039eb6742f2f13eed86048c0ea164d2a123cde57f11d04354869533f185505f85c8725b", 0x2c}, 0x48, r3) mkdirat(r2, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(r2, &(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x20000f7a, &(0x7f0000000500)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0x400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000200)='./bus\x00', 0x60142, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800002, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6c6f61642c67727071756f74612c64656275675f77616e8949dfeb6d0de508275019745f65787472615f6973697a653d3078303030303030303030303030303034302c626c6f636b5f76616c69646974792c6d626c6b5f696f5f7375626d69742c64656275672c7573726a71756f74613d2c005a1ad798938bd2390372fed455a9717d6f5741c5514b46ceae635958b39c5de7f88a73032420c632c4c3295fdb228a8fa191242f361965feefde1ac673a03da57c6b95fdb619b37de123472f453e93502bf8c015a8a1b106df9a75be00801400da40fa5f36cdaf0ab55cc6d1aedb7b6a03425c69f5cfd0e332ca6bdb0c4cac3572"], 0x1, 0x459, &(0x7f0000000800)="$eJzs3M9vFFUcAPDvzLaA/GpFFEFUFI2NP1paUDl40WjiQaOJHvBY20KQhRpaEyFE0Rg8GhLvxqOJf4EnvRj1ZOJV74aEKBfQi2tmdma7LNulP7YsdD+fZMh7nTf73ndn3s6b93YJoG/ty/5JIrZGxO8RMVTPNtSKQlm5a1fOTf1z5dxUErXaW38lebmrV85NlWXL47YUmZE0Iv0sKSq53tyZsycmq9WZ00V+bP7k+2NzZ84+c/zk5LGZYzOnJg4fPnRw/PnnJp5tPmxjp1g2dNiXxXV1z0eze3e/+s7F16eOXHz352+z9m4t9jfH0S37ssD/ruVa9z0ekXa7vl7a1pROBnrYEJalEhHZ6RrM+/9QVGLh5A3FK5/2tHHAmsruTR1uqudrwDqWRK9bAPRGeaPPnn/L7RYNPW4Ll1+sPwBlcV8rtvqegcYD+mDL82037YuII+f//SrbYo3mIQAAmn2fjX+ebjf+S+O+pnLbizWU4Yi4OyJ2RMQ9EbEzIu6NyMvuioj7l1l/69LQjeOf9NKKAluibPz3QrG2df34r7E8M1wpctvy+AeTo8erMweK92QkBjdm+fEOdfzw8m9fLLavefyXbVn95ViwaMelgZYJuunJ+cl8UNoFlz+J2DPQLv6ksRKQRMTuiNizvJfeXiaOP/nN3sUK3Tz+DrqwzlT7OuKJMtMSfynpvD45timqMwfGyqviRr/8euHNxepfVfxdkJ3/zddf/61FhpPm9dq55ddx4Y/P8/f0jTYTzSu9/jckb+frzOWa74eT8/OnxyM2JK/Vj2r++8TCsWW+LJ/FP7K/ff/fURyTxf9ARGQX8YMR8VBEPFy0/ZGIeDQi9neI/6eXHntvsX3N8W8qzsOtPv/TbT//Gtd/y/lffqJy4sfvFqt/aef/UJ4aKf6Sf/7dxFIbuJr3DgAAAO4Uaf4d+CQdbaTTdHS0/h3+nbE5rc7OzT91dPaDU9P178oPx2BaznQNNc2Hjifni1es5yeKueJy/8Fi3vjLyl15fnRqtjrd49ih321p6v87di30/8yflV63Dlhzfq8F/au1/6+rX6YCHbn/Q//S/6F/6f/Qv9r1/49b8tYCYH1y/4f+pf9D/9L/oX/p/9CXVvO7fok7PhErPzzSXjd+PST+K/4fztulPQuJXn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMf/AQAA//+pj+28") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIOCLEX(r6, 0x5451) 23:41:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000180)='./file0/bus\x00', 0x8, 0x0) [ 159.681508][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.688683][ T322] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 159.705548][ T322] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 159.706672][ T4389] netlink: 'syz-executor.0': attribute type 298 has an invalid length. 23:41:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) 23:41:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 159.826423][ T4401] loop0: detected capacity change from 0 to 512 [ 159.854586][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x1 [ 159.861952][ T4401] EXT4-fs (loop0): Unrecognized mount option "debug_wan‰Ißëmå'Pt_extra_isize=0x0000000000000040" or missing value [ 159.866231][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.888252][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.895568][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.903095][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.910325][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.917585][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.924827][ T302] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.934516][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.941853][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.949096][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.956338][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.963561][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.970701][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.977946][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.985152][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.992346][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 159.999517][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.006739][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.013922][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 23:41:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) [ 160.022835][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.030088][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.037339][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.044542][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.051929][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.063533][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.070796][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.078047][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.091287][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.098552][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.105953][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.113370][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 23:41:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x74, 0x78, 0x35, 0x31, 0x38]}}, {@mode={'mode', 0x3d, 0x6a}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_never}]}) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='ext4_es_find_extent_range_enter\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, &(0x7f0000000b80)=ANY=[], 0x32600) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r6, 0x0) (async, rerun: 64) r7 = dup(r5) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x0, 0xf4, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 160.120803][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.128527][ T374] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 160.140029][ T374] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.174542][ T4411] tmpfs: Bad value for 'size' 23:41:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78a4c}]}, 0x48}}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001840)=ANY=[@ANYBLOB="151100ac0dcab26d057700000000955e598f0659043610a3fd00f74d7beb76"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005a7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f18b70500baf80c66b8996c6f8766efbafc0cec263666f30f703bca0f799cbd0066b92d0b00000f32f30f01e867660f383c97208e0000ba4300ec440f20c0663509000000440f22c0363e0f1c830060", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x3000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180155e7cc6b9cb725104ebcda7e4d4e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) getdents64(r2, &(0x7f0000000380)=""/160, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r9, 0xb13, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4, 0x12a}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$netlink(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)}, 0x2404c880) [ 160.291250][ T1480] usb 4-1: new high-speed USB device number 51 using dummy_hcd 23:41:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1f, 0x1f, 0x52, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x20, 0x7801, 0x9, 0x5}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15e, 0x15e, 0x3, [@datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x2, 0xcbaa, 0x2}, {0x5, 0x80, 0x7}, {0x3, 0x2d3, 0x8}], "974f30"}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @struct={0x3, 0x4, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x1, 0x4}, {0xe, 0x3, 0x80000000}, {0xe, 0x3, 0xffffffff}, {0x1, 0x2, 0x3f}]}, @fwd={0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x100006, 0x5}, {0x3, 0x4}, {0xc}, {0xe, 0x4}, {0x4, 0x1}]}, @enum={0x9, 0xa, 0x0, 0x6, 0x4, [{0x9, 0x9}, {0x1, 0x40}, {0x0, 0x7}, {0x6}, {0x2, 0x5}, {0x4, 0x1000}, {0x6, 0x1}, {0x5, 0x8000}, {0x3, 0xe1}, {0xc, 0xffffffff}]}, @datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x8, 0x80000000}], "77b1c0"}]}, {0x0, [0x0]}}, &(0x7f0000000640)=""/64, 0x17b, 0x40, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x23, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xffff8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xee, &(0x7f00000003c0)=""/238, 0x41000, 0x12, '\x00', r3, 0x21, r4, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x10, 0x9, 0x5}, 0x10, 0x0, r1, 0x8, 0x0, &(0x7f0000000740)=[{0x3, 0x4, 0x8, 0x7}, {0x5, 0x4, 0xb}, {0x3, 0x3, 0xe, 0x9}, {0x5, 0x2, 0xe, 0x8}, {0x1, 0x1, 0x6, 0x6}, {0x2, 0x5, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xb}, {0x0, 0x4, 0xa, 0x7}], 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) brk(0x0) 23:41:23 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000300)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:41:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) [ 160.385374][ T4418] netlink: 'syz-executor.1': attribute type 298 has an invalid length. [ 160.416052][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x1 [ 160.424326][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 23:41:23 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x8, 0x0, r0, 0x0}]) r3 = gettid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000016c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)=0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000200)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x9) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0, 0x0}, &(0x7f00000024c0)=0xc) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) newfstatat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002780)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, 0x0}, &(0x7f0000002800)=0xc) syz_fuse_handle_req(r0, &(0x7f0000000400)="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", 0x2000, &(0x7f0000002940)={&(0x7f0000000000)={0x50, 0x0, 0x9, {0x7, 0x27, 0x81c, 0x20040, 0x8, 0x1, 0x100, 0x3}}, &(0x7f0000000080)={0x18, 0x0, 0x9, {0x7}}, &(0x7f00000000c0)={0x18, 0x0, 0x7ff, {0x761}}, &(0x7f0000000100)={0x18, 0x0, 0x4bd, {0x1ff}}, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x1, {0x3}}, &(0x7f0000000180)={0x28, 0x0, 0x32c, {{0x0, 0xffff, 0x2, r3}}}, &(0x7f00000001c0)={0x60, 0xfffffffffffffffe, 0xff, {{0x81, 0xbee2, 0x7, 0x1, 0x5, 0x1, 0xffff0001, 0x1}}}, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x1, {0x200}}, &(0x7f0000000280)={0x19, 0x0, 0xffffffff, {'^.^&/\']\'\x00'}}, &(0x7f00000002c0)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x19}}, &(0x7f0000002400)={0x78, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x4, 0x3, 0x0, {0x5, 0xd147, 0x7, 0x200, 0x400, 0x6, 0x1, 0xff, 0xffffffe0, 0x8000, 0x7, r7, 0xee01, 0xff, 0xdc9}}}, &(0x7f0000002500)={0x90, 0x0, 0x80000001, {0x2, 0x0, 0x80000000, 0x4, 0x4, 0x7a, {0x2, 0xaa8b, 0x98, 0x10000000000, 0xac, 0x6f, 0x2, 0x2, 0x0, 0x1000, 0x19ef, r9, r10, 0x5, 0x7}}}, &(0x7f00000025c0)={0x10, 0x0, 0xffffffffffffffff}, &(0x7f00000026c0)={0xb0, 0x0, 0xffffffff, [{{0x2, 0x0, 0x401, 0x8732, 0x5, 0xffff, {0x2, 0x5, 0x40, 0x0, 0x3, 0x3, 0x6, 0x80000000, 0x0, 0xc000, 0x81, r12, r13, 0x4, 0xd0}}, {0x5, 0x7ff, 0x1, 0x7fff, '\\'}}]}, &(0x7f0000002840)={0xa0, 0xb, 0x6, {{0x1, 0x3, 0x8000, 0xffffffffffffffff, 0x8, 0x5, {0x6, 0xff, 0x9, 0x64, 0x7, 0x0, 0xfff, 0x0, 0x7, 0xc000, 0x7, r14, r15, 0x9, 0x3f}}, {0x0, 0x1}}}, &(0x7f0000002900)={0x20, 0x0, 0x6e98000000000, {0x4, 0x0, 0x8, 0x7fffffff}}}) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bbe}, {{}, 0x0, @in=@multicast2}}, 0xe8) [ 160.431800][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.439102][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.446714][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.454303][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.461814][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.469156][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.476657][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.484152][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.492683][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.500018][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.507457][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.514898][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.522268][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 23:41:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000e00)='ext4_mark_inode_dirty\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) close(r6) sendmsg$tipc(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) epoll_create(0x100) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffd9}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008c43f000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) [ 160.529517][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.536983][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.544380][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.551938][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.559223][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.567076][ T4364] UDC core: couldn't find an available UDC or it's busy: -16 [ 160.574591][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.578767][ T4364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.589536][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.597032][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.604673][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.612885][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.613096][ T4434] syz-executor.1[4434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.620371][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.620880][ T4434] syz-executor.1[4434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.632298][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.658033][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.665909][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.673491][ T1480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.684490][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.691976][ T1480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.701827][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.709150][ T1480] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 160.718278][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 160.725737][ T323] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 23:41:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10050600e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23:41:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0xd0d4, &(0x7f0000000780)=ANY=[], 0xff, 0x23f, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x8004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendfile(r0, r1, 0x0, 0x1000000201005) [ 160.733212][ T1480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.748342][ T323] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.758426][ T1480] usb 4-1: config 0 descriptor?? 23:41:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 160.787173][ T4441] loop0: detected capacity change from 0 to 128 [ 160.803738][ T302] asix 5-1:0.0 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 92:d1:2c:4e:b9:6e [ 160.820663][ T30] audit: type=1400 audit(1712446884.235:318): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 160.844286][ T302] usb 5-1: USB disconnect, device number 27 [ 160.850179][ T302] asix 5-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 160.888878][ T30] audit: type=1400 audit(1712446884.295:319): avc: denied { getattr } for pid=4445 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=5 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.928673][ T30] audit: type=1400 audit(1712446884.295:320): avc: denied { read } for pid=4456 comm="cmp" name="resolv.conf" dev="tmpfs" ino=5 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.955822][ T30] audit: type=1400 audit(1712446884.295:321): avc: denied { open } for pid=4456 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=5 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.981654][ T30] audit: type=1400 audit(1712446884.325:322): avc: denied { unlink } for pid=4457 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=9429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.025288][ T30] audit: type=1400 audit(1712446884.435:323): avc: denied { create } for pid=4459 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.047416][ T30] audit: type=1400 audit(1712446884.435:324): avc: denied { write } for pid=4459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=9448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 23:41:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/71, 0x47}], 0x1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/185, 0xb9}], 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge_slave_0\x00'}) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/pid_for_children\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="852755f4b7b7cc5d80f639370a9b741a7de00988838da9d0ea9da77281bafaa405e45bb8633baa6ca5e99ac0e36802bc2f1a46f166c423bf565c30f1272dbe1213649b038062fc46232078a5ef0bfd3b390d7c0fb3737cdb990fb9dec584c7a13bd20fa2cba2f780205c518ec5302a4ec7f270db1a1305ac9763498654246fa8108a5a5c39e0c8299a4dc8b12bcc7ee7137f6dce35d147bc979bcedc14233ab8912758a4b629c3ecd84e9b45a106cbeffc3abb820e54ff0396b8fe83a9511946a03eb21b261be4456eabf61cf640d17fa62ac4aaf9515597a9082006a79fe1a0371de885908fb981", 0xe8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100001f01e02e00", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000040}}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="e2", 0x1}, {0x0}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x1}}], 0x2, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x5) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000a80)=0x10, 0x800) sendmsg$sock(r7, &(0x7f0000000980)={&(0x7f0000000900)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="30a7b2bf23c3133f05b28756df6c1d1adae3a48d914ee57c", 0x18}], 0x1}, 0x40000c0) socket$nl_route(0x10, 0x3, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x48, 0x0, 0x4004000}, 0x0) 23:41:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000180)='./file0/bus\x00', 0xf, 0x0) 23:41:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) (async) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r1}) (async) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) r4 = request_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000400)='-/\x00', r3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r4) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x8800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1b2000}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xda}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @exit, @call={0x85, 0x0, 0x0, 0x62}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r5, r5], &(0x7f00000002c0)=[{0x2, 0x2, 0x4, 0x4}, {0x3, 0x5, 0x3, 0x9}, {0x4, 0x1, 0x2, 0x8}, {0x0, 0x3, 0x0, 0x4}, {0x5, 0x4}, {0x3, 0x1, 0x10, 0x4}, {0x4, 0x1, 0xe, 0x4}], 0x10, 0x7}, 0x90) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=.:file0,upperdir=./bus,index=on']) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 23:41:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000180), 0x4) 23:41:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 161.373006][ T4478] overlayfs: overlapping lowerdir path [ 161.393264][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x1 [ 161.400544][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.416884][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.434219][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.448812][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.457274][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.465424][ T1480] usb 4-1: string descriptor 0 read error: -22 [ 161.527349][ T4492] device bridge1 entered promiscuous mode [ 161.553641][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.562918][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 23:41:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000040)={0x20, 0x23, 0xf, {0xf, 0x22, "1ece7a3cc4c2a0e5917276eee9"}}, &(0x7f0000000280)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "5ebdd6315eff93c396f2e7fc853da22dd37b82acb70998d43186b33756bb754003b1aaa6de9b1fbdc5eb2fee772600de15a1c936f8a33bedb3ce02153781395e58cc13d8ae4cf286e91e197d3372db2e240826bc0f37c8fe06d716bf27a63173da0bf050fdde1a1aa9948ff4ed3bd6af74dd1d0bf75717c6bf54c906147b0a8c382338734cef62d050f56b9678d915203f1b82a13a2ce0b9ef8f827d5ce7eb4528bc4d51196dda8e98033af23f186cd54f2549d89fe74f9602b1a3d46d358b4d4502d18be39b990a47943c78ff40c095e73af34c9b0a0a932bafbfad8d96e5b3ec"}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x4e8}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0x26, "269cb57b1e9805ba5408ebed41aec60da395cced73e4f2e2d48d18869a4783189a19e3882a0e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0xc8, "b1970865fed910a91d5e5756e0b5fba70a6042da25b1da713346ad12c4f93b895fea31d4ddabbe39fcc7875e37407ddec2c601e80eae337d9ddb10b73b43beca4d819ea97f88b1f4fae55541ed9b41fd6de934270442d4eb15c22d9d7a9014a380879693bd12ab46da9f0a7703f1db0c3a6a9734fe50cf4b08ebb6dd2e8e89a4f0c90a11589d0ef3202ca7e95606dca4edae6d8d2f7df8f6a3bfa2806764814dbdab8772645d575dcf83ca212a097d9b318342e5dc0c522b21c5f90976f5abeb169f0021df2983d5"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x33}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7c}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022070700000808b3c5fea2d494c4e7e6cd6519a489af9f3908c666a0bf552a87e2bf33e7eee66a4bb4b5780989663f2e02acf60ab2679663bd76d120f9d257b44d00559ce8177c3b759102455ab6d9ce8328c87db71e32da358eba20fcbda5664c9458c9d24a07df6940cc50e1ba7a55eb6b1eb2f71c9c11040a190912d482e8e9bb7ea37fe2eb7f2a8e0121a17dde39ad97af42ede56d3d4bb790f42bc98ac6cf5b3b4fff5f97de3988"], 0x0}, 0x0) [ 161.570630][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.579635][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.588925][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.600776][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 23:41:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xab, 0x1b, 0xb3, 0x8, 0x789, 0x160, 0x1648, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x54, 0x42, 0xdf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="359759dbdc82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x6, 0xbe, {0xbe, 0xf, "ecd470ce3f43e0c90b6437b31ff50be515f0d3d037a2a34ffb22d6e83f3679b4d00ebfce77ff4f2fd832e69dcf123833ef1f4801a02d6c3ddb2fa7a4d5b1cca6ecd57eb7eb2bf7f9bbb7566e72e087094d45655882c1e4b1b00e5e3f5f900f1d61100783d074d3037851e0b03036aa47f2fe8e548ba5603d1d1ac0cfa564b5559ecbc72a31f204cd55cb848ff4842b7c44584c067c3d765cc8fd9bbcdf00823de073433ef0c8ee67818697ca765ac4be070aeb7d2f1770d5270b6b2c"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000001400)=ANY=[@ANYBLOB="000f24000000050f2400040710020a94200003100b0a10030204003f083f000b10010882100701810001ae84abe669cbc452819f848d7c6e3f565107963bc54718b5f57eff6a7b5ff0ae26fb07b953a4ee52ed000fcafd92e8f640290fdf8869ea85bdf0158dc9c488117ed38eb5691313979be68d5ab1f2c200fef9ce3f554f450acda4cedfdb34282cb4454d76d1a885fcc1b81962f5c6c1b530f0f98480c56ba6e3033668e33e398eb16c3602b763632723ee55794c0dff6350299da923b306d1aba3c4756980bcecc214f3049971a121963188b830ad6a5d790ac5835e2a50d851625cd5d77905fff0c7ad861a69"], &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x1f, 0x6, "d65d1fdd", "e8c0a620"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x4, 0x7f, 0x2, 0x852, 0x6}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0xd, 0x8b, "11760af52706ff1a4c86bdc8882cf5801fb5cf0aeb5fe15dc0b7b84e9b545d12e27d15060604ea95cf08d0bb1060ad2e5fc5ce314263cb750042b4a1be993e3038ee340349d45a0cd8bcd64c041516cc8ab6876e6c2d7302b8a9a6f5604a94ce2a279fdeb9d2436415e86e092178b1d63a1e0bda1d721803f04401c793499c26e6d2938d6db2fb8601ff35"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x10, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000840)={0x40, 0xb, 0x2, "d9d2"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "fe05"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xf800}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x21, 0x30, {0x30, 0x1, "26c8593d392bac2ffb2987f134745b04de8632e6cea92ec744b98ac069e784ecf966c2af6c36f950e7c0cef7aabd"}}, &(0x7f0000001c80)={0x0, 0x3, 0xea, @string={0xea, 0x3, "76f1c503962080d79f4acb55ddc2b07626c40d1f1ed361f8c8c1816bd1e57c508a9cb40a01536f3db2714f34fb71c8056d7b524b4ce7f6e2be007f16255a35ee827861673d7efe7340fa9058f9d017aa2cb7e29ba1d7bd1044a11943f54e218fc0731c19c37b799bc238f00ba68a790d4e649e36f6325f07ed15bd74eccc7e3d2e201d224030dbcf39bca4d9bf30ff4679feabde745998d4ddde67e134fbd46dc2905dfae38dfebf803666a0beb59f93292031d1c8b5a1cf168357f2ffc468d6ad78160941705c44cb04785e0a689d26552b4af27ccd7b5c65edd41f2b92ad62b97174ab0ea12385"}}}, &(0x7f0000001fc0)={0x44, &(0x7f0000001dc0)={0x60, 0xe, 0x38, "fe42c29c9ba844ad6183871bb5ef1f0cdf44a3b43ae9b8f607cc2ceff60ec9cc2f22ea66851c6d58197df7db51f02159930f48856b416d00"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001e80)={0x20, 0x81, 0x1, "81"}, &(0x7f0000001ec0)={0x20, 0x82, 0x2, "a876"}, &(0x7f0000001f00)={0x20, 0x83, 0x1, 't'}, &(0x7f0000001f40)={0x20, 0x84, 0x2, "ec4a"}, &(0x7f0000001f80)={0x20, 0x85, 0x3, "98931b"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)=@can_delroute={0x60, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8b4aa37b79a37e5a"}}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_FILTER={0xc}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "c348e4c50c19c068"}, 0x1}}]}, 0x60}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x0, 0xb4, {0xb4, 0x31, "a0610963ce7c23342ffaaa61ad039694301149caafba612be8277bfbf1a6bbb9679096276209a0400b22dc338b35b1f3be502eadaae1a39e6e4f595b20191ef6aa0fece95f344c9eb4c55681517b48855211dee5336b6f7d245b024c496596436492708583c0e74fc9a1b655aacfdc7cf96225ff9d751d31e0a11ee0a27a2e3532318228b0482bbc2a0d1594f357da90efee1b884baf4c200af15e211ac7b558bc7975e487e12d554c470330700354dc6923"}}, &(0x7f0000002100)={0x0, 0x3, 0x38, @string={0x38, 0x3, "58df05dbcef7be5aaf05c49a725e7f2237e02df286e70a3c98b09bd3daf0c172425e2e2bc021794d98cad5d9a158ccadc5cccbb30bf4"}}, &(0x7f0000002140)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x8, 0x7f, 0xc024, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x1, 0xf00, 0x0, [0xff00, 0xf0, 0x3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x1ff}]}}, &(0x7f0000002180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x1, 0x4, "3ddc3d86", "cf4f6ceb"}}, &(0x7f00000021c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x9, 0x0, 0x9, 0x6}}}, &(0x7f00000027c0)={0x84, &(0x7f0000002240)={0x40, 0x31, 0x99, "c0c18e28a6045f4eb0cd84c552535499d2ccc7a1674c04ad72cd739cb3ea706df9e8f432782652cc0f3768907e3282fbe682c8b2363f65ac132d110ddd7dceb647061f9682cd1a977b1e51c2f0f481cdf17d227f8f1305dac016c4759c514f738818712362c7e8686cbaedcfb6087763fd1d9474fd251f950689bf9cf0ade5dd7da444614f71b4064d7f14ecbe274d0fb5974081061ac822b7"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000002540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002580)={0x40, 0xb, 0x2, '%S'}, &(0x7f00000025c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002600)={0x40, 0x13, 0x6, @random="5e58d52b9dea"}, &(0x7f0000002640)={0x40, 0x17, 0x6}, &(0x7f0000002680)={0x40, 0x19, 0x2, "e62b"}, &(0x7f00000026c0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000002700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002740)={0x40, 0x1e, 0x1, 0x32}, &(0x7f0000002780)={0x40, 0x21, 0x1, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x3a, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c100806", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000003c0)={0x0, 0x24, 0x3, {0x3, 0x5, 'x'}}, &(0x7f0000001500)={0x0, 0x3, 0x18, @string={0x18, 0x3, "143b88fffb1f8ea555cf16a2791008f6ae839929509b"}}, &(0x7f0000001540)={0x0, 0xf, 0x10b, {0x5, 0xf, 0x10b, 0x3, [@generic={0xf8, 0x10, 0xa, "3320d77cb622e4546acfc7b86c6eecdb4eaa187547756ecfab383bb132f7b8568b539edc328044d86fcc1c0b0b98418a9f75c4cf4d39e93084d3b2a3e03b40fbcb16e9254e40bfedc759574389e7c47c7985130077315b8b61c00a454a4a774c0ae8f1559da4bd542234640246db94e5de1e78d01b4462151243d2769a87cb709079d33e399e4e9a3ce0ccfbd1e8a6c7f299ee972eeecb99a180618cdd27fcdb2bb77b804bb584d1028e9ea98b08dece9598ea315f250eb5f14835ed223de3231bb6784444e09a7eb0c702cc91f586c32c9bba75888aefe8f29278cb979d5f18ac4a8884ec1efdb001a554e2ef50bef9045d960f5e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x17, 0x80, 0x80, 0x7ff, 0x20}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xaa, 0x0, 0x2, 0x1f, "4c5450ac", 'mrs?'}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0xff, 0xed, 0x7, 0x9, 0x8000}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001740)={0x0, 0xf, 0x4b, "0c8960a6069d03c2afcc6dca96360fe57f42ae80f3a08af0eeca926fc0b6dc2332ca80fa9757b473e239164f0570521104a087aefbe0f720db3fa5ebcdb6b28ee3c727511f5b827d6e4ceb"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f00000018c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001900)={0x40, 0x9, 0x1, 0xe1}, &(0x7f0000001940)={0x40, 0xb, 0x2, "96b2"}, &(0x7f0000001980)={0x40, 0xf, 0x2, 0x3ff0}, &(0x7f00000019c0)={0x40, 0x13, 0x6}, &(0x7f0000001a00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x19, 0x2}, &(0x7f0000001a80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0xb4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x9}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x0, 0x7}, 0x4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) dup3(r6, r5, 0x0) [ 161.626695][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.637778][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.645419][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.653704][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.661067][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.668963][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.677056][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.684621][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.692050][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.699307][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.706758][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.714165][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.722271][ T1480] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007E/input/input45 [ 161.734081][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.741659][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.749347][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.756869][ T1480] uclogic 0003:256C:006D.007E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 161.769403][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 23:41:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x894, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x40, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800003, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 161.776660][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.783863][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.791036][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.798293][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.805505][ T302] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 161.813855][ T302] hid-generic 0000:0000:0000.007F: hidraw1: HID v0.00 Device [syz0] on syz0 23:41:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/rt_cache\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000700)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc0}}}, 0xb8}}, 0x0) pread64(r0, &(0x7f00000000c0)=""/115, 0x73, 0x0) lseek(r0, 0x3ff, 0x0) 23:41:25 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 161.923818][ T302] usb 4-1: USB disconnect, device number 51 [ 161.941672][ T322] usb 1-1: new high-speed USB device number 34 using dummy_hcd 23:41:25 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) [ 162.081246][ T323] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 162.181506][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 162.321330][ T322] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=16.48 [ 162.330227][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.340670][ T322] usb 1-1: config 0 descriptor?? 23:41:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:25 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) 23:41:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 162.441594][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.452490][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.462846][ T323] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 162.471932][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:41:25 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 162.496194][ T323] usb 3-1: config 0 descriptor?? 23:41:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r3, r4, 0x0) sendfile(r5, r2, 0x0, 0x101d0) 23:41:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 162.601343][ T322] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) [ 162.718905][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x1 [ 162.726333][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.735702][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.743004][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.750168][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.757613][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.765073][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.772506][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.780048][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.787577][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.795067][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.803971][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.811231][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.818405][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.825738][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.832959][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.840148][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.847378][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.854560][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.861783][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.868960][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.876185][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.883403][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.890845][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.898111][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.905289][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.912498][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.919661][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.926902][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.931275][ T302] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 162.934114][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.948650][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.955909][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 162.963089][ T26] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 162.970656][ T26] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 163.013633][ T323] kye 0003:0458:5010.0081: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 163.029267][ T323] kye 0003:0458:5010.0081: tablet-enabling feature report not found [ 163.037409][ T323] kye 0003:0458:5010.0081: tablet enabling failed 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) [ 163.213443][ T323] usb 3-1: USB disconnect, device number 25 [ 163.229653][ T4501] UDC core: couldn't find an available UDC or it's busy: -16 [ 163.237282][ T4501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.247640][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x1 [ 163.255194][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.262664][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.269861][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.277263][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.284616][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.291981][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.299228][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.306626][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.314072][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.321321][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.321496][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.332170][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.339344][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.348840][ T302] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.356230][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.364878][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.372143][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.386296][ T302] usb 5-1: config 0 descriptor?? [ 163.387163][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.399240][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.406636][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 23:41:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 163.414014][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.421313][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.428571][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.438398][ T322] asix 1-1:0.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, aa:03:81:15:c2:ca [ 163.449977][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.457278][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.475302][ T322] usb 1-1: USB disconnect, device number 34 [ 163.482831][ T322] asix 1-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 163.492733][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.500003][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.510669][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.519997][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.527483][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.534944][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.543491][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.552668][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.562268][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.575480][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.586269][ T1353] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 163.598493][ T26] ================================================================== [ 163.606381][ T26] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 163.614016][ T26] Read of size 8 at addr ffff8881073fec70 by task kworker/1:0/26 [ 163.621566][ T26] [ 163.623740][ T26] CPU: 1 PID: 26 Comm: kworker/1:0 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 163.633369][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 163.643269][ T26] Workqueue: events linkwatch_event [ 163.648298][ T26] Call Trace: [ 163.651425][ T26] [ 163.654205][ T26] dump_stack_lvl+0x151/0x1b7 [ 163.658714][ T26] ? io_uring_drop_tctx_refs+0x190/0x190 [ 163.664181][ T26] ? panic+0x751/0x751 [ 163.668087][ T26] ? destroy_list_workfn+0x229/0x2e0 [ 163.673211][ T26] print_address_description+0x87/0x3b0 [ 163.678592][ T26] kasan_report+0x179/0x1c0 [ 163.682930][ T26] ? __kasan_check_write+0x14/0x20 [ 163.687878][ T26] ? __list_del_entry_valid+0xa6/0x120 [ 163.693172][ T26] ? __list_del_entry_valid+0xa6/0x120 [ 163.698464][ T26] __asan_report_load8_noabort+0x14/0x20 [ 163.703933][ T26] __list_del_entry_valid+0xa6/0x120 [ 163.709054][ T26] process_one_work+0x458/0xc10 [ 163.713747][ T26] worker_thread+0xad5/0x12a0 [ 163.718257][ T26] kthread+0x421/0x510 [ 163.722163][ T26] ? worker_clr_flags+0x180/0x180 [ 163.727022][ T26] ? kthread_blkcg+0xd0/0xd0 [ 163.731450][ T26] ret_from_fork+0x1f/0x30 [ 163.735701][ T26] [ 163.738563][ T26] [ 163.740740][ T26] Allocated by task 322: [ 163.744813][ T26] ____kasan_kmalloc+0xdb/0x110 [ 163.749499][ T26] __kasan_kmalloc+0x9/0x10 [ 163.753842][ T26] __kmalloc+0x13a/0x270 [ 163.757921][ T26] kvmalloc_node+0x1f0/0x4d0 [ 163.762347][ T26] alloc_netdev_mqs+0x8c/0xc90 [ 163.766946][ T26] alloc_etherdev_mqs+0x33/0x40 [ 163.771634][ T26] usbnet_probe+0x1ff/0x2830 [ 163.776059][ T26] usb_probe_interface+0x5b6/0xa90 [ 163.781022][ T26] really_probe+0x28d/0x970 [ 163.785346][ T26] __driver_probe_device+0x1a0/0x310 [ 163.790467][ T26] driver_probe_device+0x54/0x3d0 [ 163.795326][ T26] __device_attach_driver+0x2c5/0x470 [ 163.800534][ T26] bus_for_each_drv+0x183/0x200 [ 163.805223][ T26] __device_attach+0x312/0x510 [ 163.809820][ T26] device_initial_probe+0x1a/0x20 [ 163.814681][ T26] bus_probe_device+0xbe/0x1e0 [ 163.819280][ T26] device_add+0xb60/0xf10 [ 163.823449][ T26] usb_set_configuration+0x190f/0x1e80 [ 163.828742][ T26] usb_generic_driver_probe+0x8b/0x150 [ 163.834037][ T26] usb_probe_device+0x144/0x260 [ 163.838723][ T26] really_probe+0x28d/0x970 [ 163.843064][ T26] __driver_probe_device+0x1a0/0x310 [ 163.848185][ T26] driver_probe_device+0x54/0x3d0 [ 163.853055][ T26] __device_attach_driver+0x2c5/0x470 [ 163.858257][ T26] bus_for_each_drv+0x183/0x200 [ 163.862939][ T26] __device_attach+0x312/0x510 [ 163.867540][ T26] device_initial_probe+0x1a/0x20 [ 163.872397][ T26] bus_probe_device+0xbe/0x1e0 [ 163.877000][ T26] device_add+0xb60/0xf10 [ 163.881165][ T26] usb_new_device+0x1034/0x1bf0 [ 163.885851][ T26] hub_event+0x2def/0x4770 [ 163.890108][ T26] process_one_work+0x6bb/0xc10 [ 163.894795][ T26] worker_thread+0xad5/0x12a0 [ 163.899305][ T26] kthread+0x421/0x510 [ 163.903213][ T26] ret_from_fork+0x1f/0x30 [ 163.907463][ T26] [ 163.909634][ T26] Freed by task 322: [ 163.913366][ T26] kasan_set_track+0x4b/0x70 [ 163.917792][ T26] kasan_set_free_info+0x23/0x40 [ 163.922564][ T26] ____kasan_slab_free+0x126/0x160 [ 163.927514][ T26] __kasan_slab_free+0x11/0x20 [ 163.932120][ T26] slab_free_freelist_hook+0xbd/0x190 [ 163.937349][ T26] kfree+0xc8/0x220 [ 163.940967][ T26] kvfree+0x35/0x40 [ 163.944612][ T26] netdev_freemem+0x3f/0x60 [ 163.948949][ T26] netdev_release+0x7f/0xb0 [ 163.953289][ T26] device_release+0x95/0x1c0 [ 163.957718][ T26] kobject_put+0x178/0x260 [ 163.961971][ T26] put_device+0x1f/0x30 [ 163.965963][ T26] free_netdev+0x34f/0x440 [ 163.970217][ T26] usbnet_disconnect+0x245/0x390 [ 163.974989][ T26] usb_unbind_interface+0x1fa/0x8c0 [ 163.980025][ T26] device_release_driver_internal+0x50b/0x7d0 [ 163.985924][ T26] device_release_driver+0x19/0x20 [ 163.990873][ T26] bus_remove_device+0x2f8/0x360 [ 163.995648][ T26] device_del+0x663/0xe90 [ 163.999813][ T26] usb_disable_device+0x380/0x720 [ 164.004673][ T26] usb_disconnect+0x32a/0x890 [ 164.009188][ T26] hub_event+0x1d42/0x4770 [ 164.013440][ T26] process_one_work+0x6bb/0xc10 [ 164.018126][ T26] worker_thread+0xe02/0x12a0 [ 164.022639][ T26] kthread+0x421/0x510 [ 164.026546][ T26] ret_from_fork+0x1f/0x30 [ 164.030798][ T26] [ 164.032968][ T26] Last potentially related work creation: [ 164.038524][ T26] kasan_save_stack+0x3b/0x60 [ 164.043037][ T26] __kasan_record_aux_stack+0xd3/0xf0 [ 164.048242][ T26] kasan_record_aux_stack_noalloc+0xb/0x10 [ 164.053886][ T26] insert_work+0x56/0x320 [ 164.058051][ T26] __queue_work+0x92a/0xcd0 [ 164.062393][ T26] queue_work_on+0x105/0x170 [ 164.066818][ T26] usbnet_link_change+0xeb/0x100 [ 164.071591][ T26] usbnet_probe+0x1dd3/0x2830 [ 164.076105][ T26] usb_probe_interface+0x5b6/0xa90 [ 164.081052][ T26] really_probe+0x28d/0x970 [ 164.085390][ T26] __driver_probe_device+0x1a0/0x310 [ 164.090514][ T26] driver_probe_device+0x54/0x3d0 [ 164.095374][ T26] __device_attach_driver+0x2c5/0x470 [ 164.100592][ T26] bus_for_each_drv+0x183/0x200 [ 164.105267][ T26] __device_attach+0x312/0x510 [ 164.109868][ T26] device_initial_probe+0x1a/0x20 [ 164.114730][ T26] bus_probe_device+0xbe/0x1e0 [ 164.119378][ T26] device_add+0xb60/0xf10 [ 164.123495][ T26] usb_set_configuration+0x190f/0x1e80 [ 164.128790][ T26] usb_generic_driver_probe+0x8b/0x150 [ 164.134083][ T26] usb_probe_device+0x144/0x260 [ 164.138773][ T26] really_probe+0x28d/0x970 [ 164.143110][ T26] __driver_probe_device+0x1a0/0x310 [ 164.148230][ T26] driver_probe_device+0x54/0x3d0 [ 164.153092][ T26] __device_attach_driver+0x2c5/0x470 [ 164.158387][ T26] bus_for_each_drv+0x183/0x200 [ 164.163078][ T26] __device_attach+0x312/0x510 [ 164.167680][ T26] device_initial_probe+0x1a/0x20 [ 164.172533][ T26] bus_probe_device+0xbe/0x1e0 [ 164.177133][ T26] device_add+0xb60/0xf10 [ 164.181304][ T26] usb_new_device+0x1034/0x1bf0 [ 164.185985][ T26] hub_event+0x2def/0x4770 [ 164.190240][ T26] process_one_work+0x6bb/0xc10 [ 164.194925][ T26] worker_thread+0xad5/0x12a0 [ 164.199440][ T26] kthread+0x421/0x510 [ 164.203349][ T26] ret_from_fork+0x1f/0x30 [ 164.207599][ T26] [ 164.209770][ T26] The buggy address belongs to the object at ffff8881073fe000 [ 164.209770][ T26] which belongs to the cache kmalloc-4k of size 4096 [ 164.223655][ T26] The buggy address is located 3184 bytes inside of [ 164.223655][ T26] 4096-byte region [ffff8881073fe000, ffff8881073ff000) [ 164.236934][ T26] The buggy address belongs to the page: [ 164.242404][ T26] page:ffffea00041cfe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1073f8 [ 164.252469][ T26] head:ffffea00041cfe00 order:3 compound_mapcount:0 compound_pincount:0 [ 164.260629][ T26] flags: 0x4000000000010200(slab|head|zone=1) [ 164.266637][ T26] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 164.275056][ T26] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 164.283470][ T26] page dumped because: kasan: bad access detected [ 164.289721][ T26] page_owner tracks the page as allocated [ 164.295274][ T26] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 308, ts 20534735234, free_ts 20522036915 [ 164.315847][ T26] post_alloc_hook+0x1a3/0x1b0 [ 164.320444][ T26] prep_new_page+0x1b/0x110 [ 164.324782][ T26] get_page_from_freelist+0x3550/0x35d0 [ 164.330170][ T26] __alloc_pages+0x27e/0x8f0 [ 164.334593][ T26] new_slab+0x9a/0x4e0 [ 164.338497][ T26] ___slab_alloc+0x39e/0x830 [ 164.342923][ T26] __slab_alloc+0x4a/0x90 [ 164.347089][ T26] __kmalloc+0x16d/0x270 [ 164.351171][ T26] kvmalloc_node+0x1f0/0x4d0 [ 164.355598][ T26] alloc_netdev_mqs+0x8c/0xc90 [ 164.360197][ T26] rtnl_create_link+0x2e1/0x9d0 [ 164.364882][ T26] veth_newlink+0x2df/0xe20 [ 164.369222][ T26] rtnl_newlink+0x1495/0x2050 [ 164.373736][ T26] rtnetlink_rcv_msg+0x951/0xc40 [ 164.378508][ T26] netlink_rcv_skb+0x1cf/0x410 [ 164.383110][ T26] rtnetlink_rcv+0x1c/0x20 [ 164.387362][ T26] page last free stack trace: [ 164.391877][ T26] free_unref_page_prepare+0x7c8/0x7d0 [ 164.397170][ T26] free_unref_page+0xe8/0x750 [ 164.401684][ T26] __free_pages+0x61/0xf0 [ 164.405850][ T26] __free_slab+0xec/0x1d0 [ 164.410013][ T26] __unfreeze_partials+0x165/0x1a0 [ 164.414964][ T26] put_cpu_partial+0xc4/0x120 [ 164.419476][ T26] __slab_free+0x1c8/0x290 [ 164.423729][ T26] ___cache_free+0x109/0x120 [ 164.428160][ T26] qlink_free+0x4d/0x90 [ 164.432147][ T26] qlist_free_all+0x44/0xb0 [ 164.436487][ T26] kasan_quarantine_reduce+0x15a/0x180 [ 164.441780][ T26] __kasan_slab_alloc+0x2f/0xe0 [ 164.446482][ T26] slab_post_alloc_hook+0x53/0x2c0 [ 164.451590][ T26] kmem_cache_alloc_trace+0xf9/0x210 [ 164.456710][ T26] kobject_uevent_env+0x269/0x700 [ 164.461571][ T26] kobject_uevent+0x1f/0x30 [ 164.465923][ T26] [ 164.468098][ T26] Memory state around the buggy address: [ 164.473551][ T26] ffff8881073feb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.481448][ T26] ffff8881073feb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.489349][ T26] >ffff8881073fec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.497243][ T26] ^ [ 164.504798][ T26] ffff8881073fec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.512696][ T26] ffff8881073fed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.520598][ T26] ================================================================== 23:41:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) [ 164.528491][ T26] Disabling lock debugging due to kernel taint [ 164.549300][ T1353] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz0] on syz0 23:41:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:28 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x20) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x9, 0x24, 0x80, 0x2}, {0x3f, 0x2, 0x1f, 0x1}, {0xe63, 0x2a, 0x1f, 0x75}, {0x7ffd, 0x4d, 0x27, 0x80}, {0x8, 0x40, 0x9, 0x3}, {0x1, 0x1, 0xff, 0xfffffe00}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) 23:41:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:28 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x4, {0x0, 0xfe}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 23:41:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="04630440505cff660bbfa064750db13a620372233fa28d75256d44d113c7f5bcab33fd82fb04919c51368daaba65d5b8dfb4b6ff769f6d93cbab40a62c48da61537e1515ef3bffd9469b06d351ff0000b065ceaaad0e07eb4cfae115b0fe6b468903411e8f8109dc69d35adda657cbe6181c4fc368e3a2ff81387c136c2200161b854e0ab31fd40fd25c84ae9e7363124155a744971cce5118f87f6384288d136801afb3b7934ba2f163a33652f4ef9d9fba248171fc2738bb0caa8a80329d7fc35e9df763f56aa1ec1833b71371f4ccd844359fa155bc59938cf721578efad7f8b9a65c277798516cf0bff0f57e84745ff56ac50a6b7377b5afa654b07f2c45ebcd89465d1bba56269a1f4ef7ea2a8aabb1ff71f30b383225adc83446fb73ee040797f1f8f3b135fce789b520a6f15b21b8485449b449ae622ed9cc9991fd3775cc15c44f573c9b1a669ecd2767ebb39dd39511a8b2867be3377c90a0b2660e23ede388818c44900bb136b79e31372bf25e372738a4ea6cfa0009a4fbdb3744af95dbfa421423193c680cf7a8889302693066d0df1f900782ccaf79122364d2f6fb2167911d5a1206c7e6733e966a19438ea4b029a8856ecc038f45f6aff5b150b4a86df33559b7921911d116e56c78adbb96cda8ce930c97ff666c60b892478f3034412807a762efdf595f2e904e1b09fa514f802b7b96c9327f3081cdc42fef1aecd6a340fa9f212f40"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000eb49749fc04a463489ff0000294636d73d08880027020000f8ffffffb743000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) unlink(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='dlm_lock_start\x00'}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) sendmmsg$inet(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000100)="c7ee341b8127e4367f1de4c38f4ba163a3b2f5843e3d2189acc6b6ba75c700e7631251c3cedff5c2fe253aafc7af521c36f1d78b4a5d8260314edc6620e97c1dda762f7a82e24f41b9a41310fa4869a09886dd1083367675b96a2a8bbcf90734d48de12c599fe1687b598aecdd8fe70e70121a8acbb2c9cf38fe24a596049eab947a4ddf8381da09b865cf2de45fb0cd0574cb84a6a27c0c37f08d8b4f0049e1e226952ffd0fd4952fafdc00a4c9e1d9ecbf5b4a7a0bbc26", 0xb8}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000002980)='|', 0x1}, {&(0x7f00000029c0)="f5", 0x1}, {&(0x7f0000002a00)="fe", 0x1}, {&(0x7f0000002a80)="f0", 0x1}, {&(0x7f00000028c0)='-', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="80", 0x1}, {&(0x7f0000000000)="054c508cb2547e1302c6c5e095d2b2ad93bd99cfcdfd48ff683372c51b476bcbd3b6abbcbe4c6c8991a39aebb0ff0ebd825f029f79de6300000000", 0x3b}, {&(0x7f0000002e40)='\x00', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000240)="c06940a8686be6575e44b48667d8738b70d318ea861eaf18e3737d0925cb82efc174e436b30093721a192cc28e9c6dce7850bf1dd7ea90d902e8319e0d2c5589a7f5954c7803a3b7d5075bbe9248254b4a5eaf62e587e301d70f374dfadfbc88b140f5537a4becfd7754adbd18f22a0130dc032843312bdf7f0018c979c5d78bd4dfe21fc6bfc9e9a1ac864490900778f89c23f989647b6ecd5dba55bb2d30504f56ef9aad0bf5b7a7a1b3e8c3e246164581a48b941b135f7a94287fa4d977b9b1baed41aedfadc4ee", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003200)="8c", 0x1}, {&(0x7f0000003300)="bf", 0x1}, {&(0x7f0000003400)="12", 0x1}, {&(0x7f00000034c0)="8f", 0x1}, {&(0x7f00000035c0)='_', 0x1}, {&(0x7f0000003600)="14", 0x1}], 0x6}}], 0x4, 0xf000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3d0, 0x2e8, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) setsockopt$sock_int(r8, 0x1, 0x4, &(0x7f0000000340)=0x7fffffff, 0x4) 23:41:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, 0x0, 0x0) 23:41:28 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) 23:41:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090f000000000000850000000e000000850000007d000000950000000094eebbd4736d63da3c3487b3a0ec41cc649dca4c6be7251d7b4a784e8beceaf55e3e621e6b2b1d3c2bc434607047499cf02635deb558d3e3362861d3bba41d9f925109dcb28509e860"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x1, 0x49b, &(0x7f0000000100)="$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") getdents64(r5, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x11) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000210000000c00018008000100", @ANYRES32=r2, @ANYBLOB="022d418d2017d3f48d98692ae7a888b17e708d9dc18e595473292303c90ee4a090266a26a5a35ef727d95a11b32ab857a8ee0f6f695cdaa97caaee6486a25e1b7272dc6bc5e893af19fb398e5f4a"], 0x20}}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0xc0506617, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000003000000000000000000573b5168515d100f31691dfe000000000000e90408295153ef2600000000000070d38300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000048dcf172600837666935d400f8d654939f12d7e6d00be2b3acd6a92d0a7a0e769bb1c34b23e679d8151eac638d5ed58cc27bca833907b9fee0603b9c22cf"]) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r11 = dup3(r8, r10, 0x0) read$snapshot(r11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0xffff, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007ba9461af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500e8000400000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 164.858538][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x1 [ 164.872139][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.880214][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.889889][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.897369][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 23:41:28 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 164.897413][ T4608] loop0: detected capacity change from 0 to 512 [ 164.908987][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.936010][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.937968][ T4608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 393: padding at end of block bitmap is not set 23:41:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 164.946411][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.967106][ T4608] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6150: Corrupt filesystem [ 164.967384][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 164.983576][ T4608] EXT4-fs (loop0): 2 truncates cleaned up [ 164.989208][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.990770][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.008832][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.010190][ T4608] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 165.016563][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.024019][ T302] usb 5-1: string descriptor 0 read error: -22 [ 165.031484][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.044684][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.052132][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.059488][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.066910][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.074309][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.081686][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.088958][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.096498][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.103867][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.111162][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.118641][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.126185][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.133575][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.140835][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.148211][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.155540][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.162820][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.170019][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.177240][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.184415][ T322] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 165.192489][ T4618] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended 23:41:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000040)={0x20, 0x23, 0xf, {0xf, 0x22, "1ece7a3cc4c2a0e5917276eee9"}}, &(0x7f0000000280)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "5ebdd6315eff93c396f2e7fc853da22dd37b82acb70998d43186b33756bb754003b1aaa6de9b1fbdc5eb2fee772600de15a1c936f8a33bedb3ce02153781395e58cc13d8ae4cf286e91e197d3372db2e240826bc0f37c8fe06d716bf27a63173da0bf050fdde1a1aa9948ff4ed3bd6af74dd1d0bf75717c6bf54c906147b0a8c382338734cef62d050f56b9678d915203f1b82a13a2ce0b9ef8f827d5ce7eb4528bc4d51196dda8e98033af23f186cd54f2549d89fe74f9602b1a3d46d358b4d4502d18be39b990a47943c78ff40c095e73af34c9b0a0a932bafbfad8d96e5b3ec"}}, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x4e8}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0x26, "269cb57b1e9805ba5408ebed41aec60da395cced73e4f2e2d48d18869a4783189a19e3882a0e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0xc8, "b1970865fed910a91d5e5756e0b5fba70a6042da25b1da713346ad12c4f93b895fea31d4ddabbe39fcc7875e37407ddec2c601e80eae337d9ddb10b73b43beca4d819ea97f88b1f4fae55541ed9b41fd6de934270442d4eb15c22d9d7a9014a380879693bd12ab46da9f0a7703f1db0c3a6a9734fe50cf4b08ebb6dd2e8e89a4f0c90a11589d0ef3202ca7e95606dca4edae6d8d2f7df8f6a3bfa2806764814dbdab8772645d575dcf83ca212a097d9b318342e5dc0c522b21c5f90976f5abeb169f0021df2983d5"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x33}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7c}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022070700000808b3c5fea2d494c4e7e6cd6519a489af9f3908c666a0bf552a87e2bf33e7eee66a4bb4b5780989663f2e02acf60ab2679663bd76d120f9d257b44d00559ce8177c3b759102455ab6d9ce8328c87db71e32da358eba20fcbda5664c9458c9d24a07df6940cc50e1ba7a55eb6b1eb2f71c9c11040a190912d482e8e9bb7ea37fe2eb7f2a8e0121a17dde39ad97af42ede56d3d4bb790f42bc98ac6cf5b3b4fff5f97de3988"], 0x0}, 0x0) 23:41:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xab, 0x1b, 0xb3, 0x8, 0x789, 0x160, 0x1648, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x54, 0x42, 0xdf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="359759dbdc82"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x6, 0xbe, {0xbe, 0xf, "ecd470ce3f43e0c90b6437b31ff50be515f0d3d037a2a34ffb22d6e83f3679b4d00ebfce77ff4f2fd832e69dcf123833ef1f4801a02d6c3ddb2fa7a4d5b1cca6ecd57eb7eb2bf7f9bbb7566e72e087094d45655882c1e4b1b00e5e3f5f900f1d61100783d074d3037851e0b03036aa47f2fe8e548ba5603d1d1ac0cfa564b5559ecbc72a31f204cd55cb848ff4842b7c44584c067c3d765cc8fd9bbcdf00823de073433ef0c8ee67818697ca765ac4be070aeb7d2f1770d5270b6b2c"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000001400)=ANY=[@ANYBLOB="000f24000000050f2400040710020a94200003100b0a10030204003f083f000b10010882100701810001ae84abe669cbc452819f848d7c6e3f565107963bc54718b5f57eff6a7b5ff0ae26fb07b953a4ee52ed000fcafd92e8f640290fdf8869ea85bdf0158dc9c488117ed38eb5691313979be68d5ab1f2c200fef9ce3f554f450acda4cedfdb34282cb4454d76d1a885fcc1b81962f5c6c1b530f0f98480c56ba6e3033668e33e398eb16c3602b763632723ee55794c0dff6350299da923b306d1aba3c4756980bcecc214f3049971a121963188b830ad6a5d790ac5835e2a50d851625cd5d77905fff0c7ad861a69"], &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x1f, 0x6, "d65d1fdd", "e8c0a620"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x4, 0x7f, 0x2, 0x852, 0x6}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0xd, 0x8b, "11760af52706ff1a4c86bdc8882cf5801fb5cf0aeb5fe15dc0b7b84e9b545d12e27d15060604ea95cf08d0bb1060ad2e5fc5ce314263cb750042b4a1be993e3038ee340349d45a0cd8bcd64c041516cc8ab6876e6c2d7302b8a9a6f5604a94ce2a279fdeb9d2436415e86e092178b1d63a1e0bda1d721803f04401c793499c26e6d2938d6db2fb8601ff35"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x10, 0x4}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000840)={0x40, 0xb, 0x2, "d9d2"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "fe05"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xf800}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x21, 0x30, {0x30, 0x1, "26c8593d392bac2ffb2987f134745b04de8632e6cea92ec744b98ac069e784ecf966c2af6c36f950e7c0cef7aabd"}}, &(0x7f0000001c80)={0x0, 0x3, 0xea, @string={0xea, 0x3, "76f1c503962080d79f4acb55ddc2b07626c40d1f1ed361f8c8c1816bd1e57c508a9cb40a01536f3db2714f34fb71c8056d7b524b4ce7f6e2be007f16255a35ee827861673d7efe7340fa9058f9d017aa2cb7e29ba1d7bd1044a11943f54e218fc0731c19c37b799bc238f00ba68a790d4e649e36f6325f07ed15bd74eccc7e3d2e201d224030dbcf39bca4d9bf30ff4679feabde745998d4ddde67e134fbd46dc2905dfae38dfebf803666a0beb59f93292031d1c8b5a1cf168357f2ffc468d6ad78160941705c44cb04785e0a689d26552b4af27ccd7b5c65edd41f2b92ad62b97174ab0ea12385"}}}, &(0x7f0000001fc0)={0x44, &(0x7f0000001dc0)={0x60, 0xe, 0x38, "fe42c29c9ba844ad6183871bb5ef1f0cdf44a3b43ae9b8f607cc2ceff60ec9cc2f22ea66851c6d58197df7db51f02159930f48856b416d00"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001e80)={0x20, 0x81, 0x1, "81"}, &(0x7f0000001ec0)={0x20, 0x82, 0x2, "a876"}, &(0x7f0000001f00)={0x20, 0x83, 0x1, 't'}, &(0x7f0000001f40)={0x20, 0x84, 0x2, "ec4a"}, &(0x7f0000001f80)={0x20, 0x85, 0x3, "98931b"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)=@can_delroute={0x60, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8b4aa37b79a37e5a"}}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_FILTER={0xc}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "c348e4c50c19c068"}, 0x1}}]}, 0x60}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x0, 0xb4, {0xb4, 0x31, "a0610963ce7c23342ffaaa61ad039694301149caafba612be8277bfbf1a6bbb9679096276209a0400b22dc338b35b1f3be502eadaae1a39e6e4f595b20191ef6aa0fece95f344c9eb4c55681517b48855211dee5336b6f7d245b024c496596436492708583c0e74fc9a1b655aacfdc7cf96225ff9d751d31e0a11ee0a27a2e3532318228b0482bbc2a0d1594f357da90efee1b884baf4c200af15e211ac7b558bc7975e487e12d554c470330700354dc6923"}}, &(0x7f0000002100)={0x0, 0x3, 0x38, @string={0x38, 0x3, "58df05dbcef7be5aaf05c49a725e7f2237e02df286e70a3c98b09bd3daf0c172425e2e2bc021794d98cad5d9a158ccadc5cccbb30bf4"}}, &(0x7f0000002140)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x8, 0x7f, 0xc024, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x1, 0xf00, 0x0, [0xff00, 0xf0, 0x3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x1ff}]}}, &(0x7f0000002180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x1, 0x4, "3ddc3d86", "cf4f6ceb"}}, &(0x7f00000021c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x9, 0x0, 0x9, 0x6}}}, &(0x7f00000027c0)={0x84, &(0x7f0000002240)={0x40, 0x31, 0x99, "c0c18e28a6045f4eb0cd84c552535499d2ccc7a1674c04ad72cd739cb3ea706df9e8f432782652cc0f3768907e3282fbe682c8b2363f65ac132d110ddd7dceb647061f9682cd1a977b1e51c2f0f481cdf17d227f8f1305dac016c4759c514f738818712362c7e8686cbaedcfb6087763fd1d9474fd251f950689bf9cf0ade5dd7da444614f71b4064d7f14ecbe274d0fb5974081061ac822b7"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000002540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002580)={0x40, 0xb, 0x2, '%S'}, &(0x7f00000025c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002600)={0x40, 0x13, 0x6, @random="5e58d52b9dea"}, &(0x7f0000002640)={0x40, 0x17, 0x6}, &(0x7f0000002680)={0x40, 0x19, 0x2, "e62b"}, &(0x7f00000026c0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000002700)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002740)={0x40, 0x1e, 0x1, 0x32}, &(0x7f0000002780)={0x40, 0x21, 0x1, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x3a, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c100806", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000003c0)={0x0, 0x24, 0x3, {0x3, 0x5, 'x'}}, &(0x7f0000001500)={0x0, 0x3, 0x18, @string={0x18, 0x3, "143b88fffb1f8ea555cf16a2791008f6ae839929509b"}}, &(0x7f0000001540)={0x0, 0xf, 0x10b, {0x5, 0xf, 0x10b, 0x3, [@generic={0xf8, 0x10, 0xa, "3320d77cb622e4546acfc7b86c6eecdb4eaa187547756ecfab383bb132f7b8568b539edc328044d86fcc1c0b0b98418a9f75c4cf4d39e93084d3b2a3e03b40fbcb16e9254e40bfedc759574389e7c47c7985130077315b8b61c00a454a4a774c0ae8f1559da4bd542234640246db94e5de1e78d01b4462151243d2769a87cb709079d33e399e4e9a3ce0ccfbd1e8a6c7f299ee972eeecb99a180618cdd27fcdb2bb77b804bb584d1028e9ea98b08dece9598ea315f250eb5f14835ed223de3231bb6784444e09a7eb0c702cc91f586c32c9bba75888aefe8f29278cb979d5f18ac4a8884ec1efdb001a554e2ef50bef9045d960f5e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x17, 0x80, 0x80, 0x7ff, 0x20}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xaa, 0x0, 0x2, 0x1f, "4c5450ac", 'mrs?'}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0xff, 0xed, 0x7, 0x9, 0x8000}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001740)={0x0, 0xf, 0x4b, "0c8960a6069d03c2afcc6dca96360fe57f42ae80f3a08af0eeca926fc0b6dc2332ca80fa9757b473e239164f0570521104a087aefbe0f720db3fa5ebcdb6b28ee3c727511f5b827d6e4ceb"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x800, 0x20}}, &(0x7f00000018c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001900)={0x40, 0x9, 0x1, 0xe1}, &(0x7f0000001940)={0x40, 0xb, 0x2, "96b2"}, &(0x7f0000001980)={0x40, 0xf, 0x2, 0x3ff0}, &(0x7f00000019c0)={0x40, 0x13, 0x6}, &(0x7f0000001a00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001a40)={0x40, 0x19, 0x2}, &(0x7f0000001a80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0xb4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x9}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x0, 0x7}, 0x4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) dup3(r6, r5, 0x0) 23:41:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095000000000000006e08c18ee55648b07e50526434fae2a34b3819f0df378e027a8dc1a02f36b7e616817cc498e7b56339f51f04e2be10c77269e9f9b6f044d025815613922b8924e983dc80fbcb41dedaf67b22acc906977fd6e19fa7b3d0b17502ce0bc10fb5dddd5756f516c443f761e29929a676597603a665a30908e637250e5241d33286c638ba75b9b8832881284f6a1bdf738175bfd892d8718dd05af2924c686b46343c12cfc099f212429ae650e11d27c47c0168cd2b01ea2648365d96f07e78d4f65f4d1eb1da5e135eaa77a0ee9ca6b0c9"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000200)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f00000008c0)=@raw=[@alu={0x4, 0x0, 0x3, 0x9, 0x3, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000900)='GPL\x00', 0x2, 0x68, &(0x7f0000000940)=""/104, 0x40f00, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x5, 0x200, 0xee}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000a40)=[{0x3, 0x4, 0xc, 0x9}, {0x2, 0x3, 0x10, 0x7}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x1, 0x4, 0x8}, {0x5, 0x3, 0x34bd, 0x6}, {0x3, 0x2, 0xe, 0xa}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x7fff}, 0x90) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000640)={0x168, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {0x0, 0x0, 0xbd, 0x0, '3l\xc0\x1c\x9b\xd8\xa7l<\x1e\x11\xbc\xbe`\x90\x958v\xe2O\xea\x91I\x1b\x10\xac\xe7\n\r\xde\x01\xe8\x8b\n\xcb\xf6\xef\xd0\x9c\xae\xd2\x8b\xe7\x8ed\x8ek\x94=l\xb4\xf4\xab\x8e\xfc!\xe1\xccaLPH\x93g\x85[,\xa1$\x00C\xfd\xaf\xe5\x02\xd17\xbd9\xf3/\x95\xe6\v]J\xa0F\x85\xb1\x04\xb14\xe5\xda\xeb#\xdf\x91Ep\xedtGG H\x8eag\x03\xb0\x04\x12\xca\xde;4 \xf5:`D\xe3\x8f\xe8\xdd\xd9\xceD\xc2\xb3\x10Z\xdc\t\xc9\xde\xa4\x97\x1c4\xb9\xa13\xccN5iw\x06f\xe0\"*En-\xa8\x8e\xce\xd9\x8f\xe1g\xb0\xfd\x8b\xed-{d\x0f\x06\\P{\xd8\xa3\x95\xa3\a\xbe\xba?\x80\xf1\xfd\xd6'}}]}, 0x168) write$FUSE_BMAP(r7, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000e40)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000440)}}, 0x5) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000d00)=0xe8) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x328001, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noextend}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x30, 0x30, 0x32, 0x65, 0x36, 0x66, 0x66], 0x2d, [0x61, 0xe, 0x33, 0x30], 0x2d, [0x36, 0x69, 0x35, 0x61], 0x2d, [0x62, 0x35, 0x63, 0x37], 0x2d, [0x38, 0x37, 0x39, 0x30, 0x38, 0x62, 0x61, 0x37]}}}, {@euid_lt={'euid<', r9}}]}}) openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x20080, 0x101) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x2, 0x10}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, 0x0, &(0x7f0000000040)}, 0x20) 23:41:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000d, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r8}, 0x10) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) (rerun: 32) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) [ 165.201988][ T322] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz0] on syz0 [ 165.215495][ T4618] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. 23:41:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/71, 0x47}], 0x1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/185, 0xb9}], 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge_slave_0\x00'}) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/pid_for_children\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="852755f4b7b7cc5d80f639370a9b741a7de00988838da9d0ea9da77281bafaa405e45bb8633baa6ca5e99ac0e36802bc2f1a46f166c423bf565c30f1272dbe1213649b038062fc46232078a5ef0bfd3b390d7c0fb3737cdb990fb9dec584c7a13bd20fa2cba2f780205c518ec5302a4ec7f270db1a1305ac9763498654246fa8108a5a5c39e0c8299a4dc8b12bcc7ee7137f6dce35d147bc979bcedc14233ab8912758a4b629c3ecd84e9b45a106cbeffc3abb820e54ff0396b8fe83a9511946a03eb21b261be4456eabf61cf640d17fa62ac4aaf9515597a9082006a79fe1a0371de885908fb981", 0xe8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100001f01e02e00", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000040}}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="e2", 0x1}, {0x0}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x1}}], 0x2, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x5) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000a80)=0x10, 0x800) sendmsg$sock(r7, &(0x7f0000000980)={&(0x7f0000000900)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="30a7b2bf23c3133f05b28756df6c1d1adae3a48d914ee57c", 0x18}], 0x1}, 0x40000c0) socket$nl_route(0x10, 0x3, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x48, 0x0, 0x4004000}, 0x0) [ 165.282446][ T302] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0083/input/input46 [ 165.308589][ T302] uclogic 0003:256C:006D.0083: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 165.524613][ T4635] device bridge3 entered promiscuous mode [ 165.606008][ T1353] usb 5-1: USB disconnect, device number 28 [ 165.631255][ T1480] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 165.671281][ T322] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 165.911276][ T1480] usb 2-1: Using ep0 maxpacket: 8 [ 166.031335][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.042062][ T322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.051791][ T322] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 166.060650][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.061350][ T1480] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=16.48 23:41:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 166.078446][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 166.078460][ T30] audit: type=1326 audit(1712446889.495:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.080906][ T322] usb 3-1: config 0 descriptor?? 23:41:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 166.088201][ T30] audit: type=1326 audit(1712446889.495:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.143677][ T30] audit: type=1326 audit(1712446889.495:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.153621][ T1480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:41:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, 0x0, 0x0) 23:41:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090f000000000000850000000e000000850000007d000000950000000094eebbd4736d63da3c3487b3a0ec41cc649dca4c6be7251d7b4a784e8beceaf55e3e621e6b2b1d3c2bc434607047499cf02635deb558d3e3362861d3bba41d9f925109dcb28509e860"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x1, 0x49b, &(0x7f0000000100)="$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") getdents64(r5, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x11) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000210000000c00018008000100", @ANYRES32=r2, @ANYBLOB="022d418d2017d3f48d98692ae7a888b17e708d9dc18e595473292303c90ee4a090266a26a5a35ef727d95a11b32ab857a8ee0f6f695cdaa97caaee6486a25e1b7272dc6bc5e893af19fb398e5f4a"], 0x20}}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0xc0506617, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000003000000000000000000573b5168515d100f31691dfe000000000000e90408295153ef2600000000000070d38300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000048dcf172600837666935d400f8d654939f12d7e6d00be2b3acd6a92d0a7a0e769bb1c34b23e679d8151eac638d5ed58cc27bca833907b9fee0603b9c22cf"]) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r11 = dup3(r8, r10, 0x0) read$snapshot(r11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0xffff, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007ba9461af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500e8000400000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 166.177971][ T30] audit: type=1326 audit(1712446889.495:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.202737][ T1480] usb 2-1: config 0 descriptor?? 23:41:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 166.246056][ T30] audit: type=1326 audit(1712446889.495:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.252270][ T4646] loop0: detected capacity change from 0 to 512 23:41:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c446a29d"}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0dcdd38d7df6b108f5a2"}}, 0x0, 0x0, 0x0}, 0x0) [ 166.280535][ T30] audit: type=1326 audit(1712446889.495:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.308862][ T30] audit: type=1326 audit(1712446889.495:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.332742][ T30] audit: type=1326 audit(1712446889.495:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.359040][ T4646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 393: padding at end of block bitmap is not set 23:41:29 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) [ 166.360824][ T30] audit: type=1326 audit(1712446889.495:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.374101][ T4646] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6150: Corrupt filesystem [ 166.405806][ T30] audit: type=1326 audit(1712446889.495:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4624 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a9ae69 code=0x7fc00000 [ 166.429699][ T4646] EXT4-fs (loop0): 2 truncates cleaned up [ 166.435615][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:41:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/71, 0x47}], 0x1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/185, 0xb9}], 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge_slave_0\x00'}) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/pid_for_children\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="852755f4b7b7cc5d80f639370a9b741a7de00988838da9d0ea9da77281bafaa405e45bb8633baa6ca5e99ac0e36802bc2f1a46f166c423bf565c30f1272dbe1213649b038062fc46232078a5ef0bfd3b390d7c0fb3737cdb990fb9dec584c7a13bd20fa2cba2f780205c518ec5302a4ec7f270db1a1305ac9763498654246fa8108a5a5c39e0c8299a4dc8b12bcc7ee7137f6dce35d147bc979bcedc14233ab8912758a4b629c3ecd84e9b45a106cbeffc3abb820e54ff0396b8fe83a9511946a03eb21b261be4456eabf61cf640d17fa62ac4aaf9515597a9082006a79fe1a0371de885908fb981", 0xe8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100001f01e02e00", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000040}}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="e2", 0x1}, {0x0}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x1}}], 0x2, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x5) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000a80)=0x10, 0x800) sendmsg$sock(r7, &(0x7f0000000980)={&(0x7f0000000900)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)="30a7b2bf23c3133f05b28756df6c1d1adae3a48d914ee57c", 0x18}], 0x1}, 0x40000c0) socket$nl_route(0x10, 0x3, 0x0) getpid() r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e1e, 0xffff, @local, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x48, 0x0, 0x4004000}, 0x0) 23:41:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) [ 166.460636][ T4646] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 166.461393][ T1480] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 166.478923][ T4646] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 166.489035][ T4646] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. 23:41:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000840)='ext4_mark_inode_dirty\x00', r4}, 0x10) fchmod(r3, 0x0) 23:41:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) write$UHID_DESTROY(r2, 0x0, 0x0) [ 166.513992][ T322] kye 0003:0458:5010.0085: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 166.530663][ T322] kye 0003:0458:5010.0085: tablet-enabling feature report not found [ 166.539197][ T322] kye 0003:0458:5010.0085: tablet enabling failed [ 166.581324][ T1353] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 166.616056][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x1 [ 166.625118][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.772546][ T4667] device bridge2 entered promiscuous mode [ 166.864205][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.871727][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.878961][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.886420][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.893795][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.901009][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.908422][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.916273][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.923546][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.930705][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.937976][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.945151][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.952395][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.959621][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.966840][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.974072][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.981381][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.988528][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 166.995946][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.003151][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.010302][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.017770][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.025028][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.032275][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.039499][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.046754][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.054112][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 23:41:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 23:41:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x16000000b}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000300)) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000150000008000000018110000a55e188d3d2d3fb9d5e12ac0db3699cc8571b562128eb01bbb008d90fb37ff542b76e5deec5fbccffd6adcadd339ebb4ea05e85d6a8f4f2e3f89db255f8938e19308a930a7f55f2f2b20f4781bf8391f008512945e1b802173c6c4453026e3148fa783653a0648dce35b4c3ff0e2417398e97a9eec3e86eb04dcfc43536ff57eadd7b20b1583d27e7818e290c999bc47c3ea814dcf0c81099d2bf43149af54675060d474efcc2f85ce679292269c71c252c74fb236d18e26c8e34e62ba1e23ba915e86712ed87c30aa707b6de7ff5b16975cbfe077334dfe7ebb", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095ba9758baebf0fe007f78c48ff97f0124e7fb9192359066ba4f08d349793f30b5dc75efaa12921ab0a91692efa8c6ca3a76dec11e5056bf5b2b2690081516e1993ef90a3251ba773a0a550c15282899114ee6f980e46e1ae89e7d4972a1c178ad8cd4ccbb2f449b6168911924991b31c8168a2572426e691108bda7d3399679c72474addab8c2f9a39d6b433ba19bf09d3294267109bca5b963a1de0e9241218263ce278e0fd44d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x1006ae5, &(0x7f00000006c0)={0x0, 0xbca0, 0x20, 0x3, 0x2a6}, &(0x7f00000003c0), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x2000ac0a, r8) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="d642e0", 0x3}], 0x1) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x0, 0x5001}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0fc731b8010000000f01c10fc7ba997fc258440f20c0350e000000440f22c0c4c17c28410fc4e2fd22eac7f8f1a3bb6666baf80cb87892d28def66bafc0ced66baf80cb820d52a88ef66bafc0c66b8f86266ef0f009d49000000", 0x5a}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x3, 0x0, 0x70bd26, 0x10000, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 167.061350][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.068502][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.075732][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.082958][ T323] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 167.090507][ T323] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz0] on syz0 [ 167.103080][ T302] usb 3-1: USB disconnect, device number 26 [ 167.171327][ T1353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.182116][ T1353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.191877][ T1353] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 167.200705][ T1353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.215128][ T1353] usb 5-1: config 0 descriptor?? [ 167.232950][ T4626] UDC core: couldn't find an available UDC or it's busy: -16 [ 167.240158][ T4626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 23:41:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) 23:41:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090f000000000000850000000e000000850000007d000000950000000094eebbd4736d63da3c3487b3a0ec41cc649dca4c6be7251d7b4a784e8beceaf55e3e621e6b2b1d3c2bc434607047499cf02635deb558d3e3362861d3bba41d9f925109dcb28509e860"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x1, 0x49b, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/zG5pgY+PioiCqEU0NhpbKCgcvGA08aCJEQ96bNpCkEINrYkQoiUxeDQk3o1Hrx68qjfjycQrHk0MCTFcAE9jZnem3W53W1q2XXB/v2TpezNv9r3/vnmzb+ftEkDPGsr/SSL+FxHXI2JnPbu0wFD9z51blyfu3ro8EfNZdvLvpFbudp4vlMdtLzLDaUT6RdL0hHWzFy+dHZ+enrpQ5Efnzn08Onvx0stnzo2fnjo9dX7s+PGjRw4fe3XslbUH1aK+PK7b+z6b2b/3rQ+vvTNRLbcPFH8b4+iUoRhq1ZSa5ztdWZftaEgn1S42hDWpRETeXX218b8zKqHzoFdkWZb1t989nzW7smwL8NBKotstALqjfKPPP/+Wj02aejwQbp6ofwDK475TPOp7qpEWZfqaPt920lBEfDD/zzf5IzboPgQAQKOfTpQzweb5Xxp7Gsr9v1hDGYyIRyJiV0Q8GhG7I+KxiFrZxyPiiabnz+c32Qr1DzXll89/0hv3FeAq8vnfa8Xa1tL5Xzn7i8FKkdsRUU6Ypw4Vr8lw9PWfOjM9dXiFOn5+4/ev2u1rnP/lj7z+ci5YtONGtekG3eT43Pi6A25y80rEvmpz/Ek1IllYCUgiYm9E7FvD8w42pM+8+N3+hUzf0nKrx1+TtVxH68BSRfZtxAv1/p+PJf2/WGOy8vrk6EBMTx0azc+CQy3r+PW3q++2q3/V+H/4s/mQN4/9ePJ+w16Q9/+2hvM/yvXbxfgHk4hkYb12du11XP3jy7afadZ7/m9J3q+ltxTbPh2fm7twOGJL8vby7WOLx5b5snwe//DB1uN/V3FM/ko8GRH5SfxURDwdEc8UbT8QEc9GxMEV4v/l9ec+Wn/8GyuPf7Ll9W9J/y+u168jUTl74PrdNhePe+v/o7XUcLGl9fUvWXKJuNcGduAlBAAAgAdeGrXv/qcjC+k0HRmp3wPaHdvS6ZnZuZdOzXxyfrL+G4HB6EvLO131+8F9SXn/c7AhP9aUP1LcN/66srWWH5mYmZ7sdvDQ47bXxnyybPzn/qp0u3XAhvOTH+hdq43/Pdc2qSHApvP+D72rYfzPtyky75sy8N/k/R96V6vx//k6jgEeLpmxDD3N+IfeVY33FtJpV1sCbDbv/9CT7ud3/asnsv7WuwZieeEY2JhmbG1RV1cS+cyqK7VvXc9R5f+m0LZMpGt7wv5YvqsSXemL03s6fvJnxXflO93U7zdlnLZKdOVyBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HH/BgAA//9JNd58") getdents64(r5, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x11) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000210000000c00018008000100", @A