last executing test programs: 10.353240073s ago: executing program 0 (id=1496): syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="580101029cc80d083d1b2f010109023100010b06500109043905036fc84b0009050500000610fc080905001000040204a70405ac780905060300007f080966e511f8bea8e52cd93aacca7cf2ddff5652301dcea5863fbd421564193dadb02ddf6ec866b0efc414dad319dab301804e43bd8b0457e7de98bc0dc8a801010587f924f6f300c47a0b30442f1a3ce30a9bc4c552710e93c39fd5fa3629ae88fe79037a1574115f26b147eb88e33609"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) 6.544095913s ago: executing program 0 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c43"]) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r7, 0x5) syz_emit_ethernet(0x52, &(0x7f0000000940)={@local, @random="aaaa678322de", @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x40, 0x63, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@end]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x6071, 0x0, 0x9, {[@window={0x3, 0x3, 0xb1}, @fastopen={0x22, 0x11, "a21ad480eb09d55ba62d2251e4e3e4"}]}}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x4010) 6.483712859s ago: executing program 2 (id=1509): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0xd, 0x0, 0x0, 0x11, 0x3}, @const={0x10, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x1, 0x0, 0x8, 0x2, [{0x1, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1401e, &(0x7f0000000180)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061109c0000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x5, &(0x7f00000002c0)=0x2) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="7d53513caea18e066b15cf8ea91572", 0xf) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee8000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x40, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x4, 0x0, 0xa1, 0x20}, {0x2000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000140)=0xb5, 0x4) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$unix(r3, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.218617935s ago: executing program 2 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x0, 0x7, 0x5, 0x13, 0x4, 0x9}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$incfs(0x0, 0x0, 0x0, 0xc802, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a530112406060405080004000500060001000509240305060000010000000000020005cbad0924030601010303df092403010303030605"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1f}) 5.618084823s ago: executing program 0 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073019e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'hsr0\x00', {0x2, 0x4e26, @multicast1}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x300}], 0x0, 0x0, 0x0}) 5.535550061s ago: executing program 4 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x60}}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r3}, 0x38) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000014f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, r4, {0x101}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x132}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x20, 0x0, 0x1, 0xfffff018}, {0x6}]}) 5.455736289s ago: executing program 4 (id=1518): syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109027f23b5a0fda00909040000000101bc6a0a2401f7ff0702010209240303010103030b0524050602090401000001020000090416010101020000090501090004f7c803072501000405000904020000010200000904020101010200000b24020313010801555de507240101c005000905860950"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x69, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x81, 0xc0, 0xd4, [{{0x9, 0x4, 0x0, 0xf1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "bde7f993"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0xf123, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x29dc}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x7, 0xc, 0x20, 0x1}, 0x43, &(0x7f00000000c0)={0x5, 0xf, 0x43, 0x1, [@generic={0x3e, 0x10, 0x4, "1de36dc4896e6c8d575b30d19f93ee849689509b37773ccb0c751cb42ce570c668c46331892cba91b5c7f85dea73c6e0f840d3d09531bd5d728de2"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x200a}}, {0x20, &(0x7f0000000280)=@string={0x20, 0x3, "d66b5c1be81d35bdb623bbd12f328add1e3dcb7806ceaf319a3df7311db8"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1410}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}, {0xf2, &(0x7f0000000340)=@string={0xf2, 0x3, "2a4f379259b4d40d61ee5c2a5309ee9379b1de651b0564829b1df2ad14df61b6c8d54708803654532a4e1d938e2b65e268ffe31365b8b47c3dc8ee6d7ccb32d30b7618177eb4de13606a049d624983bb8086dbf6c77b570ced2bbf34d842a669d1068100ddf17b432687c3f420d14962a77217b52567b5829f3fb83c8ca761be3fbf84d5e8b5cc3bb8b234535104ec94e713bfbe847fc14f278c4801c4beaf6d8143104dd20df92e7b12034d9fe6d4fb0ea59d189105be57a2942a41f01accbea3c20eaf4d7b3e3fa4fb71afc0e8370a9ac70739a3fd411e8226923b4d50abcbcce9e262b88d668f276d108620d99736"}}]}) 4.123292188s ago: executing program 0 (id=1520): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x9}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x65e, 0x10}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8abe58ede182"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x5c, 0x2a, [@preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0x7f, 0xe, 0x1ff, @broadcast, 0x8, @void, 0x1000, 0x10000, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x8}]}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c1aa71cccfca"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x49}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}]}]}, 0x20}}, 0x0) 4.091291052s ago: executing program 0 (id=1522): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0xf4) 4.037229707s ago: executing program 1 (id=1524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d303030303030303030303030303030303132363600006c6c6f635f6d08006e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c006c27715578049a57a70544af8735aac0ef19142df79cebff54cc2c2975122bd1a6c9ddce762d"], 0x1, 0x5505, &(0x7f0000002480)="$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") (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) (async) write$P9_RFLUSH(r2, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0xf, 0x2f, [@dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xb}, @local]}, @generic={0x89, 0x2}]}}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x10, 0xcb, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0xca, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x7a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x5, 0x4, 0x0, 0xff, 0x1e}, 0x15c, &(0x7f0000000680)={0x5, 0xf, 0x15c, 0x6, [@generic={0x51, 0x10, 0x2, "33987c764f9802ee519d2eba64dd99d9d9e0e619e98fa0a8faa1c219d0ff29904701c186dd23719e31ccb6fd2e948165070a056ce9e4434dcd991effb90e0259b55d49f9f1a505b6ad2cae60b446"}, @generic={0xd1, 0x10, 0x1, "af3f251dc0a56e32defb7e4c53bedb50171818accbf5e95eb5bf0a10e6211f9c462d14de15f1a80aaee479d7d590e11389fde05b2a66964459433c207ff4729305ac263ddfedcd93ddbebb569be4ecb80b3063cd208d637a6e5407c4c17acf6b9f5d782742dda429bdcdd7b455c14f918b0599cb5edb61586debf6b0976de133b470d831ab45d1511ad124dc217153c91817e49dbef6da31f906f25d33fe1467bea8a31661cdc8b077f6bc1354b81b066c0f844ad426fce876994869a541674f975e77cc405672c98c610e14f301"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "67e1c9c201e58408ba4b0762649eb586"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x1, 0xffff}, @ssp_cap={0xc, 0x10, 0xa, 0x85, 0x0, 0x3ff, 0xf00, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xe, 0x70, 0x2, 0x4}]}, 0x1, [{0xe8, &(0x7f0000000400)=@string={0xe8, 0x3, "2bb59ce220d32ad2f0991ffc2906bfd674baf7d675e34b4a53f39bb52bb1b287c6568a24c5629627cc0b8ad621f9b0db5a23cba969754ceb1f4dfaace5dd058d8e70b5174491f0012dccde832933d3678847ff4a5d798aa9ee1364e2398cb9445aeeb65ba1d53e0dbef8acf1245431c238f7306f9b7f7a96a92e72e0e078139c8e346976723a186225fb9cbb5fdcc47af5b70cdb92e5f61a39ada1795e48d8c3f50b8373844282615e027cdd76a0ed110db8c505335f05b260eb0649a360d50016871cd3240217cd64e4b422a656ded811c7625d18a4ffa65971220994474f8dc6aea20f86be"}}]}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r5}, 0x10) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000200)={[{@dmask={'dmask', 0x3d, 0x7}}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x4002}}, {@namecase}, {@umask={'umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@keep_last_dots}, {@keep_last_dots}]}, 0x1, 0x1548, &(0x7f0000001900)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$eJzs3d9rXFkdAPDvnSRt2qZNqj7UgrVoJS3amaSxbfChRhB9Kljre4zJJIRMMiEzaZtQJMU/QBB/oU8+6YPgswjSP0GEgr6LLLuU3bbLsg+7O8tM7mzT2ZlkQpNMmvl84PTec+7N/Z4z0zkz557LvQF0rYsRMRERPRFxJSIG0/JMmmJjM1X3e/7s4XQ1JVGp3H03iSQtqx8rSZen0j/rj4gf/zDiZ8nn45bW1hemCoX8SprPlReXc6W19avzi1Nz+bn80sTY6I3xm+PXx0f2rK23vv/Wb3/55x/c+ue37v9v8p3LP69WayDdtrUd7dhoc7/NpvfVXou63ohY2U2wQ6wnbU9fpysCAEBbqr/xvxARX4uIF39o3OpXHQAAABwFle8OxEdJRKVSqZyplwEAAABHSqZ2DWySyabXAgxEJpPNbl7D+6U4mSkUS+VvzhZXl2Y2r5Udir7M7HwhP5JeKzwUfUk1P1pbf5m/1pAfi4izEfHrwRO1fHa6WJjp8LkPAAAA6BanGsb/7w9ujv8BAACAI2ao0xUAAAAA9p3xPwAAABx9Lcf/Se/BVgQAAADYDz+6fbuaKvXnX8/cW1tdKN67OpMvLWQXV6ez08WV5excsThXu2ff4k7HKxSLy9+OpdUHuXK+VM6V1tYnF4urS+XJ2nO9J/OeKAgAAAAH7+xXH/83iYiN75yopapj6bY2xuoT+1s7YD9ldrd7sl/1AA5eT6crAHSMC3yhe5mPB3YY2P+mIb/L0wYAAMBhMPzl15r/Nx8IbzADeehe5v+he5n/h+5l/h+63PGdd+lvteFfbRzfWUIAADgUBmopyWTTucCByGSy2YjTtccC9CWz84X8SESciYj/DPYdr+ZHO11pAAAAAAAAAAAAAAAAAAAAAAAAAHjDVCpJVAAAAIAjLSLzdpI+omt48NJA4/mBY8mHg7VlRNz/493fPZgql1dGq+XvfVZe/n1afq0TZzAAAACARvVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76fmzh9P1dJBxn34vIoaaxe+N/tqy/++DEXHyRRK9W/4uiYiePYi/8SgizjWLn1SrFUMfbNaiMX4mIk4cRPxoHf/UHsSHbva42v9MNPv8ZeJibdn889ebptf19GKr/i9T7/9q/Vyz/u90mzHOP/lbrmX8RxHne5v3P/X4yWv2vz/9yfp6q22VP0UMN/3+SV6JlSsvLudKa+tX5xen5vJz+aWxsdEb4zfHr4+P5GbnC/n036YxfvWVf3yyXftPtog/tEP7L7XZ/o+fPHj2xW3iX/568/f/3Dbxq6/9N9Lvger24fr6xub6Vhf++u8LDUXHtsafadH+nd7/y222/8qdX/y/zV0BgANQWltfmCoU8itWjuxK7wHEqv9/OiRN7uqVv2wtuZO+Mbs+Tuf6JAAAYH+8/NHf6ZoAAAAAAAAAAAAAAAAAAABA93rlpl89EbHXdyM7/uqdBfo711QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG19GgAA//9UPsbW") (async) r7 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1d9) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000003c0)={0x80d8}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async, rerun: 64) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xf7, 0x20, 0xc}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) 3.999470901s ago: executing program 3 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x60}}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r3}, 0x38) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000014f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, r4, {0x101}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x132}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x20, 0x0, 0x1, 0xfffff018}, {0x6}]}) 3.947202166s ago: executing program 1 (id=1529): getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x17, 0x1, 0x9}, {{r1, r2/1000+60000}, 0x188ca52ab78fb021, 0x3, 0x8001}], 0x30) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x7, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000180)=0xeccf) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x40, 0x200, 0x70bd28, 0x25dfdbff, {0x1e}, [@nested={0x44, 0x56, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xf5}, @generic="64c3461e344042c3a68020d6c244902578ed15954b44acd55b2af9ab", @nested={0x4, 0x2d}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x120}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) clock_gettime(0x7, &(0x7f0000000300)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x6, 0x12) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380)={0x22, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r4, 0x12994b60, 0x18}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r6, &(0x7f00000004c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0xc0000) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000640)=@req3={0x927, 0x200, 0x100, 0x101, 0x4, 0x80000001, 0x3ff}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000006c0)={0x5, &(0x7f0000000680)=[{0xe, 0x2, 0x6, 0x45}, {0x1ff, 0xff, 0x6, 0x8}, {0x6, 0x5, 0x0, 0x4}, {0x1, 0xf, 0xb, 0x8}, {0xfd4f, 0x7, 0x6, 0x7fae}]}, 0x10) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000780)=0x6e, 0x800) connect$unix(r9, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x44002, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r10, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x21}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r12, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7ef801519282dfacac04fa7341899341"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ecccddd3d7f9b838598d0de50dd9a368"}, @NL80211_ATTR_PMKID={0x14, 0x55, "3cfde6f77911afa533667975fdd98570"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x48004) timer_getoverrun(0x0) 3.946089296s ago: executing program 1 (id=1530): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x94000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x800, 0x3, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x37}, {[@rr={0x7, 0x1b, 0x16, [@broadcast, @multicast2, @multicast1, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000003880)=@deltfilter={0x2424, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x1, 0xfff1}, {0xd, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @filter_kind_options=@f_cgroup={{0xb}, {0x424, 0x2, [@TCA_CGROUP_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x338, 0x2, 0x80000, 0x0, 0xb91, 0x4b4, 0x3ff, 0xa8, 0x6, 0x18, 0x9, 0xfffffbfd, 0x2, 0x2, 0x4, 0x15de, 0xfffffff6, 0x9, 0x0, 0x8, 0x6b, 0x7, 0x4, 0x8000, 0xec, 0x4, 0x6, 0x9, 0x4, 0x0, 0x5, 0x6, 0x100, 0x80000000, 0x9e, 0x339, 0x12, 0x5, 0x1, 0xfffffffd, 0x9, 0x3, 0x5, 0x2, 0x9, 0x5, 0x7fff, 0x10001, 0x80, 0x81, 0x6, 0xf, 0x0, 0xd, 0x6, 0x6, 0x80000001, 0x55cf, 0x401, 0x1ff, 0x3, 0x3, 0x9, 0x9, 0x3, 0x9404, 0x3, 0x5, 0x10, 0xff, 0x4, 0x3, 0x6, 0x2, 0x9, 0x1800, 0x62, 0xfffffffa, 0x1dd139b0, 0x7d07c425, 0x1, 0x8, 0x0, 0x0, 0x3, 0x35, 0x4, 0x7, 0x5, 0x6, 0xb92, 0x7ff, 0x2, 0x1000000, 0xd9c5, 0x3, 0x80000001, 0x8, 0x2, 0x401, 0x9, 0xffffffff, 0x8, 0x6, 0x7fffffff, 0x2, 0x81, 0x6, 0x400000, 0xb3d1, 0x5, 0x7, 0x6, 0x4, 0xc000, 0xfffffffd, 0x2, 0x8, 0x4, 0x7, 0x7, 0x6, 0x9, 0x81, 0x43, 0x7, 0x1000, 0xf3, 0x100, 0xe4, 0x868, 0x4, 0x7, 0x1ff, 0x6, 0x10000, 0x8000, 0x9, 0x7, 0xac7, 0x200, 0x3, 0x52cb, 0xc, 0x3, 0x3, 0x6, 0x7f, 0x35b7, 0xffff, 0x4, 0x0, 0x5, 0x7, 0x40, 0xa7c, 0xfffffff7, 0x200, 0x7, 0x100, 0x1ff, 0x9, 0x0, 0x4, 0x8, 0x3, 0x6a3, 0x6, 0x8, 0xcd, 0x5bf7726e, 0x7, 0xfffe0000, 0x10001, 0x8, 0x1, 0x1000, 0xf52f, 0x101, 0x2dc, 0xc, 0x3, 0x5e3, 0x6, 0xfff, 0x8, 0x8de8, 0x7, 0xc, 0xffff0001, 0xa4bc, 0x4, 0x2, 0x3, 0x5, 0x8, 0x8, 0x10000, 0x4, 0x838e, 0x54d5, 0x8, 0xd34, 0xf, 0x2, 0x7f, 0x6, 0xf, 0x4, 0x1000, 0x0, 0xfff, 0xffffff90, 0x2, 0x80, 0xd, 0x2, 0x7, 0x0, 0x80, 0xe7d, 0x8001, 0x4a, 0x5, 0xd, 0x8, 0x3, 0x7, 0x4, 0xf28, 0x8, 0x2, 0x7fff, 0xffffffff, 0x1, 0xfffffe00, 0x275, 0xb, 0x3, 0x7, 0x4, 0x0, 0x9, 0x9096, 0xfffffffb, 0xfffffffa, 0x100, 0x10, 0xd6, 0x1, 0x9, 0x7, 0x6, 0x4, 0x1, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1fbc, 0x2, [@TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7fff, 0x7f, 0x5, 0x401, 0xdce7, 0x1, 0x4, 0xffff5e1c, 0x800, 0x0, 0x4, 0x2, 0x5, 0x3, 0x6, 0x4, 0x3, 0x1000, 0xffff1180, 0x400, 0x3, 0x80, 0x4, 0x1, 0x400, 0x2, 0x2, 0x1, 0x100, 0x81, 0xff, 0xbf9, 0x0, 0xe, 0xffffffff, 0x1, 0x4, 0x1, 0x80, 0x4, 0x2, 0x2, 0x1, 0xec, 0x5, 0xe8d9, 0x6, 0xc3ee, 0x5, 0x5d6f2f65, 0x7f, 0x100, 0x3dca, 0x5, 0x5, 0x4, 0x2109, 0x7fffffff, 0x5, 0x8, 0x10, 0x8, 0x7ff, 0x0, 0x0, 0x8, 0x0, 0x5, 0x381, 0x1c99, 0xf, 0x2, 0x6, 0x1674, 0xf, 0xeb8, 0x80, 0x401, 0x400, 0x843c, 0x3c00, 0x1, 0x7, 0x6, 0x8, 0xd, 0x2, 0xb, 0xffffffbb, 0x0, 0xf, 0x8, 0xfa58, 0xe, 0x5a510000, 0x3, 0x0, 0x3, 0x6, 0x5df8, 0x7c6ee2de, 0x8, 0x81, 0x7fff, 0x4, 0x9, 0x1000, 0x9, 0x1, 0x6, 0x8, 0x2, 0xfff, 0x101, 0x7, 0x7, 0x3, 0x1, 0x0, 0x8, 0x8, 0x6, 0x80000000, 0x3, 0x9, 0x7, 0x4, 0x7, 0x8, 0x4, 0xa1e, 0x1, 0x9, 0x6, 0x6, 0x0, 0x8, 0x0, 0x1, 0x6, 0x3, 0x10001, 0x5, 0x2, 0x8001, 0xfff, 0x8, 0xfddd, 0x3, 0x3, 0xfffffff7, 0x8001, 0x0, 0x3, 0x3, 0xc519, 0xb, 0x0, 0x5, 0x1, 0x3, 0x3, 0x10001, 0x5e, 0x7, 0x0, 0x101, 0x3, 0x1c00000, 0x8, 0x57e, 0x8, 0x0, 0x275, 0x4, 0x7, 0x9, 0x8, 0x1ff, 0xfffffff9, 0x5, 0x5, 0x6, 0xe, 0x6, 0x6, 0x4, 0xf, 0xdf, 0x1000, 0xfffffff9, 0x7, 0x400, 0x7fff, 0x3, 0x7f, 0x9, 0x5, 0x2, 0x2, 0x200, 0x5, 0x9, 0x0, 0x7, 0x1, 0x8, 0x3, 0x4, 0xabc, 0x8, 0x8, 0x9, 0x7fff, 0xfffffffc, 0x9, 0x9, 0x200, 0x896d, 0x7ff, 0xd, 0x9, 0x2, 0x400, 0x44, 0x1, 0x100, 0x4, 0x1000, 0x4, 0x200, 0x7, 0xe52b, 0x7, 0xfffffff7, 0x7fff, 0x0, 0x1, 0x9, 0x2, 0x401, 0x57cbf0a1, 0xdbe, 0x2, 0x9, 0x81, 0x7, 0x8, 0x1, 0x1, 0x9, 0xa, 0xc89, 0x6, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}]}, @TCA_CGROUP_EMATCHES={0x330, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x84cb}, {0x2, 0x5, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1}, {0x6, 0x6, 0xa84, 0x3b}}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x8000, 0x0, 0x8}, "876f3032b625d4c1fcf19c66d4a619d28a4a061c5796c2efc0fc98f9b764f929e6be404f05b8557e6c11892f4013350ee4af9a69837b1c269182763fb1aafbc4799509f3a15fe7466cdc87b205260c63e8e4cc929fe7aa093831436b4af5c5091f6c1b4a216cd2177afab822257cb8838478e53411100af0a7c8e0"}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8}, {0x2, 0x2, 0x9, 0x3ff}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfff}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x6, 0x0, 0xb84}, "dc0134cd6eafd3a2151f75e0a926e0195b0d7fd4df137d1bb026076ce0ef515fcf2cf9951c79a6a4674003a736ad8876fdd98102894954129d4f0f761b9b67f394478f7a1f741d6aa17119bc98bb216e574ee22e10bbea2eff08dc1b492ae18f4ee00f59299eed4f27b8343b2ed40e0aa3c5f1fbeb000f9d5f7947ba73a15068f77520f6807e6cfbe7506b724ed588d410ebe16a2b2d3146dc4e8437b5d0c71bc3ae50b29cb400a105309a34a04bd94d9b79f3e37a4f6ca4346d5848d213288f782e48be5662329c"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3ff, 0x3, 0x4}, {0x3bf, 0x7f, 0x1ff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x40}, {0x7000, 0x6, 0x3, 0x4}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x800, 0x9, 0xb5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x5, 0x2}, {0x5, 0x6, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="3db167c8"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff, 0x3, 0x7}, {0x1, 0x4, 0x0, 0xba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x3}, {0x100, 0x401, 0xbc1, 0xe9}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x6}, {0x90c, 0x5, 0x0, "a062c7359d"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x200}, {0x6, 0xf98, 0x401, 0x7}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8}, {0xffffffffffffffff, 0x1, 0x3}}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x100}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="859fbf18cfa0361fe8", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="c556d1580e41c832560a", @TCF_META_TYPE_VAR="0f43496f1c09f16b75fc", @TCF_META_TYPE_VAR="0e1a0cdcbab51a0d09", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f927", @TCF_META_TYPE_VAR="c32f56f1", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8000, 0x8, 0x200}, {0x2, 0x5, 0x6}}}]}]}, @TCA_CGROUP_EMATCHES={0x1224, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb6, 0x1, 0x6}, {0xfffff928, 0x4, 0x527b, 0x0, 0x6, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x101}, {0x4, 0x9, 0xfffa, 0x4, 0x9, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0xfff5}, {0x0, 0x8, 0xfffc, 0x6, 0x4, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x2e1}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}]}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x5}, [@TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c5e303a52cffd699624b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf673, 0x3, 0x2}, {0x4, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x20, 0x6}, {0xeb, 0xb1, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="8fab", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="05d5471dd6", @TCF_META_TYPE_VAR="29f0f707ae", @TCF_META_TYPE_VAR="5e46a9"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="0781", @TCF_META_TYPE_VAR="f40c44"]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x52c3, 0x2, 0xff}, {0x2, 0x2, 0x2, "9c0f"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0xee6c}, {0x1, 0x5, 0x0, "f370f3f735"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x5}, {0x0, 0x6, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xf6, 0x1, 0x9}, {0x6, 0x28, 0x8, 0x0, 0x2, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc62, 0x8, 0xfffb}, {0x3, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1a64, 0x2, 0x5}, {0x6, 0x2, 0x1, '7:'}}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x9}, {0x80, 0x5, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd, 0x1, 0x7}, {0x1, 0x5, 0x0, 0x4, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x4}, {0xe7f3, 0xffffff53, 0x4, 0x6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x8d}, {0x1, 0x5, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x9}, {0x4, 0x3, 0x4, 0x40}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x2, 0x1, 0x0, "16"}}}]}, @TCA_EMATCH_TREE_LIST={0x1010, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x4}, "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"}}]}]}, @TCA_CGROUP_ACT={0x220, 0x1, [@m_connmark={0x140, 0x20, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfd, 0x3, 0x9, 0xffffffff}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x3, 0x0, 0x2}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x46, 0x6, 0x0, 0x7f, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3e, 0x7, 0x4, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x2ca2, 0x8, 0xffff0000, 0x3}, 0x9}}]}, {0x82, 0x6, "f07dfd4a946bcfb51822c5e5c3b8086c0dedbb31cb4c42d5e3fcef2b67dd437f004fae47db411a4d96fd115cdcab6368df215aaf4067ca0708e42dcb4ab77d9e6212cdc26efa9e15ab56f1a456f3a6c8eeb0d434ba52088ed4f1528740a0f40cc69664306706e6dec978ad92d9607b7685b7f76a4a6fc0623f01c3c6d54a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0xdc, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x9, 0x4, 0x8}, 0x1}}]}, {0x8c, 0x6, "f60c140e2fa748bfd7b840cde03f6a91313f88a46d9e65f9fcc78737a90b771fed753b390f8b167d9423fea1b2af43987b7b830b1afd7a34622731c71490a2af2402cd16a258c8b97b42d3dc3f6bdabf1a85577f92f1f38fdb88c88b1953494138659651149cf97cdb190b4cd9c4bb641f057ec1384d842c5b1794fd591bfc44d71136f5af6d2834"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x428, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x8, 0x7, 0x3, 0x444, 0x0, 0x9, 0xffffff7f, 0x7fffffff, 0x332, 0x1, 0xdcc, 0x7fff, 0x96b, 0x3, 0x80000000, 0x8, 0x0, 0x1, 0xcb75, 0x8, 0xf9a7, 0x4, 0xbc08, 0x3, 0x7, 0x3, 0xfff, 0x8, 0x800, 0x100, 0x5, 0x69f6cc05, 0x9, 0x9, 0x9, 0x9, 0x6, 0x0, 0x7, 0x969, 0x6, 0x0, 0xffff, 0x5, 0xfffffffc, 0xb0ac, 0x7fffffff, 0x3, 0x3a3, 0x7, 0x313f, 0x8, 0xa32, 0x2, 0x6, 0xff, 0xc54, 0x62cc, 0x8115, 0x5, 0x1, 0x7, 0x5a, 0xfffff146, 0x6, 0xbce3, 0x24, 0x7fffffff, 0xfffff000, 0x6ac3, 0x9, 0x0, 0xeb, 0x401, 0x684, 0x9, 0x8, 0x12f599ea, 0x0, 0xfff, 0x4, 0x8, 0x7, 0x7, 0x1, 0x4, 0x8, 0x2, 0x8, 0x6, 0x2, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0xc8, 0x5, 0x3, 0x8, 0x4, 0x2, 0x4, 0xf66, 0x9bb, 0xfff, 0x0, 0x400, 0x7fffffff, 0x8000000, 0x2, 0x5c, 0x5, 0x8, 0x10001, 0xff, 0x100, 0xf4, 0x8001, 0x478, 0x4d, 0xc85, 0x9, 0xffffffff, 0x800, 0x8a8, 0x1, 0x1, 0x81, 0x8000, 0x80000001, 0x7, 0xffffffff, 0x526, 0xffff, 0xd45, 0x9, 0x6, 0xfd, 0x7fff, 0x6, 0x2, 0x80, 0xab, 0x4009, 0x5, 0x3, 0xffffffff, 0x6, 0x7, 0x812e, 0x200, 0x79fd, 0x6, 0x9, 0x0, 0x2, 0x15000000, 0xb, 0x5, 0x7, 0x4, 0x27, 0x8000, 0x7fffffff, 0x8000, 0xb05, 0x0, 0x31, 0x10001, 0x1, 0x1, 0x101, 0x7f, 0x80000001, 0xcdf, 0x3, 0x5bb0, 0x5, 0xd7c, 0x6, 0xfd5a, 0x5, 0x1, 0x8, 0x6, 0x4, 0x3, 0x8, 0x8, 0x184, 0x99, 0x101, 0x8, 0x3c, 0xfff, 0x2, 0xffffffff, 0x0, 0xfffffffd, 0x81, 0x400, 0x324, 0x0, 0xf0000000, 0x4, 0xb, 0x6, 0xe0, 0x8, 0x10, 0x5a, 0x81, 0x2, 0x3, 0x4, 0x100, 0x7, 0xfffffff8, 0x2, 0x5, 0x9, 0xd, 0xaa68, 0x3, 0x100, 0x6, 0x8000, 0x0, 0xffff, 0x98, 0x2, 0x9, 0x6, 0x6, 0x800, 0x5, 0x2, 0x1, 0xffff, 0x3, 0xfffffff8, 0x2, 0x7, 0x8, 0x3, 0x9, 0x8, 0x0, 0x0, 0x5, 0x9, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}]}]}}]}, 0x2424}, 0x1, 0x0, 0x0, 0x10000801}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x263de839f73417bd}, 0x4014000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000f80)=[@set_irq_handler={0xbe, 0x20, {0x97}}, @in_dx={0x82, 0x20, {0x2f80, 0x7}}, @code={0xa, 0x85, {"66baf80cb858cd4f8aef66bafc0cb87c000000ef66ba610066b87e6c66ef263e420f7904913ef046196df6d9e1b9800000c00f3235000400000f3026660f3881a60400000066baf80cb8cd71ce86ef66bafc0cec420f01cbc74424001d1a3efdc7442402aa050000c7442406000000000f011424"}}, @rdmsr={0x32, 0x18, {0x1afc3a2d1b40f752}}, @wrmsr={0x1e, 0x20, {0xbf6, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x83}}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x1e, 0x20, {0x6e0, 0xa80}}], 0x155}) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000160000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '\'}\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x810) 3.945281656s ago: executing program 3 (id=1531): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f00000027c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x5, 0x2, 0x0, &(0x7f00000003c0)='\x00\x00', 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) write$cgroup_int(r7, &(0x7f0000000240)=0x3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x94) 3.545165195s ago: executing program 4 (id=1532): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace(0x10, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) unshare(0x60600) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7fff, 0x8000, 0xfffffff9, 0x4, 0x3, r0}) sched_setaffinity(r5, 0x8, &(0x7f0000000580)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 3.266960942s ago: executing program 2 (id=1533): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a", 0x11}], 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.016186206s ago: executing program 2 (id=1534): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x4008040) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async, rerun: 64) gettid() (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) getpgrp(0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x8, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) 3.014827686s ago: executing program 3 (id=1535): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_clone(0x801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000500)) tkill(r2, 0x12) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048885}, 0x20004010) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x1}}, 0x10, 0x0}, 0x20008000) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x40000}, 0x4) (async) ptrace(0x4208, r2) (async) tkill(r2, 0x12) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0x98, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000894}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x89, 0x0, &(0x7f0000000140)="8571716207087bc53aa352d0f98a0500b4a0fee60b1d82b9ba8273ddb8e2fd0d1ed879e3fa397e4018147e83a686983a6097e795b177654fe836d8629650e63b7bd657742e9d45fea042147077a1af6cee0639d778b05816307ba2ed81d6d23c40c3d34bb10ef32217ee93d6c45b5f7f0560b35aa02d5857d31da16ca7c1a7e64b5277f572955367ac", 0x6, 0x0, 0x10000}, 0x50) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000180)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) 3.000221788s ago: executing program 1 (id=1536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3ff1, &(0x7f0000000500), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x3) 2.919695416s ago: executing program 2 (id=1537): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0), 0x9, 0x269, &(0x7f0000000200)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000c40)=@ethtool_per_queue_op={0x16, 0xe, [0x8, 0x7, 0x9, 0x70, 0x1, 0xffffffff, 0x5, 0xa, 0x5, 0x9, 0x5, 0x2, 0x3, 0xeac5, 0xea9f, 0xfff, 0x1, 0x70, 0xb58f41d, 0x7ff, 0x7, 0x7fffffff, 0x14, 0x24e, 0x10001, 0xf, 0x9, 0x6, 0xc4, 0x9, 0x61cb, 0x1f34d744, 0x7, 0x9, 0xc6, 0xfffffffe, 0x0, 0x1, 0x3, 0x270, 0xb5fd, 0x8001, 0xa0, 0x1, 0x8, 0x2008000, 0xfff, 0x7, 0x0, 0x3, 0x7fffffff, 0x2, 0xfffffffe, 0x3, 0xfffffffe, 0x2, 0x800, 0x8, 0x3ff, 0x4, 0x8, 0x100, 0xd, 0x8000, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5, 0xfffffffe, 0x7a, 0xc, 0x0, 0x1000, 0xffff, 0x4, 0x10000, 0x100, 0x2, 0x5, 0x2, 0xb86, 0x8, 0x5fb0, 0x4, 0x40, 0x0, 0xe, 0x3, 0x5, 0xffffe8bb, 0x1, 0x7fff, 0x7, 0x8c81, 0x6, 0x1, 0x8, 0x2, 0x4, 0x10001, 0xff, 0x80000000, 0xfffffc00, 0x9, 0x10000, 0x40, 0x9, 0x9, 0xa3c, 0x8, 0x10, 0xa, 0x10, 0xec, 0x4, 0x8fe7, 0x0, 0xe, 0xfffffffc, 0x5, 0x3, 0x81, 0x36, 0x6, 0xae5, 0xe]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001}) 2.918667066s ago: executing program 3 (id=1538): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 2.903119377s ago: executing program 3 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0x6, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) close(r3) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) write$selinux_load(0xffffffffffffffff, 0x0, 0xef8c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./bus\x00') r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.739299203s ago: executing program 4 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0xeeef0000, 0x0, 0xfffffffd, 0x4, 0x0, [{0x81, 0x0, 0x3, '\x00', 0x5}, {0x6, 0x8, 0x8, '\x00', 0x80}, {0xd6, 0xe, 0xc, '\x00', 0x7}, {0x8, 0xa, 0x98, '\x00', 0x6}, {0x2b, 0x3, 0x7f, '\x00', 0x19}, {0x2, 0x9, 0x9}, {0x90, 0x53, 0x8e, '\x00', 0x2}, {0x33, 0x7, 0x5, '\x00', 0x8}, {0x8, 0x4, 0xc, '\x00', 0x7}, {0xfb, 0x9, 0x10, '\x00', 0x3}, {0x1, 0x9, 0xff, '\x00', 0x7}, {0x5, 0xff, 0x6, '\x00', 0x1}, {0x2f, 0x6, 0x3, '\x00', 0xc0}, {0x1, 0x3, 0x0, '\x00', 0x7}, {0xe, 0x2, 0x4, '\x00', 0xf8}, {0x8, 0xae, 0x1e, '\x00', 0x71}, {0x3, 0xc, 0x4, '\x00', 0x3}, {0xc, 0xb9, 0x9, '\x00', 0x3}, {0xa, 0x4, 0x4, '\x00', 0xf1}, {0x6f, 0xf7, 0x7, '\x00', 0x5}, {0x5, 0x7, 0x43, '\x00', 0x7}, {0x6, 0x7, 0x1, '\x00', 0x1}, {0xff, 0xb, 0x3, '\x00', 0xad}, {0xa7, 0x6, 0x24}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r2, &(0x7f0000012380)={0x2020}, 0x2020) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x7, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xffffffffffffff69, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x12c}}, 0x4000040) read(r1, &(0x7f00000002c0)=""/106, 0x6a) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xc, @empty, 0x7ff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) getgroups(0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r8 = open(&(0x7f0000000280)='./control\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r8, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000240)='./control\x00') write$cgroup_pid(r5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a242dfe6e66d9e0f599ee174", 0xc}], 0x1) 2.738868963s ago: executing program 4 (id=1541): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000002500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000040)={[0xb]}) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x20000000008, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) 420.791299ms ago: executing program 2 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) setregid(0x0, 0x0) r2 = syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360041000000000904960102502f7e0009050f10200001ff08090401"], 0x0) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0xa94) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000b00)=ANY=[@ANYBLOB="06000000000000d86b"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x8, 0x3e}]}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x3ef, 0x0) 384.220022ms ago: executing program 1 (id=1543): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nodiscard}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000001cc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 313.204789ms ago: executing program 4 (id=1544): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000240)="9db9284f93610a849a807c3d0eea64b7018533f7659612f9fc4df6", 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400}, 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x20) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f00000000c0)=ANY=[], 0x1, 0x150a, &(0x7f00000017c0)="$eJzs3Au0j9XWOP4511oPm9A3yX3NNR++yWWRJLkkJJIkSZLcEpIkSUJik1sSkpB7kntIbiG532+5h+RIkiQkJFn/odP5e8/bed/O+Z1+r9949/yMscZecz/fOZ+19tzj+32eZ4y9v+0wqEq9qpXqMDP8W/CvX1IBIAUA+gLAtQAQAUDJrCWzAg6FDBpT/72TiD/Xw1Ov9grE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8QadnWabmuk5F2x//c83+Q5///z5HP//9FjhQd/eX6ojd0/BdSpP9pm/Q/bZP+p23S/7RN+p+2Sf//l4sAKv43h6X/aZv0X4i07Go/f5ZxdcfV/v0TQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nA9XGAD42/xqr0sIIYQQQgghhBB/npD+aq9ACCGEEEIIIYQQ//chKNBgIIJ0kB5SIANkhGsgE2SGLHAtJOA6yArXQza4AbJDDsgJuSA35IG8YIHAAUMM+SA/JOFGKAA3QUEoBIWhCHgoCsXgZigOt0AJuBVKwm1QCm6H0lAGykI5uAPKw51QASpCJbgLKsPdUAWqwj1QDe6F6nAf1ID7oSY8ALXgQagND0EdeBjqwiNQDx6F+vAYNICG0AgaQ5P/o/yXoAu8DF2hG6RCd+gBr0BP6AW9oQ/0hVehH7wG/eF1GAADYRC8AYPhTRgCb8FQGAbD4W0YASNhFIyGMTAWxsE7MB7ehQnwHkyESTAZpsBUmAbT4X2YATNhFnwAs+FDmANzYR7MhwXwESyERbAYPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXtgH++FzOABf/Iv55/5TfkcEBFSo0KDBdJgOUzAFM2JGzISZMAtmwQQmMCtmxWyYDbNjdsyJOTE35sa8mBcJCRkZ82E+TGISC2ABLIgFsTAWRo8ei2ExLI63YAksgSWxJJbCUlgay2AZLIflsDyWxwpYASthJayMlbEKVsF78B68F6tjdayBCAA1sRbWwtpYG+tgHayLdbEe1sP6WB8bYANshI2wCTbBptgUm2EzbIEtsCW2xFbYCltja2yDbbAttsV22A7bY3vsgB2wI3bCTvgSvoQv48vYDSur7tgDe2BP7Im9sQ/2wVexH76Gr+HrOAAH4iB8A9/AN3EInsWhOAyH43Asr0biKByNrMbiOByH43E8TsAJOBEn4SScglNxGk7H6TgDZ+JM/ABn44f4Ic7FuTgfF+ACXIiLcDEuxiV4DpfiMlyOK3AlrsKVuAbX4hpcjxtwPW7CTbgFt+Cn+Clux+24E3fibtyNn+FnuA/34QA8gAfwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPJ7HC3gBL+ILub+uu7vQugGgLjPKqHQqnUpRKSqjyqgyqUwqi8qiEiqhsqqsKpvKprKr7Cqnyqlyq9wqr8qrSJFiFat8Kp9KqqQqoAqogqqgKqwKK6+8KqaKqeKquCqhSqiS6jZVSt2uSqsyqrkvp8qp8qqFr6Aqqkqqkqqs7lZVVFVVVVVT1VR1VV3VUDVUTVVT1VIPqtqqO/bGh9XlztRTA7G+GoQNVEPVSDVWb+Ljqqkags1Uc9VCPamG4VBspZr61uoZ1UaNwrbqOTUan1ft1VjsoF5UHVUn1Vm9pLqoZr5rut/eAtUU7Kl6qd6qj8oMd6vLHauiXlcD1EA1SL2h5uObaoh6Sw1Vw9Rw9bYaoUaqUWq0GqPGqnHqHTVevasmqPfURDVJTVZT1FQ1TU1X76sZaqaapT5Qs9WHao6aq+ap+WqB+kgtVIvUYvWxWqI+UUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1adqm9qudqidapfarfaoz9RetU/tV5+rA+oLdVD9RR1SX6rD6it1RH2tjqpv1DH1rTquvlMn1PfqpDqlTqsf1Bn1ozqrzqnz6id1Qf2sLqpf1CUVFGjUSmttdKTT6fQ6RWfQGfU1OpPOrLPoa3VCX6ez6ut1Nn2Dzq5z6Jw6l86t8+i82mrSTrOOdT6dXyf1jbqAvkkX1IV0YV1Ee11UF9M36+L6Fl1C36pL6tt0KX27Lq3L6LK6nL5Dl9d36gq6oq6k79KV9d26iq6q79HV9L26ur5P19D365r6AV1LP6hr64d0Hf2wrqsf0fX0o7q+fkw30A11I91YN9GP66b6Cd1MN9ct9JO6pX5Kt9JP69b6Gd1GP6vb6ud0O/28bq9f0B30i7qj7qQ761/0JR10V91Np+ruuod+RffUvXRv3Uf31a/qfvo13V+/rgfogXqQfkMP1m/qIfotPVQP08P123qEHqlH6dF6jB6rx+l39Hj9rp6g39MT9SQ9WU/RU/U03fu3SrP+ifx3/0F+/1/PvkVv1Z/qbXq73qF36l16t96j9+i9eq/er/frA/qAPqgP6kP6kD6sD+sj+og+qo/qY/qYPq6P6xP6hD6pT+mf9A/6jP5Rn9Xn9Dn9k76gL+iLv/0MwKBRRhtjIpPOpDcpJoPJaK4xmUxmk8VcaxLmOpPVXG+ymRtMdpPD5DS5TG6Tx+Q11pBxhk1s8pn8JmluNAXMTaagKWQKmyLGm6KmmLn5387/o/U1MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NZ9PZdDFdTFfT1aSaVNPDvGJ6ml6mt+lj+ppXTT/Tz/Q3/c0AM8AMMoPMYDPYDDFDzFAz1Aw3w80IM8KMMqPMGDPGjDPjzHgz3kwwE8xEM9FMNpPNVDPVTDfTzQwzw8wys8xsM9vMMXPMPDPPLDALzEKz0Cw2i80Ss8QsNcvMMrPCrDCrzCqzxqwx68w6s8FsMJvMJrPUbDVbzTazzewwO8wus8vsMXvMXrPX7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcNCfNaXPanDFnzFlz1pw3580Fc8FcNBfNJXPp8mVfpCIVmchE6aJ0UUqUEmWMMkaZokxRlihLlIgSUdYoa5QtuiHKHuWIcka5otxRnigVbESRiziKo3xR/igZ3RgViG6KCkaFosJRkchHRaNi0c1R8eiWqER0a1Qyui0qFd0elY7KRGWjctEdUfnozqhCVDGqFN0VVY7ujqpEVaN7omrRvVH16L6oRnR/VDN6IKoVPRjVjh6K6kQPR3WjR6J60aNR/eixqEHUMGoUNY6a/Kn1Qzib4wnf1Xazqba77WFfsT1tL9vb9rF97au2n33N9rev2wF2oB1k37CD7Zt2iH3LDrXD7HD7th1hR9pRdrQdY8facfYdO96+ayfY9+xEO8lOtlPsVDvNTrfv2xl2pp1lP7Cz7Yd2jp1r59n5doH9yC60i+xi+7FdYj+xS+0yu9yusCvtKrvarrFr7Tq73m6wG+0mu9lusVvtp3ab3W532J12l91t99jP7F67z+63n9sD9gt70P7FHrJf2sP2K3vEfm2P2m/sMfutPW6/syfs9/akPWVP2x/sGfujPWvP2fP2J3vB/mwv2l/sJRsuX9xf/ngnQ4bSUTpKoRTKSBkpE2WiLJSFEpSgrJSVslE2yk7ZKSflpNyUm/JSXrqMiSkf5aMkJakAFaCCVJAKU2Hy5KkYFaPiVJxKUAkqSSWpFJWi0lSaylJZuoPuoDvpTqpIFekuuovuprupKlWlalSNqlN1qkE1qCbVpFpUi2pTbapDdagu1aV6VI/qU31qQA2oETWiJtSEmlJTakbNqAW1oJbUklpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pVRKpR7Ug3pST+pNvakv9aV+1I/6U38aQANoEA2iwTSYhtAQGkrDaDi9TSNoJI2i0TSGxtI4GkfjaTxNoAk0kSbSZJpMU2kqTafpNINm0CyaRbNpNs2hOTSP5tECWkALaSEtpsW0hJbQUlpKy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaBvtoB20i3bRHtpDe2kv7af9dIAO0EE6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7QSTpJp+k0naEzdJbO0nk6TxfoZ7pIv9AlCpTiFGR017hMLrPL4q51KS6Dy+j+esF0Oc7pcrncLo/L66zL7nL8XUzOuYKukCvsijjvirpi7ubfxaVdGVfWlXN3uPLuTlfhd3E1d6+r7u5zNdz9rqq75+/imu4BV8s96mq7x1wd19DVdY1dPfeoq+8ecw1cQ9fINXYt3VOulXvatXbPuDbu2d/FC90it9atc+vdBrfX7XPn3U/umPvWXXA/u66um+vrXnX93Guuv3vdDXADfxcPd2+7EW6kG+VGuzFu7O/iyW6Km+qmuenufTfDzfxdvMB95Ga7xW6Om+vmufm/xpfXtNh97Ja4T9xSt8wtdyvcSrfKrXZr/v+1rnCb3Ga3xe1xn7ltbrvb4Xa6XW73r/Hlfex3n7sD7gt31H3jDrkv3WF33B1xX/8aX97fcfedO+G+dyfdKXfa/eDOuB/dWXfu1/1f3vsP7hd3yQUHjKxYs+GI03F6TuEMnJGv4UycmbPwtZzg6zgrX8/Z+AbOzjk4J+fi3JyH87JlYsfMMefj/JzkG7kA38QFuRAX5iLsuSgX45u5ON/CJfhWLsm3cSm+nUtzGS7L5fgOLs93cgWuyJX4Lq4cAlfhqnwPV+N7uTrfxzX4fq7JD3AtfpBr80Nchx/muvwI1+NHuT4/xg24ITfixtyEH+em/AQ34+bcgp/klvwUt+KnuTU/w234WW7Lz3E7fp7b8wvcgV/kjtyJO/NL3IVf5q7cjVO5O/fgV7gn9+Le3If78qvcj1/j/vw6D+CBPIjf4MH8Jg/ht3goD+Ph/DaP4JE8ikfzGB7L4/gdHs/v8gR+jyfyJJ7MU3gqT+Pp/D7P4Jk8iz/g2fwhz+G5PI/n8wL+iBfyIl7MH/MS/oSX8jJezit4Ja/i1byG1/I6Xs8beCNv4s28hbfyp7yNt/MO3sm7eDfv4c94L+/j/fw5H+Av+CD/hQ/xl3yYv+Ij/DUf5W/4GH/Lx/k7PsHf80k+xaf5Bz7DP/JZPsfn+Se+wD/zRf6FL3FgiDFWsY5NHMXp4vRxSpwhzhhfE2eKM8dZ4mvjRHxdnDW+Ps4W3xBnj3PEOeNcce44T5w3tjHFLuY4jvPF+eNkfGNcIL4pLhgXigvHRWIfF42LxTfHxeNb4hLxrXHJ+La4VHx7XDouEz96f7n4jrh8fGdcIa4YV4rviivHd8dV4qrxPXG1+N64enxfXCO+Py4RPxDXih+Ma8cPxXXih+O68SNxvfjRuH78WNwgbhg3ihvHTeLH46bxE3GzuHncIn4ybhk/FbeKn45bx8/EbeJn//B4atw97hG/Er8Sh3Cfnpecn1yQ/Ci5MLkouTj5cXJJ8pPk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklmQIVdODR6+89sZHPp1P71N8Bp/RX+Mz+cw+i7/WJ/x1Pqu/3mfzN/jsPofP6XP53D6Pz+utJ+88+9jn8/l90t/oC/ibfEFfyBf2Rbz3RX0x39g38U18U/+Eb+ab+xb+Sf+kf8o/5Z/2T/tnfBv/rG/rn/Pt/PO+vX/Bv+Bf9B19J9/Zv+S7+Jd9V9/Np/pU38P38D19T9/b9/Z9fV/fz/fz/X1/P8AP8IP8ID/YD/ZD/BA/1A/1w/1wP8KP8KP8KD/Gj/Hj/Dg/3o/3E/wEP9FP9JP9ZD/VT/XT/XQ/w8/ws/wsP7vgbD/Hz/Hz/Dy/wC/wC/1Cv9gv9kv8Er/UL/XL/XK/0q/0q/1qv9av9ev9er/Rb/Sb/Wa/1W/12/w2v8Pv8Lv8Lr/H7/F7/V6/3+/3B/wBf9Af9If8IX/Yf+WP+K/9Uf+NP+a/9cf9d/6E/96f9Kf8af+DP+N/9Gf9OX/e/+Qv+J/9Rf+Lv+SDH5d4JzE+8W5iQuK9xMTEpMTkxJTE1MS0xPTE+4kZiZmJWYkPErMTHybmJOYm5iXmJxYkPkosTCxKLE58nFiS+CSxNLEssTyxIrEysSoRQp5tccgX8odkuDEUCDeFgqFQKByKBB+KhmLh5lA83BJKhFtDyXBbKBVuD6VDmVA2PBYahIahUWgcmoTHQ9PwRGgWmocW4cnQMjwVWoWnQ+vwTGgTng1tw3OhXXg+tA8vhA7hxdAxdAqdw0uhS3g5dA3dQmroHnqEV0LP0Cv0Dn1C3/Bq6BdeC/3D62FAGBgGhTfC4PBmGBLeCkPDsDA8vB1GhJFhVBgdxoSxYVx4J4wP74YJ4b0wMUwKk8OUMDVMC9PD+2FGmBlmhQ/C7PBhmBPmhnlhflgQPgoLw6KwOHwcloRPwtKwLCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LW8GnYFraHHWFn2BV2hz3hs7A37Av7w+fhQPgiHAx/CYfCl+Fw+CocCV+Ho+GbcCx8G46H78KJ8H04GU6F0+GHcCb8GM6Gc+F8+ClcCD+Hi+GXcEn+Zk0IIYQQ4p+i/+B493/wvXQAoH6b9wCAzNtzHfnPNTdm/+u8l8rdMgEAz3Tr8PDfRuXKqampv712qYYo/1wASPx9/b/Fy6AFPAWtoTkU/4fr66U6XeA/qJ+8DSDjf8hJgSvxlfq3/Bf1H39y+MJS8fms/039uQAF81/JyQBX4iv1S/wX9XM0/YP1Z/hyHECz/5CTCa7EV+oXgyfgWWj9d68UQgghhBBCCCH+qpcq2+6P7p8v35/nNldy0sOV+I/uz4UQQgghhBBCCHH1Pd+p89OPt27dvN0/N8Hfngv8a1l/2qT29n3PXT791Tm7TGSSdiZX+Y1JCCGEEEII8ae7ctF/tVcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkXf8T/07sau9RCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEuNr+vwAAAP//OTE3DQ==") io_setup(0x20fe, &(0x7f0000000540)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x2, 0x0) waitid(0x1, r7, 0x0, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 312.270609ms ago: executing program 3 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e20}, 0xff1c) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x5, 0x100000, 0x2000, &(0x7f00001a7000/0x2000)=nil}) (async, rerun: 64) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8002, 0x4, 0xd92, 0x0, 0x2401}) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 63.788923ms ago: executing program 1 (id=1546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d352c73686f72746e616dbeb8f43762587d8aa1b47e78653d77696e39352c73686f72746e616d653d77696e39352c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c636865636b3d6e6f726deeaa88bc45312f5ba0616c2c636f6465706167653d3836362c757466383d312c6e6f6e756d7461696c3d302c726f6469722c73686f72746e616d653d6c6f7765722c7574"], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@resgid}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) syz_mount_image$msdos(&(0x7f0000001000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000001040)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 0s ago: executing program 0 (id=1547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x48000) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_socket_connect_nvme_tcp() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000680)={0x9, 0x0, [{0x641, 0x0, 0x9}, {0x8d5, 0x0, 0xb9}, {0x19d5}, {0x324, 0x0, 0x5}, {0xadd, 0x0, 0x8}, {0x95c, 0x0, 0xc}, {0x40000095, 0x0, 0x6}, {0x862, 0x0, 0x8}, {0x12f4, 0x0, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) ustat(0x5, &(0x7f0000000400)) io_getevents(r5, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], 0x0) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0, 0x0, 0x14}]) chdir(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): k: 'syz.2.516': attribute type 13 has an invalid length. [ 169.576564][ T2348] gretap0: refused to change device tx_queue_len [ 169.583187][ T2348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.599546][ T2348] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 170.192481][ T24] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 170.394282][ T24] logitech 0003:046D:C29C.000D: no inputs found [ 170.487300][ T24] usb 5-1: USB disconnect, device number 10 [ 171.895311][ T2411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'. [ 171.920349][ T2412] netlink: 'syz.2.530': attribute type 13 has an invalid length. [ 171.928754][ T2412] gretap0: refused to change device tx_queue_len [ 171.935424][ T2412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.951757][ T2412] netlink: 'syz.2.530': attribute type 3 has an invalid length. [ 172.410828][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 173.268998][ T2442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 174.642691][ T28] audit: type=1326 audit(174.622:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.698677][ T28] audit: type=1326 audit(174.672:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.721690][ T28] audit: type=1326 audit(174.672:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.746417][ T28] audit: type=1326 audit(174.672:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.769298][ T28] audit: type=1326 audit(174.672:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.769461][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 174.792504][ T28] audit: type=1326 audit(174.672:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.823872][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.832207][ T28] audit: type=1326 audit(174.672:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.856083][ T2478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.550'. [ 174.865164][ T28] audit: type=1326 audit(174.672:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.900462][ T28] audit: type=1326 audit(174.672:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 174.923896][ T28] audit: type=1326 audit(174.672:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 175.195644][ T2486] netlink: 112 bytes leftover after parsing attributes in process `syz.2.551'. [ 176.270963][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.290797][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.300582][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 176.311429][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.323996][ T6] usb 1-1: config 0 descriptor?? [ 177.555026][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 177.561093][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 177.574957][ T6] usb 1-1: USB disconnect, device number 9 [ 179.850873][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 180.124162][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 180.124177][ T28] audit: type=1400 audit(180.102:5812): avc: denied { read } for pid=2541 comm="syz.3.570" path="socket:[23120]" dev="sockfs" ino=23120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.352552][ T2558] overlayfs: './file0' not a directory [ 181.190803][ T335] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.521827][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.532822][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.542594][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.555524][ T335] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.564590][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.573064][ T335] usb 5-1: config 0 descriptor?? [ 181.912441][ T335] usbhid 5-1:0.0: can't add hid device: -71 [ 181.928583][ T335] usbhid: probe of 5-1:0.0 failed with error -71 [ 181.941548][ T335] usb 5-1: USB disconnect, device number 11 [ 181.970564][ T28] audit: type=1400 audit(181.942:5813): avc: denied { write } for pid=2591 comm="syz.1.583" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.011306][ T28] audit: type=1400 audit(181.972:5814): avc: denied { map } for pid=2591 comm="syz.1.583" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.267144][ T2590] fuse: Unknown parameter '0x0000000000000007' [ 184.065612][ T28] audit: type=1400 audit(184.042:5815): avc: denied { append } for pid=2641 comm="syz.4.588" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 184.930886][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.181979][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.193007][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.203109][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.216284][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.225410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.234156][ T24] usb 3-1: config 0 descriptor?? [ 186.187983][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 186.279232][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 186.315939][ T24] usb 3-1: USB disconnect, device number 7 [ 187.885011][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.116641][ T28] audit: type=1400 audit(188.092:5816): avc: denied { relabelfrom } for pid=2696 comm="syz.2.605" name="UDP" dev="sockfs" ino=23368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 188.123346][ T2722] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 188.150872][ T28] audit: type=1400 audit(188.122:5817): avc: denied { relabelto } for pid=2696 comm="syz.2.605" name="UDP" dev="sockfs" ino=23368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 188.439487][ T28] audit: type=1400 audit(188.132:5818): avc: denied { nlmsg_read } for pid=2696 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.463985][ T28] audit: type=1400 audit(188.442:5819): avc: denied { connect } for pid=2696 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.490875][ T289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.506713][ T28] audit: type=1400 audit(188.442:5820): avc: denied { write } for pid=2696 comm="syz.2.605" path="socket:[24247]" dev="sockfs" ino=24247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.680918][ T289] usb 2-1: Using ep0 maxpacket: 8 [ 188.688053][ T289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.696794][ T289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.707480][ T289] usb 2-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.720722][ T289] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.729064][ T289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.738398][ T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.746735][ T289] usb 2-1: Product: syz [ 188.751275][ T289] usb 2-1: Manufacturer: syz [ 188.755972][ T289] usb 2-1: SerialNumber: syz [ 188.815562][ T28] audit: type=1326 audit(188.792:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398638efc9 code=0x7ffc0000 [ 188.821052][ T1842] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.838989][ T28] audit: type=1326 audit(188.792:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398638efc9 code=0x7ffc0000 [ 188.868769][ T28] audit: type=1326 audit(188.792:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f398638d810 code=0x7ffc0000 [ 188.893103][ T28] audit: type=1326 audit(188.792:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f39863907f7 code=0x7ffc0000 [ 188.916317][ T28] audit: type=1326 audit(188.792:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f398638efc9 code=0x7ffc0000 [ 188.959452][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.925856][ T2749] device wg2 entered promiscuous mode [ 191.940597][ T1842] usb 5-1: Using ep0 maxpacket: 16 [ 191.972309][ T24] usb 3-1: device descriptor read/all, error -61 [ 192.011135][ T289] usb 2-1: bad CDC descriptors [ 192.570335][ T289] usb 2-1: USB disconnect, device number 15 [ 192.570415][ T1842] usb 5-1: device descriptor read/all, error -71 [ 192.932672][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.971126][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.290937][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 193.967474][ T2780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 194.987846][ T6] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 195.001783][ T6] usb 1-1: config 0 has no interface number 0 [ 195.053439][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 195.064679][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.076558][ T6] usb 1-1: Product: syz [ 195.080834][ T6] usb 1-1: Manufacturer: syz [ 195.085513][ T6] usb 1-1: SerialNumber: syz [ 195.100446][ T6] usb 1-1: config 0 descriptor?? [ 195.138667][ T1447] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.284804][ T2816] bridge0: port 3(vlan2) entered blocking state [ 195.291089][ T2816] bridge0: port 3(vlan2) entered disabled state [ 195.308927][ T6] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 195.315451][ T6] usb 1-1: No valid video chain found. [ 195.321511][ T6] usb 1-1: USB disconnect, device number 10 [ 195.331960][ T1447] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.341879][ T1447] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.354946][ T1447] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.361629][ T1447] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 195.390783][ T1447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.404518][ T1447] usb 4-1: config 0 descriptor?? [ 195.500822][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.600786][ T1842] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 195.681757][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.693123][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.702924][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.715930][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.725000][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.733595][ T24] usb 3-1: config 0 descriptor?? [ 195.780851][ T365] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.780927][ T1842] usb 5-1: Using ep0 maxpacket: 16 [ 195.794728][ T1842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.805726][ T1842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.815529][ T1842] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.828383][ T1842] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.837581][ T1842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.846195][ T1842] usb 5-1: config 0 descriptor?? [ 195.984526][ T365] usb 2-1: device descriptor read/64, error -71 [ 195.998736][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 196.004793][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.012278][ T24] usb 3-1: USB disconnect, device number 10 [ 196.018617][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 196.018631][ T28] audit: type=1400 audit(195.992:5836): avc: denied { write } for pid=2785 comm="syz.3.629" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.024781][ T1447] hid-led: probe of 0003:0FC5:B080.000E failed with error -71 [ 196.025630][ T1447] usb 4-1: USB disconnect, device number 12 [ 196.260975][ T365] usb 2-1: device descriptor read/64, error -71 [ 196.279022][ T28] audit: type=1400 audit(195.992:5837): avc: denied { open } for pid=2785 comm="syz.3.629" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.530800][ T365] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 196.534626][ T1842] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input7 [ 196.555334][ T1842] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 196.628263][ T2836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'. [ 196.638137][ T2836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'. [ 196.726872][ T365] usb 2-1: device descriptor read/64, error -71 [ 197.224405][ T1447] usb 5-1: USB disconnect, device number 14 [ 197.260946][ T365] usb 2-1: device descriptor read/64, error -71 [ 197.381029][ T365] usb usb2-port1: attempt power cycle [ 197.693750][ T2858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=2858 comm=syz.0.648 [ 197.719027][ T2858] netlink: 340 bytes leftover after parsing attributes in process `syz.0.648'. [ 198.236780][ T2863] binder: BINDER_SET_CONTEXT_MGR already set [ 198.242817][ T2863] binder: 2856:2863 ioctl 4018620d 200000004a80 returned -16 [ 198.360883][ T28] audit: type=1400 audit(198.212:5838): avc: denied { set_context_mgr } for pid=2856 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 198.568339][ T365] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.612805][ T389] kernel write not supported for file /input/event2 (pid: 389 comm: kworker/1:5) [ 198.714718][ T365] usb 2-1: device descriptor read/8, error -71 [ 200.234421][ T1447] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.243126][ T365] usb 2-1: device descriptor read/8, error -71 [ 202.498521][ T2925] overlayfs: failed to resolve './file1': -2 [ 202.790572][ T2927] overlayfs: failed to resolve './bus': -2 [ 203.453178][ T1447] usb 5-1: device not accepting address 15, error -71 [ 205.911763][ T1447] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.923209][ T2968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 205.933590][ T28] audit: type=1400 audit(206.915:5839): avc: denied { create } for pid=2970 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.971465][ T2973] netlink: 88 bytes leftover after parsing attributes in process `syz.3.683'. [ 205.980651][ T2973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.683'. [ 206.050952][ T289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.101867][ T1447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.112839][ T1447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.123046][ T1447] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.136174][ T1447] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.145256][ T1447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.154215][ T1447] usb 5-1: config 0 descriptor?? [ 206.219757][ T28] audit: type=1326 audit(207.195:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.243391][ T28] audit: type=1326 audit(207.195:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.244620][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.278817][ T28] audit: type=1326 audit(207.195:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.300790][ T365] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 206.307861][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.309586][ T28] audit: type=1326 audit(207.195:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.319057][ T6] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 206.342189][ T28] audit: type=1326 audit(207.195:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.349289][ T289] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 206.380831][ T28] audit: type=1326 audit(207.195:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e3898d810 code=0x7ffc0000 [ 206.381648][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.416266][ T28] audit: type=1326 audit(207.195:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e3898d810 code=0x7ffc0000 [ 206.441609][ T1447] usbhid 5-1:0.0: can't add hid device: -71 [ 206.448304][ T1447] usbhid: probe of 5-1:0.0 failed with error -71 [ 206.459033][ T1447] usb 5-1: USB disconnect, device number 16 [ 206.493242][ T28] audit: type=1326 audit(207.195:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.539137][ T28] audit: type=1326 audit(207.195:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2989 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 206.551224][ T289] usb 3-1: config 0 descriptor?? [ 206.563504][ T365] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 206.575865][ T365] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.586113][ T365] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 206.595102][ T365] usb 4-1: config 1 has no interface number 1 [ 206.603255][ T365] usb 4-1: string descriptor 0 read error: -22 [ 206.609468][ T365] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.618648][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.628517][ T365] usb 4-1: MIDIStreaming interface descriptor not found [ 206.636129][ T365] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 206.722183][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.730637][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 206.740653][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.755014][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 206.764133][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.772260][ T6] usb 1-1: Product: ぇ䜗豄힙㧶縴ᄥ瓟燂뺩ꑪꛣ箂ᇵ桴뾇첧꒞ሪ᧑뚤牟Ჲ撿챻nﶜ㕬镩牫䯴 [ 206.785175][ T6] usb 1-1: Manufacturer: 㑦Äᱸגּ䵮ꖹꏠ㖸踤풱ǟ⢥舦꿀ᯪ㸊㒸聰金⠞⋌ⷆ꒳掖㳮鮙馝츕⬢祅槇㒧叻꒥멷翍鎫校鲅ꥵ⋓Ø鑒Ḧ젲峥佹ℜ [ 206.803188][ T6] usb 1-1: SerialNumber: ч [ 206.808425][ T2983] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 206.838333][ T19] usb 4-1: USB disconnect, device number 13 [ 207.016363][ T289] logitech 0003:046D:C29C.0010: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 207.029254][ T6] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.042195][ T6] usb 1-1: USB disconnect, device number 11 [ 207.283295][ T6] usblp0: removed [ 207.294269][ T289] logitech 0003:046D:C29C.0010: no inputs found [ 207.303756][ T289] usb 3-1: USB disconnect, device number 11 [ 208.573107][ T1447] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 208.762860][ T1447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.954096][ T1447] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.979402][ T1447] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 209.006344][ T1447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.023173][ T1447] usb 5-1: config 0 descriptor?? [ 210.968488][ T3058] device ip6erspan0 entered promiscuous mode [ 211.021799][ T3063] block device autoloading is deprecated and will be removed. [ 211.029634][ T3063] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.039813][ T3063] FAT-fs (loop1): unable to read boot sector [ 211.268730][ T1447] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 211.340044][ T1447] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 211.383095][ T1447] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 211.416661][ T1447] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 211.433443][ T1447] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 211.440102][ T3075] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 211.441369][ T3075] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 211.456328][ T1447] lua 0003:1E7D:2C2E.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 211.468827][ T1447] usb 5-1: USB disconnect, device number 17 [ 211.790802][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 212.346882][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 212.355099][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.364738][ T24] usb 1-1: config 0 has no interface number 0 [ 212.375991][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 212.386155][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.422050][ T24] usb 1-1: Product: syz [ 212.445647][ T24] usb 1-1: Manufacturer: syz [ 212.469956][ T24] usb 1-1: SerialNumber: syz [ 212.505027][ T24] usb 1-1: config 0 descriptor?? [ 212.510875][ T24] smsc95xx v2.0.0 [ 212.633213][ T3094] netlink: 'syz.4.717': attribute type 13 has an invalid length. [ 212.642794][ T3094] gretap0: refused to change device tx_queue_len [ 212.649771][ T3094] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.666391][ T3094] netlink: 'syz.4.717': attribute type 3 has an invalid length. [ 212.704260][ T289] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 212.830088][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 212.830113][ T28] audit: type=1400 audit(213.805:5888): avc: denied { mounton } for pid=3096 comm="syz.3.718" path="/133/file0" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 212.982674][ T28] audit: type=1400 audit(213.965:5889): avc: denied { mounton } for pid=3096 comm="syz.3.718" path="/133/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 213.006754][ T289] usb 3-1: config 1 interface 0 has no altsetting 0 [ 213.018990][ T6] kernel write not supported for file bpf-prog (pid: 6 comm: kworker/0:0) [ 213.030939][ T289] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 213.077676][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.114090][ T289] usb 3-1: Product: syz [ 213.135324][ T289] usb 3-1: Manufacturer: syz [ 213.157280][ T289] usb 3-1: SerialNumber: syz [ 213.673476][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 213.723570][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.498948][ T289] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 214.511510][ T289] usb 3-1: USB disconnect, device number 12 [ 214.552535][ T289] usblp0: removed [ 214.901912][ T28] audit: type=1400 audit(215.885:5890): avc: denied { create } for pid=3133 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 214.948139][ T3138] 9pnet_fd: Insufficient options for proto=fd [ 214.954727][ T3138] syz.1.731[3138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.954787][ T3138] syz.1.731[3138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.967224][ T3138] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 215.056025][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 215.069500][ T24] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 215.079565][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 215.081631][ T24] usb 1-1: USB disconnect, device number 12 [ 215.904805][ T3152] device wireguard0 entered promiscuous mode [ 217.123910][ T3164] netlink: 'syz.2.738': attribute type 3 has an invalid length. [ 217.132257][ T3164] netlink: 'syz.2.738': attribute type 3 has an invalid length. [ 217.208667][ T28] audit: type=1400 audit(218.185:5891): avc: denied { bind } for pid=3161 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.239511][ T28] audit: type=1400 audit(218.205:5892): avc: denied { listen } for pid=3161 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.304621][ T28] audit: type=1400 audit(218.205:5893): avc: denied { create } for pid=3161 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 217.324116][ T28] audit: type=1400 audit(218.275:5894): avc: denied { create } for pid=3171 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.401049][ T3182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3182 comm=syz.4.741 [ 217.437957][ T3186] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 218.368652][ T1447] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 218.421208][ T3200] tipc: New replicast peer: 255.255.255.255 [ 218.429988][ T3200] tipc: Enabled bearer , priority 10 [ 218.744518][ T28] audit: type=1400 audit(219.725:5895): avc: denied { read } for pid=3212 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.751077][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.961839][ T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.971889][ T24] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 218.985557][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.992772][ T24] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 219.002470][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.043755][ T24] usb 4-1: config 0 descriptor?? [ 219.530829][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 219.551416][ T24] a4tech 0003:09DA:000A.0012: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 219.861083][ T28] audit: type=1400 audit(220.805:5896): avc: denied { ioctl } for pid=3224 comm="syz.2.758" path="socket:[25494]" dev="sockfs" ino=25494 ioctlcmd=0x7440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 219.892756][ T28] audit: type=1400 audit(220.835:5897): avc: denied { getattr } for pid=3230 comm="syz.2.760" name="/" dev="incremental-fs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 220.130982][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.140879][ T28] audit: type=1400 audit(221.095:5898): avc: denied { write } for pid=3234 comm="syz.2.762" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.322902][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.354416][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.404181][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.470881][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.516094][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.560640][ T24] usb 1-1: config 0 descriptor?? [ 220.845167][ T19] usb 4-1: USB disconnect, device number 14 [ 221.103052][ T24] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 221.157088][ T24] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 221.956986][ T6] usb 1-1: USB disconnect, device number 13 [ 224.281011][ T19] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 224.532298][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.550136][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.550247][ T28] audit: type=1400 audit(225.525:5899): avc: denied { map } for pid=3286 comm="syz.0.776" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.560107][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 224.662468][ T3312] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.676431][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 224.811338][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.819934][ T19] usb 5-1: config 0 descriptor?? [ 224.914272][ T24] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 224.923569][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.931933][ T24] usb 4-1: SerialNumber: syz [ 224.933303][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 224.937125][ T24] usb 4-1: config 0 descriptor?? [ 224.942756][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 224.956126][ T19] usb 5-1: USB disconnect, device number 18 [ 225.120795][ T289] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.318036][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.339154][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.351126][ T289] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.826231][ T28] audit: type=1400 audit(226.805:5900): avc: denied { watch_reads } for pid=3323 comm="syz.2.788" path="/160" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.288747][ T289] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.297890][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.310074][ T289] usb 1-1: config 0 descriptor?? [ 226.319783][ T19] usb 4-1: USB disconnect, device number 15 [ 226.742203][ T289] usbhid 1-1:0.0: can't add hid device: -71 [ 226.748249][ T289] usbhid: probe of 1-1:0.0 failed with error -71 [ 226.755693][ T289] usb 1-1: USB disconnect, device number 14 [ 227.334147][ T3370] syz.1.798 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 230.431412][ T289] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 230.631544][ T3388] netlink: 'syz.3.803': attribute type 11 has an invalid length. [ 230.652133][ T3388] netlink: 'syz.3.803': attribute type 11 has an invalid length. [ 230.682260][ T28] audit: type=1400 audit(231.665:5901): avc: denied { read } for pid=3394 comm="syz.4.806" name="file0" dev="incremental-fs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.711825][ T28] audit: type=1400 audit(231.665:5902): avc: denied { open } for pid=3394 comm="syz.4.806" path="/153/file0/file0" dev="incremental-fs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.735934][ T28] audit: type=1400 audit(231.715:5903): avc: denied { mounton } for pid=3394 comm="syz.4.806" path="/153/file0/file0" dev="incremental-fs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.846889][ T3404] netlink: 'syz.4.809': attribute type 5 has an invalid length. [ 231.130967][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 231.230162][ T289] usb 5-1: device not accepting address 19, error -71 [ 231.331887][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.356229][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.382544][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.396654][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.406053][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.421716][ T24] usb 1-1: config 0 descriptor?? [ 231.545076][ T3408] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 231.639948][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 231.648630][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 231.682774][ T24] usb 1-1: USB disconnect, device number 15 [ 231.990805][ T6] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.181941][ T6] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 232.192397][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.203918][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 232.215440][ T6] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.228541][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.237635][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.284147][ T6] usb 4-1: invalid MIDI out EP 0 [ 232.289566][ T3438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3438 comm=syz.4.820 [ 232.291569][ T6] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 232.652891][ T24] usb 4-1: USB disconnect, device number 16 [ 233.235230][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 234.470822][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.619242][ T28] audit: type=1400 audit(235.595:5904): avc: denied { read } for pid=3516 comm="syz.0.842" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 234.641850][ T28] audit: type=1400 audit(235.625:5905): avc: denied { open } for pid=3516 comm="syz.0.842" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 234.671856][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.684605][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.694776][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.707971][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.718376][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.730322][ T24] usb 3-1: config 0 descriptor?? [ 234.929990][ T28] audit: type=1400 audit(235.905:5906): avc: denied { create } for pid=3526 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 234.954769][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 234.956958][ T28] audit: type=1400 audit(235.915:5907): avc: denied { create } for pid=3526 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.962998][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 234.984576][ T28] audit: type=1400 audit(235.915:5908): avc: denied { connect } for pid=3526 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.990178][ T24] usb 3-1: USB disconnect, device number 13 [ 235.007881][ T28] audit: type=1400 audit(235.915:5909): avc: denied { create } for pid=3526 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 235.033783][ T28] audit: type=1400 audit(235.915:5910): avc: denied { write } for pid=3526 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 235.411286][ T3540] netlink: 88 bytes leftover after parsing attributes in process `syz.3.848'. [ 235.420254][ T3540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.848'. [ 235.611091][ T289] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.692233][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 235.692248][ T28] audit: type=1400 audit(236.675:5921): avc: denied { remount } for pid=3553 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.732979][ T28] audit: type=1400 audit(236.695:5922): avc: denied { search } for pid=3553 comm="syz.0.853" name="/" dev="configfs" ino=13419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.772289][ T28] audit: type=1400 audit(236.695:5923): avc: denied { read } for pid=3553 comm="syz.0.853" name="/" dev="configfs" ino=13419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.850241][ T289] usb 2-1: Using ep0 maxpacket: 16 [ 235.860449][ T28] audit: type=1400 audit(236.695:5924): avc: denied { open } for pid=3553 comm="syz.0.853" path="/" dev="configfs" ino=13419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.883424][ T28] audit: type=1400 audit(236.705:5925): avc: denied { write } for pid=3553 comm="syz.0.853" name="/" dev="configfs" ino=13419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.905195][ T289] usb 2-1: config index 0 descriptor too short (expected 65532, got 18) [ 235.913985][ T289] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 235.922281][ T289] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 235.931476][ T28] audit: type=1400 audit(236.705:5926): avc: denied { write } for pid=3550 comm="syz.2.852" path="socket:[27671]" dev="sockfs" ino=27671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.989779][ T28] audit: type=1400 audit(236.705:5927): avc: denied { accept } for pid=3550 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.991922][ T289] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 236.018583][ T289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.027571][ T289] usb 2-1: Product: syz [ 236.031944][ T289] usb 2-1: Manufacturer: syz [ 236.036543][ T289] usb 2-1: SerialNumber: syz [ 236.950066][ T28] audit: type=1400 audit(236.705:5928): avc: denied { read } for pid=3550 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 236.990451][ T289] r8152-cfgselector 2-1: config 0 descriptor?? [ 237.025815][ T3576] fuse: Bad value for 'user_id' [ 237.931104][ T1447] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.091898][ T289] r8152-cfgselector 2-1: Unknown version 0x0000 [ 238.099342][ T289] r8152-cfgselector 2-1: Unknown version 0x0000 [ 238.113696][ T3602] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 238.131005][ T289] r8152-cfgselector 2-1: bad CDC descriptors [ 238.137619][ T289] r8152-cfgselector 2-1: Unknown version 0x0000 [ 238.144895][ T3600] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 238.159431][ T289] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 238.172132][ T3604] netlink: 88 bytes leftover after parsing attributes in process `syz.0.865'. [ 238.191945][ T3600] netlink: 'syz.2.866': attribute type 2 has an invalid length. [ 238.200298][ T3604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.865'. [ 238.202680][ T1447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.209937][ T3599] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 238.228628][ T3599] netlink: 'syz.2.866': attribute type 2 has an invalid length. [ 238.238126][ T1447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.258170][ T1447] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.340665][ T1447] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.354451][ T1447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.367379][ T3614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.869'. [ 238.371050][ T1447] usb 4-1: config 0 descriptor?? [ 238.628570][ T1447] usbhid 4-1:0.0: can't add hid device: -71 [ 238.637113][ T1447] usbhid: probe of 4-1:0.0 failed with error -71 [ 238.707235][ T1447] usb 4-1: USB disconnect, device number 17 [ 238.718503][ T28] audit: type=1326 audit(239.695:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 238.745307][ T28] audit: type=1326 audit(239.725:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f441af8efc9 code=0x7ffc0000 [ 241.063854][ T1447] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 241.383002][ T3687] netlink: 'syz.4.887': attribute type 13 has an invalid length. [ 241.393647][ T3687] gretap0: refused to change device tx_queue_len [ 241.407911][ T3689] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 241.407965][ T3687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.422085][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.442903][ T3690] netlink: 'syz.4.887': attribute type 3 has an invalid length. [ 241.451108][ T1447] usb 2-1: device descriptor read/64, error -71 [ 241.470527][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 241.470539][ T28] audit: type=1400 audit(242.445:5966): avc: denied { read write } for pid=1730 comm="syz-executor" name="loop0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.499347][ T28] audit: type=1400 audit(242.445:5967): avc: denied { open } for pid=1730 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.522128][ T28] audit: type=1400 audit(242.445:5968): avc: denied { ioctl } for pid=1730 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=717 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.641820][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.652811][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.662739][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.675790][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.684861][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.693415][ T24] usb 4-1: config 0 descriptor?? [ 241.730828][ T1447] usb 2-1: device descriptor read/64, error -71 [ 241.740775][ T365] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 241.836941][ T3696] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 241.953150][ T365] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.961935][ T365] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 241.972227][ T365] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.981233][ T365] usb 1-1: config 1 has no interface number 1 [ 241.987534][ T365] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.000674][ T365] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 242.007062][ T3707] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 242.011980][ T365] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 242.021434][ T3707] netlink: 5 bytes leftover after parsing attributes in process `syz.2.896'. [ 242.031536][ T1447] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 242.040098][ T3707] device bridge_slave_1 left promiscuous mode [ 242.049504][ T365] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.053732][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.062610][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.077428][ T365] usb 1-1: Product: syz [ 242.081889][ T365] usb 1-1: Manufacturer: syz [ 242.086502][ T365] usb 1-1: SerialNumber: syz [ 242.108308][ T24] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 242.131817][ T24] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 242.230864][ T1447] usb 2-1: device descriptor read/64, error -71 [ 242.321226][ T3692] loop0: detected capacity change from 0 to 4096 [ 242.343300][ T3692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.353511][ T28] audit: type=1400 audit(243.335:5969): avc: denied { create } for pid=3691 comm="syz.0.892" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 242.354595][ T3692] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.892: corrupted inode contents [ 242.385233][ T3692] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #15: comm syz.0.892: mark_inode_dirty error [ 242.390997][ T28] audit: type=1400 audit(243.335:5970): avc: denied { write } for pid=3691 comm="syz.0.892" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.396648][ T3692] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.892: corrupted inode contents [ 242.431413][ T3692] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.892: mark_inode_dirty error [ 242.442908][ T3692] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.892: corrupted inode contents [ 242.454871][ T3692] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.892: mark_inode_dirty error [ 242.466378][ T3692] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.892: corrupted inode contents [ 242.478313][ T3692] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.892: mark_inode_dirty error [ 242.500894][ T1447] usb 2-1: device descriptor read/64, error -71 [ 242.507301][ T28] audit: type=1400 audit(243.335:5971): avc: denied { open } for pid=3691 comm="syz.0.892" path="/106/file3/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.538767][ T3692] EXT4-fs error (device loop0) in ext4_setattr:5660: Corrupt filesystem [ 242.551177][ T3715] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.892: corrupted inode contents [ 242.590083][ T28] audit: type=1400 audit(243.405:5972): avc: denied { read } for pid=3691 comm="syz.0.892" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.623734][ T28] audit: type=1400 audit(243.515:5973): avc: denied { ioctl } for pid=3691 comm="syz.0.892" path="/106/file3/file1" dev="loop0" ino=15 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.647829][ T1447] usb usb2-port1: attempt power cycle [ 242.678816][ T19] usb 4-1: USB disconnect, device number 18 [ 242.711926][ T365] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 242.719748][ T365] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 242.740796][ T365] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 242.763291][ T365] usb 1-1: USB disconnect, device number 16 [ 243.060811][ T1447] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 243.091725][ T1447] usb 2-1: device descriptor read/8, error -71 [ 243.120893][ T289] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 243.209506][ T3724] device veth0 entered promiscuous mode [ 243.234089][ T1730] EXT4-fs (loop0): unmounting filesystem. [ 243.241777][ T1447] usb 2-1: device descriptor read/8, error -71 [ 243.262020][ T3723] device veth0 left promiscuous mode [ 243.313717][ T289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.323884][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 243.335023][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 243.344826][ T289] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.357670][ T289] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 243.367138][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.581130][ T1447] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 243.597192][ T289] usb 3-1: config 0 descriptor?? [ 243.611882][ T289] usb 3-1: MIDIStreaming interface descriptor not found [ 243.651829][ T1447] usb 2-1: device descriptor read/8, error -71 [ 243.778332][ T3738] netlink: 'syz.3.903': attribute type 13 has an invalid length. [ 243.787016][ T3738] gretap0: refused to change device tx_queue_len [ 243.793727][ T3738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 243.809972][ T3738] netlink: 'syz.3.903': attribute type 3 has an invalid length. [ 243.814983][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.818410][ T1447] usb 2-1: device descriptor read/8, error -71 [ 243.826618][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.843186][ T289] usb 3-1: USB disconnect, device number 14 [ 243.940872][ T1447] usb usb2-port1: unable to enumerate USB device [ 244.419900][ T1447] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.613157][ T1447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.656349][ T1447] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.739724][ T1447] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.827083][ T1447] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.852166][ T3764] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 244.868456][ T1447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.881241][ T1447] usb 2-1: config 0 descriptor?? [ 244.896083][ T3764] kernel profiling enabled (shift: 17) [ 245.155303][ T1447] usbhid 2-1:0.0: can't add hid device: -71 [ 245.161362][ T1447] usbhid: probe of 2-1:0.0 failed with error -71 [ 245.169135][ T1447] usb 2-1: USB disconnect, device number 26 [ 245.355865][ T3787] bridge0: port 2(vlan2) entered blocking state [ 245.362711][ T3787] bridge0: port 2(vlan2) entered disabled state [ 245.470902][ T19] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.693643][ T3798] netlink: 'syz.3.921': attribute type 13 has an invalid length. [ 245.704079][ T3798] gretap0: refused to change device tx_queue_len [ 245.711193][ T3798] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.731003][ T3798] netlink: 'syz.3.921': attribute type 3 has an invalid length. [ 245.822503][ T19] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 246.065675][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.083826][ T19] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 246.096032][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.560882][ T28] audit: type=1400 audit(247.475:5974): avc: denied { create } for pid=3810 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.610952][ T19] usb 1-1: config 0 descriptor?? [ 247.904541][ T19] usb 1-1: string descriptor 0 read error: -71 [ 247.995415][ T19] usb 1-1: USB disconnect, device number 17 [ 248.208737][ T3849] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 249.171331][ T3843] loop0: detected capacity change from 0 to 40427 [ 249.303831][ T3843] F2FS-fs (loop0): invalid crc value [ 249.335901][ T3843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.537119][ T3843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.554029][ T28] audit: type=1400 audit(250.535:5975): avc: denied { read append open } for pid=3842 comm="syz.0.937" path="/110/file0/memory.events" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.578423][ T28] audit: type=1400 audit(250.555:5976): avc: denied { ioctl } for pid=3842 comm="syz.0.937" path="/110/file0/memory.events" dev="loop0" ino=10 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.578542][ T3863] f2fs_ckpt-7:0: attempt to access beyond end of device [ 249.578542][ T3863] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.686721][ T3843] netlink: 'syz.0.937': attribute type 13 has an invalid length. [ 249.697628][ T3843] gretap0: refused to change device tx_queue_len [ 249.704337][ T3843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.721479][ T3843] netlink: 'syz.0.937': attribute type 3 has an invalid length. [ 249.884569][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.946'. [ 250.213939][ T1447] hid (null): bogus close delimiter [ 250.219175][ T1447] hid (null): unknown global tag 0xe [ 250.224514][ T1447] hid (null): unknown global tag 0xe [ 250.229827][ T1447] hid (null): unknown global tag 0xc [ 250.235374][ T1447] hid (null): unknown global tag 0xc [ 250.241006][ T1447] hid (null): report_id 0 is invalid [ 250.253259][ T1447] hid (null): unknown global tag 0xc [ 251.006376][ T3892] binder: 3889:3892 ioctl c0306201 0 returned -14 [ 251.422731][ T1447] hid (null): invalid report_count 34832 [ 251.428535][ T1447] hid (null): unknown global tag 0xe [ 251.434820][ T1447] hid (null): report_id 0 is invalid [ 251.645620][ T1447] hid (null): unknown global tag 0xc [ 251.657205][ T1447] hid (null): invalid report_count 17407 [ 251.673282][ T1447] hid (null): unknown global tag 0xd [ 251.787444][ T3903] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 252.216466][ T1447] hid (null): invalid report_size 42226 [ 252.222168][ T1447] hid (null): unknown global tag 0xc [ 252.409504][ T1447] hid (null): unknown global tag 0x7d [ 252.449233][ T1447] hid (null): unknown global tag 0xe [ 252.456103][ T1447] hid (null): unknown global tag 0xe [ 252.507794][ T1447] hid (null): unknown global tag 0x28 [ 252.513293][ T1447] hid (null): report_id 109135514 is invalid [ 252.519312][ T1447] hid (null): unknown global tag 0x77 [ 252.524773][ T1447] hid (null): report_id 0 is invalid [ 252.530064][ T1447] hid (null): bogus close delimiter [ 252.535354][ T1447] hid (null): unknown global tag 0xc [ 252.541168][ T1447] hid (null): unknown global tag 0xc [ 252.546551][ T1447] hid (null): unknown global tag 0xc [ 252.552596][ T1447] hid (null): unknown global tag 0x23 [ 252.558138][ T1447] hid (null): report_id 605750692 is invalid [ 252.564240][ T1447] hid (null): invalid report_size 46881 [ 252.570256][ T1447] hid (null): unknown global tag 0xc [ 252.575648][ T1447] hid (null): unknown global tag 0xe [ 252.581003][ T1447] hid (null): unknown global tag 0xd [ 252.586331][ T1447] hid (null): global environment stack overflow [ 252.592732][ T1447] hid (null): unknown global tag 0xe [ 252.598076][ T1447] hid (null): invalid report_size 24840 [ 252.617175][ T1447] hid (null): unknown global tag 0xd [ 252.744690][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 253.009347][ T1447] hid (null): invalid report_size 788182346 [ 253.089099][ T1447] hid (null): unknown global tag 0xe [ 253.137466][ T1447] hid (null): invalid report_count 39791 [ 253.182896][ T1447] hid-generic 0002:0004:F02C.0015: unknown main item tag 0xd [ 253.215757][ T1447] hid-generic 0002:0004:F02C.0015: unknown main item tag 0x4 [ 253.277777][ T1447] hid-generic 0002:0004:F02C.0015: unexpected long global item [ 253.497102][ T1447] hid-generic: probe of 0002:0004:F02C.0015 failed with error -22 [ 253.551752][ T19] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 253.595234][ T3927] netlink: 88 bytes leftover after parsing attributes in process `syz.1.958'. [ 253.611091][ T3927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.958'. [ 253.743773][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.747389][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.1.963 [ 253.764509][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.789794][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 253.808650][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.828220][ T19] usb 1-1: config 0 descriptor?? [ 254.899103][ T19] logitech 0003:046D:C29C.0016: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 255.013872][ T3952] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.194448][ T19] logitech 0003:046D:C29C.0016: no inputs found [ 255.212220][ T19] usb 1-1: USB disconnect, device number 18 [ 255.261765][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 255.292008][ T3958] mmap: syz.3.968 (3958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.572469][ T3980] FAULT_INJECTION: forcing a failure. [ 255.572469][ T3980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.585802][ T3980] CPU: 0 PID: 3980 Comm: syz.1.969 Not tainted syzkaller #0 [ 255.593099][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.603171][ T3980] Call Trace: [ 255.606450][ T3980] [ 255.609380][ T3980] __dump_stack+0x21/0x24 [ 255.613710][ T3980] dump_stack_lvl+0xee/0x150 [ 255.618294][ T3980] ? __cfi_dump_stack_lvl+0x8/0x8 [ 255.623315][ T3980] dump_stack+0x15/0x24 [ 255.627462][ T3980] should_fail_ex+0x3d4/0x520 [ 255.632136][ T3980] should_fail+0xb/0x10 [ 255.636289][ T3980] should_fail_usercopy+0x1a/0x20 [ 255.641313][ T3980] _copy_from_user+0x1e/0xc0 [ 255.645902][ T3980] iovec_from_user+0x1aa/0x2e0 [ 255.650707][ T3980] ? _parse_integer+0x2a/0x40 [ 255.655385][ T3980] __import_iovec+0x71/0x470 [ 255.659983][ T3980] import_iovec+0x7c/0xb0 [ 255.664320][ T3980] ___sys_sendmsg+0x1e4/0x290 [ 255.669083][ T3980] ? __sys_sendmsg+0x270/0x270 [ 255.673841][ T3980] ? __kasan_check_write+0x14/0x20 [ 255.678948][ T3980] ? proc_fail_nth_write+0x17a/0x1f0 [ 255.684233][ T3980] ? vfs_write+0x9d6/0xca0 [ 255.688658][ T3980] ? __fdget+0x19c/0x220 [ 255.692898][ T3980] __x64_sys_sendmsg+0x1f0/0x2c0 [ 255.697834][ T3980] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 255.703296][ T3980] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 255.709362][ T3980] x64_sys_call+0x171/0x9a0 [ 255.713869][ T3980] do_syscall_64+0x4c/0xa0 [ 255.718281][ T3980] ? clear_bhb_loop+0x30/0x80 [ 255.722966][ T3980] ? clear_bhb_loop+0x30/0x80 [ 255.727680][ T3980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.733575][ T3980] RIP: 0033:0x7f6e3898efc9 [ 255.738003][ T3980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.757618][ T3980] RSP: 002b:00007f6e397ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.766034][ T3980] RAX: ffffffffffffffda RBX: 00007f6e38be6180 RCX: 00007f6e3898efc9 [ 255.773990][ T3980] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 255.781943][ T3980] RBP: 00007f6e397ed090 R08: 0000000000000000 R09: 0000000000000000 [ 255.789896][ T3980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.797850][ T3980] R13: 00007f6e38be6218 R14: 00007f6e38be6180 R15: 00007ffc7776c828 [ 255.805818][ T3980] [ 256.695245][ T19] kernel write not supported for file bpf-prog (pid: 19 comm: kworker/0:1) [ 257.123949][ T4026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4026 comm=syz.4.988 [ 257.147056][ T4026] overlayfs: failed to clone upperpath [ 257.476911][ T19] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 257.526802][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 257.679482][ T28] audit: type=1400 audit(258.655:5977): avc: denied { associate } for pid=4036 comm="syz.3.992" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.701782][ T19] usb 1-1: config 127 has an invalid interface number: 163 but max is 0 [ 257.710223][ T19] usb 1-1: config 127 has no interface number 0 [ 257.716692][ T19] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=6d.d9 [ 257.887917][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.897528][ T19] rtl8150 1-1:127.163: couldn't find required endpoints [ 257.904608][ T19] rtl8150: probe of 1-1:127.163 failed with error -5 [ 257.926295][ T4045] netlink: 88 bytes leftover after parsing attributes in process `syz.3.994'. [ 257.935539][ T4045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.994'. [ 258.048851][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 258.682042][ T1447] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.851951][ T1447] usb 2-1: device descriptor read/64, error -71 [ 259.003442][ T4081] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1006'. [ 259.012556][ T4081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1006'. [ 259.131049][ T1447] usb 2-1: device descriptor read/64, error -71 [ 259.186005][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 259.197265][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 259.209273][ T28] audit: type=1400 audit(260.165:5978): avc: denied { bind } for pid=4082 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.290841][ T28] audit: type=1400 audit(260.165:5979): avc: denied { setopt } for pid=4082 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.400830][ T1447] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 259.550789][ T1447] usb 2-1: device descriptor read/64, error -71 [ 259.951573][ T4094] netlink: 'syz.3.1010': attribute type 3 has an invalid length. [ 259.959411][ T4094] netlink: 'syz.3.1010': attribute type 3 has an invalid length. [ 260.022284][ T1447] usb 2-1: device descriptor read/64, error -71 [ 260.041703][ T365] usb 1-1: USB disconnect, device number 19 [ 260.141298][ T1447] usb usb2-port1: attempt power cycle [ 260.730803][ T1447] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 260.761852][ T1447] usb 2-1: device descriptor read/8, error -71 [ 260.810833][ T365] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 260.919628][ T4115] device bridge0 entered promiscuous mode [ 260.924486][ T1447] usb 2-1: device descriptor read/8, error -71 [ 260.925903][ T4115] bridge0: port 3(macsec1) entered blocking state [ 260.937986][ T4115] bridge0: port 3(macsec1) entered disabled state [ 260.945556][ T4115] device bridge0 left promiscuous mode [ 261.041728][ T365] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 261.052530][ T365] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.063510][ T365] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 261.073374][ T365] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.086373][ T365] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.095730][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.111706][ T365] usb 4-1: invalid MIDI out EP 0 [ 261.127669][ T365] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 261.510436][ T1447] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 261.646140][ T1447] usb 2-1: device descriptor read/8, error -71 [ 261.665630][ T6] usb 4-1: USB disconnect, device number 19 [ 261.801752][ T1447] usb 2-1: device descriptor read/8, error -71 [ 261.863396][ T4141] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1025'. [ 261.881305][ T4141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1025'. [ 261.922205][ T1447] usb usb2-port1: unable to enumerate USB device [ 262.091708][ T4146] netlink: 'syz.2.1023': attribute type 13 has an invalid length. [ 262.102402][ T4146] gretap0: refused to change device tx_queue_len [ 262.109384][ T4146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 262.131053][ T4146] netlink: 'syz.2.1023': attribute type 3 has an invalid length. [ 263.460841][ T1447] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 263.640861][ T365] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.648497][ T1447] usb 2-1: device descriptor read/64, error -71 [ 263.670829][ T24] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 263.743388][ T4179] overlayfs: failed to clone upperpath [ 263.866158][ T28] audit: type=1400 audit(264.735:5980): avc: denied { remount } for pid=4175 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.930845][ T365] usb 1-1: Using ep0 maxpacket: 32 [ 263.937183][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.948195][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 263.957324][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.965387][ T365] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 263.974764][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.982983][ T24] usb 3-1: config 0 descriptor?? [ 263.988798][ T365] usb 1-1: config 0 descriptor?? [ 264.040777][ T1447] usb 2-1: device descriptor read/64, error -71 [ 264.310850][ T1447] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 264.403223][ T365] hid-generic 0003:1B1C:1C0B.0017: unbalanced delimiter at end of report description [ 264.429275][ T365] hid-generic: probe of 0003:1B1C:1C0B.0017 failed with error -22 [ 264.460834][ T1447] usb 2-1: device descriptor read/64, error -71 [ 264.597143][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 264.607392][ T24] asix: probe of 3-1:0.0 failed with error -61 [ 264.760843][ T1447] usb 2-1: device descriptor read/64, error -71 [ 264.792046][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.800558][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.880890][ T1447] usb usb2-port1: attempt power cycle [ 265.290880][ T1447] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 265.321822][ T1447] usb 2-1: device descriptor read/8, error -71 [ 265.472027][ T1447] usb 2-1: device descriptor read/8, error -71 [ 265.740908][ T1447] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 266.210925][ T1447] usb 2-1: device not accepting address 34, error -71 [ 266.553876][ T1447] usb usb2-port1: unable to enumerate USB device [ 266.706088][ T24] usb 3-1: USB disconnect, device number 15 [ 266.712390][ T365] usb 1-1: USB disconnect, device number 20 [ 268.135420][ T28] audit: type=1400 audit(269.115:5981): avc: denied { create } for pid=4229 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.230924][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.291273][ T28] audit: type=1400 audit(269.275:5982): avc: denied { mount } for pid=4237 comm="syz.4.1056" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.390956][ T6] usb 3-1: device descriptor read/64, error -71 [ 269.111537][ T19] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 270.090833][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 270.101049][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 270.110999][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 270.117125][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.127352][ T6] usb 3-1: device descriptor read/64, error -71 [ 270.133719][ T19] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.143179][ T19] usb 1-1: config 1 has no interface number 1 [ 270.280978][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 270.316062][ T19] usb 1-1: too many endpoints for config 1 interface 2 altsetting 2: 52, using maximum allowed: 30 [ 270.322524][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.326878][ T19] usb 1-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 270.338443][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.350906][ T19] usb 1-1: config 1 interface 2 has no altsetting 0 [ 270.361705][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.368825][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.380402][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 270.398351][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.408000][ T24] usb 4-1: config 0 descriptor?? [ 270.437700][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.445811][ T19] usb 1-1: Product: ࠾ [ 270.450024][ T19] usb 1-1: Manufacturer: 鈾򼑫輑ꗭ㒷ᶎ㧜ꮐ报숹뿂쐒窢ڛ偪趁磸噏撂䍼ཬ⾳̍ᐬ䷬朹 [ 270.461625][ T19] usb 1-1: SerialNumber: 뀑ꭑ䝑둟婳관貿홨麛䣾눈理執㐉茌鈧챇ᰲꥯ䎡繝溜䃢蠎輥褧汳┘൭檱ࠪ∲斜㿶ᾦ㾕栻㏡舒谇蹅ఝ銧隥⬝ℋ㽅ﷳ❰跀꺼䬁移ꨣ앵ㅙ︗Ḯ텐ᭌＱ泆㇋뱐덬ᙔ蠿體ꍢ攒箒᝞Ⳓ칼嬄ㆭ웠賄瑻겪๓仨誧ด⋤儶꾈Ꮰ䣕刑ｏൖ嬶뛠 [ 270.500160][ T19] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 270.508955][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 270.516761][ T19] usb 1-1: no configuration chosen from 1 choice [ 270.615263][ T24] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 270.623086][ T24] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 270.631607][ T24] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 270.643502][ T24] microsoft 0003:045E:07DA.0018: no inputs found [ 270.649994][ T24] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 270.661602][ T24] usb 4-1: USB disconnect, device number 20 [ 270.670806][ T6] usb 3-1: device descriptor read/64, error -71 [ 270.677282][ T4275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 270.686592][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 271.171818][ T1842] usb 1-1: USB disconnect, device number 21 [ 271.184559][ T4289] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1070'. [ 271.193755][ T4289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1070'. [ 271.290919][ T19] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 271.474963][ T19] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 271.485296][ T19] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.496424][ T19] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 271.506305][ T19] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.519261][ T19] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.528357][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.541743][ T19] usb 2-1: invalid MIDI out EP 0 [ 271.547968][ T19] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 271.760276][ T19] usb 2-1: USB disconnect, device number 35 [ 272.502475][ T4324] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1082'. [ 272.516908][ T4324] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1082'. [ 272.580883][ T6] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 272.760770][ T6] usb 3-1: device descriptor read/64, error -71 [ 272.820503][ T4334] netlink: 'syz.1.1080': attribute type 13 has an invalid length. [ 272.831520][ T4334] gretap0: refused to change device tx_queue_len [ 272.838624][ T4334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.859707][ T4334] netlink: 'syz.1.1080': attribute type 3 has an invalid length. [ 273.060943][ T6] usb 3-1: device descriptor read/64, error -71 [ 273.345241][ T6] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 273.353082][ T4330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1084'. [ 273.445209][ T4340] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 273.456194][ T28] audit: type=1400 audit(274.435:5983): avc: denied { relabelto } for pid=4339 comm="syz.0.1086" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:file_context_t:s0" [ 273.819056][ T28] audit: type=1400 audit(274.435:5984): avc: denied { associate } for pid=4339 comm="syz.0.1086" name="file0" dev="tmpfs" ino=731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:file_context_t:s0" [ 273.846085][ T28] audit: type=1400 audit(274.435:5985): avc: denied { write } for pid=4339 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.866754][ T28] audit: type=1400 audit(274.635:5986): avc: denied { mounton } for pid=4339 comm="syz.0.1086" path="/133/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:file_context_t:s0" [ 273.900971][ T6] usb 3-1: device descriptor read/64, error -71 [ 274.236581][ T28] audit: type=1400 audit(275.215:5987): avc: denied { rmdir } for pid=1730 comm="syz-executor" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:file_context_t:s0" [ 274.260788][ T6] usb 3-1: device descriptor read/64, error -71 [ 274.380877][ T6] usb usb3-port1: attempt power cycle [ 274.540801][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 274.762695][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 274.778483][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.789633][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 274.790905][ T6] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 274.799533][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.820234][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.829333][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.840924][ T24] usb 4-1: invalid MIDI out EP 0 [ 274.851890][ T6] usb 3-1: device descriptor read/8, error -71 [ 274.909156][ T24] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 275.221300][ T6] usb 3-1: device descriptor read/8, error -71 [ 275.266750][ T24] usb 4-1: USB disconnect, device number 21 [ 276.114715][ T28] audit: type=1400 audit(277.085:5988): avc: denied { bind } for pid=4395 comm="syz.1.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.576289][ T28] audit: type=1400 audit(277.555:5989): avc: denied { getopt } for pid=4402 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.645438][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 278.201056][ T4450] hub 8-0:1.0: USB hub found [ 278.206093][ T4450] hub 8-0:1.0: 1 port detected [ 278.885684][ T4454] overlayfs: missing 'lowerdir' [ 279.753683][ T365] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 279.900787][ T1842] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.950781][ T365] usb 1-1: Using ep0 maxpacket: 32 [ 279.956958][ T365] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 279.965237][ T365] usb 1-1: config 4 has no interface number 0 [ 279.971389][ T365] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.982469][ T365] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.992431][ T365] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.001500][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.010565][ T365] hub 1-1:4.128: USB hub found [ 280.081965][ T1842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.092155][ T1842] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.101419][ T1842] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.110505][ T1842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.119143][ T1842] usb 3-1: config 0 descriptor?? [ 280.170882][ T19] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 280.211178][ T365] hub 1-1:4.128: 2 ports detected [ 280.216367][ T365] hub 1-1:4.128: Using single TT (err -22) [ 280.222807][ T365] hub 1-1:4.128: config failed, can't get hub status (err -5) [ 280.224801][ T4489] netlink: 'syz.0.1131': attribute type 13 has an invalid length. [ 280.266713][ T365] usb 1-1: USB disconnect, device number 22 [ 280.326539][ T1842] usb 3-1: USB disconnect, device number 22 [ 280.350910][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 280.357275][ T19] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 280.371519][ T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 280.382657][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.393797][ T19] usb 4-1: config 1 interface 1 has no altsetting 0 [ 280.403975][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.413744][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.422126][ T19] usb 4-1: Product: syz [ 280.426333][ T19] usb 4-1: Manufacturer: syz [ 280.431199][ T19] usb 4-1: SerialNumber: syz [ 280.853948][ T4504] binder: BINDER_SET_CONTEXT_MGR already set [ 280.859973][ T4504] binder: 4503:4504 ioctl 4018620d 200000000100 returned -16 [ 283.415842][ T28] audit: type=1400 audit(282.045:5990): avc: denied { shutdown } for pid=4511 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.440477][ T19] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 283.538278][ T4516] bridge0: port 3(vlan2) entered blocking state [ 283.550889][ T4516] bridge0: port 3(vlan2) entered disabled state [ 283.559397][ T4516] device vlan2 entered promiscuous mode [ 283.677633][ T19] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 6 bytes [ 283.762961][ T19] usb 4-1: USB disconnect, device number 22 [ 284.388983][ T4554] bridge0: port 3(vlan2) entered blocking state [ 284.395277][ T4554] bridge0: port 3(vlan2) entered disabled state [ 284.536232][ T4560] tipc: Enabling of bearer rejected, failed to enable media [ 284.545482][ T19] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.291516][ T19] usb 3-1: no configurations [ 286.296370][ T19] usb 3-1: can't read configurations, error -22 [ 286.918120][ T4588] loop0: detected capacity change from 0 to 128 [ 286.925592][ T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 286.935016][ T28] audit: type=1400 audit(287.915:5991): avc: denied { mount } for pid=4576 comm="syz.0.1155" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 287.190928][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 288.341669][ T28] audit: type=1400 audit(289.325:5992): avc: denied { unmount } for pid=1730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 288.371342][ T19] usb 3-1: device descriptor read/all, error -71 [ 288.413764][ T4624] loop1: detected capacity change from 0 to 128 [ 288.437302][ T19] usb usb3-port1: attempt power cycle [ 289.556432][ T4624] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1168'. [ 290.392828][ T4652] 9pnet_fd: Insufficient options for proto=fd [ 290.938251][ T4665] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 291.469531][ T4671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 293.250821][ T19] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 294.301186][ T19] usb 2-1: no configurations [ 294.305933][ T19] usb 2-1: can't read configurations, error -22 [ 294.641494][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 294.771763][ T4734] FAULT_INJECTION: forcing a failure. [ 294.771763][ T4734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.786553][ T4734] CPU: 0 PID: 4734 Comm: syz.1.1197 Not tainted syzkaller #0 [ 294.793944][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.803999][ T4734] Call Trace: [ 294.807274][ T4734] [ 294.810194][ T4734] __dump_stack+0x21/0x24 [ 294.814524][ T4734] dump_stack_lvl+0xee/0x150 [ 294.819121][ T4734] ? __cfi_dump_stack_lvl+0x8/0x8 [ 294.824146][ T4734] ? _parse_integer+0x2a/0x40 [ 294.828829][ T4734] dump_stack+0x15/0x24 [ 294.832978][ T4734] should_fail_ex+0x3d4/0x520 [ 294.837658][ T4734] should_fail+0xb/0x10 [ 294.841811][ T4734] should_fail_usercopy+0x1a/0x20 [ 294.846831][ T4734] _copy_from_user+0x1e/0xc0 [ 294.851417][ T4734] ___sys_sendmsg+0x155/0x290 [ 294.856092][ T4734] ? __sys_sendmsg+0x270/0x270 [ 294.860851][ T4734] ? __kasan_check_write+0x14/0x20 [ 294.865956][ T4734] ? proc_fail_nth_write+0x17a/0x1f0 [ 294.871239][ T4734] ? vfs_write+0x9d6/0xca0 [ 294.875667][ T4734] ? __fdget+0x19c/0x220 [ 294.879906][ T4734] __x64_sys_sendmsg+0x1f0/0x2c0 [ 294.884845][ T4734] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 294.890317][ T4734] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 294.896392][ T4734] x64_sys_call+0x171/0x9a0 [ 294.900893][ T4734] do_syscall_64+0x4c/0xa0 [ 294.905304][ T4734] ? clear_bhb_loop+0x30/0x80 [ 294.909980][ T4734] ? clear_bhb_loop+0x30/0x80 [ 294.914655][ T4734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.920547][ T4734] RIP: 0033:0x7f6e3898efc9 [ 294.924959][ T4734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.944545][ T4734] RSP: 002b:00007f6e3982f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.952949][ T4734] RAX: ffffffffffffffda RBX: 00007f6e38be5fa0 RCX: 00007f6e3898efc9 [ 294.960902][ T4734] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 294.968855][ T4734] RBP: 00007f6e3982f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.976811][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.984768][ T4734] R13: 00007f6e38be6038 R14: 00007f6e38be5fa0 R15: 00007ffc7776c828 [ 294.992724][ T4734] [ 295.003687][ T4736] loop0: detected capacity change from 0 to 256 [ 295.103937][ T4742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1200'. [ 296.404819][ T365] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 296.612038][ T365] usb 1-1: no configurations [ 296.613223][ T28] audit: type=1400 audit(297.595:5993): avc: denied { connect } for pid=4776 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.616665][ T365] usb 1-1: can't read configurations, error -22 [ 296.800992][ T365] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 297.080035][ T4782] netlink: 'syz.1.1204': attribute type 13 has an invalid length. [ 297.168951][ T4784] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 297.213666][ T365] usb 1-1: no configurations [ 297.218868][ T365] usb 1-1: can't read configurations, error -22 [ 297.226612][ T365] usb usb1-port1: attempt power cycle [ 297.242618][ T4782] gretap0: refused to change device tx_queue_len [ 297.271028][ T4782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.532322][ T4810] netlink: 'syz.4.1225': attribute type 27 has an invalid length. [ 297.648430][ T365] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 297.656172][ T398] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 297.712469][ T365] usb 1-1: no configurations [ 297.725076][ T365] usb 1-1: can't read configurations, error -22 [ 297.776889][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.784121][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.896224][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.917196][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.924307][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.940883][ T365] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 297.949647][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.956741][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.979961][ T4813] device veth0_vlan left promiscuous mode [ 297.981529][ T365] usb 1-1: no configurations [ 297.986335][ T4813] device veth0_vlan entered promiscuous mode [ 297.990877][ T365] usb 1-1: can't read configurations, error -22 [ 298.010584][ T4813] device veth1_macvtap left promiscuous mode [ 298.010872][ T365] usb usb1-port1: unable to enumerate USB device [ 298.024366][ T4813] device veth1_macvtap entered promiscuous mode [ 298.036166][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.044138][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.060121][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.077326][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.093206][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.106961][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.121196][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.137702][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.154602][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.172896][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.189899][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.206611][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 298.221929][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.253062][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 298.271080][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.289147][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.344284][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.359703][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.368337][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.376901][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 298.384885][ T2614] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 298.396137][ T4818] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1226'. [ 299.112877][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.121480][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.537511][ T4850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 299.660938][ T775] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 299.842507][ T775] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 299.850932][ T775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 299.862606][ T775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 299.874181][ T775] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.887578][ T775] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.896718][ T775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.908478][ T775] usb 1-1: config 0 descriptor?? [ 299.914126][ T4837] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.112255][ T365] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 300.129371][ T365] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.329288][ T398] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 300.340811][ T398] usb 4-1: can't read configurations, error -71 [ 302.067585][ T775] usbhid 1-1:0.0: can't add hid device: -71 [ 302.079351][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1249'. [ 302.098284][ T775] usbhid: probe of 1-1:0.0 failed with error -71 [ 302.105684][ T775] usb 1-1: USB disconnect, device number 27 [ 302.111950][ T4894] SELinux: Context : is not valid (left unmapped). [ 302.118715][ T28] audit: type=1400 audit(303.095:5994): avc: denied { relabelto } for pid=4893 comm="syz.2.1249" name="rdma.current" dev="tmpfs" ino=1419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 302.118803][ T28] audit: type=1400 audit(303.095:5995): avc: denied { associate } for pid=4893 comm="syz.2.1249" name="rdma.current" dev="tmpfs" ino=1419 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 302.258422][ T28] audit: type=1326 audit(303.235:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.258514][ T28] audit: type=1326 audit(303.235:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6e38945bc7 code=0x7ffc0000 [ 302.258602][ T28] audit: type=1326 audit(303.235:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.258723][ T28] audit: type=1326 audit(303.235:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.258809][ T28] audit: type=1326 audit(303.235:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.258897][ T28] audit: type=1326 audit(303.235:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.259032][ T28] audit: type=1326 audit(303.235:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.259117][ T28] audit: type=1326 audit(303.235:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3898efc9 code=0x7ffc0000 [ 302.299232][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 303.431638][ T4920] FAULT_INJECTION: forcing a failure. [ 303.431638][ T4920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.462056][ T4920] CPU: 0 PID: 4920 Comm: syz.1.1257 Not tainted syzkaller #0 [ 303.469475][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.479533][ T4920] Call Trace: [ 303.482819][ T4920] [ 303.485746][ T4920] __dump_stack+0x21/0x24 [ 303.490074][ T4920] dump_stack_lvl+0xee/0x150 [ 303.494661][ T4920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 303.499685][ T4920] dump_stack+0x15/0x24 [ 303.503836][ T4920] should_fail_ex+0x3d4/0x520 [ 303.508515][ T4920] should_fail+0xb/0x10 [ 303.512680][ T4920] should_fail_usercopy+0x1a/0x20 [ 303.517711][ T4920] copyin+0x20/0xa0 [ 303.521524][ T4920] _copy_from_iter+0x3e2/0xfd0 [ 303.526289][ T4920] ? __cfi__copy_from_iter+0x10/0x10 [ 303.531571][ T4920] ? __kasan_check_write+0x14/0x20 [ 303.536674][ T4920] ? __build_skb_around+0x24f/0x470 [ 303.541878][ T4920] ? check_stack_object+0x81/0x140 [ 303.546991][ T4920] ? __check_object_size+0x45a/0x600 [ 303.552277][ T4920] netlink_sendmsg+0x72c/0xbc0 [ 303.557037][ T4920] ? __cfi_netlink_sendmsg+0x10/0x10 [ 303.562317][ T4920] ? security_socket_sendmsg+0x93/0xb0 [ 303.567776][ T4920] ? __cfi_netlink_sendmsg+0x10/0x10 [ 303.573066][ T4920] ____sys_sendmsg+0x5a9/0x990 [ 303.577836][ T4920] ? __sys_sendmsg_sock+0x40/0x40 [ 303.582868][ T4920] ? import_iovec+0x7c/0xb0 [ 303.587377][ T4920] ___sys_sendmsg+0x21c/0x290 [ 303.592051][ T4920] ? __sys_sendmsg+0x270/0x270 [ 303.596816][ T4920] ? __kasan_check_write+0x14/0x20 [ 303.601929][ T4920] ? proc_fail_nth_write+0x17a/0x1f0 [ 303.607217][ T4920] ? vfs_write+0x9d6/0xca0 [ 303.611636][ T4920] ? __fdget+0x19c/0x220 [ 303.615881][ T4920] __x64_sys_sendmsg+0x1f0/0x2c0 [ 303.620836][ T4920] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 303.626304][ T4920] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 303.632374][ T4920] x64_sys_call+0x171/0x9a0 [ 303.636876][ T4920] do_syscall_64+0x4c/0xa0 [ 303.641287][ T4920] ? clear_bhb_loop+0x30/0x80 [ 303.645960][ T4920] ? clear_bhb_loop+0x30/0x80 [ 303.650635][ T4920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.656526][ T4920] RIP: 0033:0x7f6e3898efc9 [ 303.660939][ T4920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.680538][ T4920] RSP: 002b:00007f6e3982f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.688955][ T4920] RAX: ffffffffffffffda RBX: 00007f6e38be5fa0 RCX: 00007f6e3898efc9 [ 303.696926][ T4920] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 303.704895][ T4920] RBP: 00007f6e3982f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.712865][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.720837][ T4920] R13: 00007f6e38be6038 R14: 00007f6e38be5fa0 R15: 00007ffc7776c828 [ 303.728815][ T4920] [ 305.630863][ T775] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 305.797518][ T4980] loop0: detected capacity change from 0 to 256 [ 305.971098][ T775] usb 2-1: Using ep0 maxpacket: 32 [ 305.978061][ T775] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 306.070036][ T775] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 306.116773][ T775] usb 2-1: config 1 has no interface number 3 [ 306.144858][ T775] usb 2-1: too many endpoints for config 1 interface 6 altsetting 8: 195, using maximum allowed: 30 [ 306.193190][ T775] usb 2-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 306.253175][ T775] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 306.303346][ T775] usb 2-1: config 1 interface 6 has no altsetting 0 [ 306.312337][ T775] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.344815][ T775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.355154][ T775] usb 2-1: Product: syz [ 306.365179][ T775] usb 2-1: Manufacturer: syz [ 306.370896][ T775] usb 2-1: SerialNumber: syz [ 307.385915][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 307.385933][ T28] audit: type=1400 audit(307.785:6054): avc: denied { create } for pid=4969 comm="syz.1.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 307.806103][ T28] audit: type=1326 audit(308.785:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.3.1282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ecf8efc9 code=0x0 [ 308.521110][ T775] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 308.565726][ T775] usb 2-1: 2:1 : sample bitwidth 220 in over sample bytes 1 [ 308.592128][ T775] usb 2-1: 2:1: cannot set freq 2951228 to ep 0x82 [ 308.797529][ T775] usb 2-1: USB disconnect, device number 38 [ 309.279220][ T5037] loop0: detected capacity change from 0 to 1024 [ 309.286261][ T5037] EXT4-fs: Ignoring removed orlov option [ 309.292025][ T5037] ext4: Unknown parameter 'smackfshat' [ 311.133473][ T28] audit: type=1400 audit(312.115:6056): avc: denied { execute } for pid=5075 comm="syz.1.1305" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1 [ 311.170945][ T775] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 311.362439][ T775] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 311.370039][ T775] usb 1-1: can't read configurations, error -61 [ 311.441109][ T28] audit: type=1400 audit(312.425:6057): avc: denied { mounton } for pid=5082 comm="syz.1.1307" path="/256/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 311.441262][ T5083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.540919][ T775] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 311.571279][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 311.726856][ T28] audit: type=1400 audit(312.705:6058): avc: denied { getopt } for pid=5088 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.732225][ T775] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 311.771160][ T775] usb 1-1: can't read configurations, error -61 [ 311.786043][ T775] usb usb1-port1: attempt power cycle [ 312.220849][ T775] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 312.264141][ T775] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 312.307992][ T775] usb 1-1: can't read configurations, error -61 [ 312.359861][ T28] audit: type=1400 audit(313.335:6059): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 312.470914][ T775] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 312.484586][ T5107] 9pnet_fd: Insufficient options for proto=fd [ 312.523785][ T775] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 312.551064][ T775] usb 1-1: can't read configurations, error -61 [ 312.582882][ T775] usb usb1-port1: unable to enumerate USB device [ 314.098612][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.107740][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.299509][ T5134] raw_sendmsg: syz.2.1321 forgot to set AF_INET. Fix it! [ 314.940773][ T775] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 316.410965][ T775] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 316.610839][ T775] usb 2-1: Using ep0 maxpacket: 8 [ 316.617555][ T775] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 316.632907][ T775] usb 2-1: config 0 has no interface number 0 [ 316.655883][ T775] usb 2-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 316.688090][ T775] usb 2-1: config 0 interface 96 has no altsetting 0 [ 316.789278][ T775] usb 2-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 316.800841][ T775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.808898][ T775] usb 2-1: Product: syz [ 316.813901][ T775] usb 2-1: Manufacturer: syz [ 316.818547][ T775] usb 2-1: SerialNumber: syz [ 316.824535][ T775] usb 2-1: config 0 descriptor?? [ 317.037349][ T775] usb 2-1: USB disconnect, device number 40 [ 320.418801][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 324.357707][ T28] audit: type=1400 audit(325.335:6060): avc: denied { getopt } for pid=5278 comm="syz.1.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.377152][ T5285] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.290849][ T28] audit: type=1400 audit(327.275:6061): avc: denied { execute } for pid=5337 comm="syz.0.1378" path="/185/cpuacct.usage_percpu" dev="tmpfs" ino=1015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 326.480794][ T4816] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 326.681696][ T4816] usb 4-1: Using ep0 maxpacket: 8 [ 326.693018][ T4816] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 326.751726][ T4816] usb 4-1: config 0 has no interface number 0 [ 326.757903][ T4816] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 326.769490][ T4816] usb 4-1: config 0 interface 96 has no altsetting 0 [ 327.681525][ T4816] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 327.699429][ T4816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.738417][ T4816] usb 4-1: Product: syz [ 327.748487][ T4816] usb 4-1: Manufacturer: syz [ 327.768224][ T4816] usb 4-1: SerialNumber: syz [ 327.791297][ T4816] usb 4-1: config 0 descriptor?? [ 327.813143][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 327.830991][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 327.847109][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 327.881399][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 328.002312][ T4816] usb 4-1: USB disconnect, device number 25 [ 328.560796][ T4816] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 328.935693][ T4816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.945972][ T4816] usb 3-1: config 0 has no interfaces? [ 328.951599][ T4816] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.960658][ T4816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.973969][ T4816] usb 3-1: config 0 descriptor?? [ 329.043161][ T5400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=5400 comm=syz.0.1397 [ 329.223096][ T24] usb 3-1: USB disconnect, device number 26 [ 329.816010][ T5432] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1406'. [ 330.668930][ T28] audit: type=1400 audit(331.645:6062): avc: denied { append } for pid=5454 comm="syz.0.1413" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 331.902200][ T28] audit: type=1400 audit(332.885:6063): avc: denied { mounton } for pid=5486 comm="syz.0.1422" path="/196/file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.935522][ T5487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5487 comm=syz.0.1422 [ 331.976437][ T5487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 332.501933][ T5498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1424'. [ 332.608327][ T28] audit: type=1400 audit(333.585:6064): avc: denied { ioctl } for pid=5506 comm="syz.1.1427" path="socket:[35369]" dev="sockfs" ino=35369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.559700][ T28] audit: type=1400 audit(334.515:6065): avc: denied { create } for pid=5512 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.797505][ T5530] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1430'. [ 335.282353][ T28] audit: type=1400 audit(335.795:6066): avc: denied { name_bind } for pid=5517 comm="syz.1.1430" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 335.395955][ T28] audit: type=1326 audit(336.375:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.3.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ecf8efc9 code=0x0 [ 336.120669][ T28] audit: type=1400 audit(337.095:6068): avc: denied { map } for pid=5543 comm="syz.3.1436" path="socket:[34214]" dev="sockfs" ino=34214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 341.583962][ T28] audit: type=1400 audit(341.665:6069): avc: denied { accept } for pid=5621 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.160874][ T28] audit: type=1400 audit(345.135:6070): avc: denied { relabelfrom } for pid=5664 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 344.180633][ T28] audit: type=1400 audit(345.135:6071): avc: denied { relabelto } for pid=5664 comm="syz.0.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 344.509490][ T19] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.901901][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.915071][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.932967][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 344.946190][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.958469][ T19] usb 4-1: config 0 descriptor?? [ 345.070985][ T28] audit: type=1400 audit(346.045:6072): avc: denied { unmount } for pid=1730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 345.127679][ T28] audit: type=1400 audit(346.105:6073): avc: denied { accept } for pid=5687 comm="syz.2.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 345.161168][ T28] audit: type=1400 audit(346.135:6074): avc: denied { connect } for pid=5694 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.180542][ T28] audit: type=1400 audit(346.135:6075): avc: denied { read } for pid=5694 comm="syz.4.1478" laddr=172.20.20.10 lport=7 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.912539][ T19] logitech 0003:046D:C29C.001A: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 346.392672][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.403487][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.412316][ T5723] tmpfs: Unknown parameter 'fsuuid' [ 346.417650][ T19] logitech 0003:046D:C29C.001A: no inputs found [ 346.425387][ T19] usb 4-1: USB disconnect, device number 26 [ 347.309716][ T5750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1494'. [ 347.318902][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 347.355405][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 347.378170][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 347.894156][ T5756] overlayfs: failed to resolve './file0': -2 [ 347.930978][ T19] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 347.977472][ T28] audit: type=1400 audit(604.959:6076): avc: denied { listen } for pid=5760 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.130982][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 348.139843][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 348.282202][ T19] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 349.047973][ T19] usb 1-1: can't read configurations, error -61 [ 351.366559][ T19] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 351.449247][ T28] audit: type=1400 audit(608.429:6077): avc: denied { mounton } for pid=5784 comm="syz.0.1504" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 351.449285][ T5794] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' C) failed with errno=-22 [ 351.660563][ T5793] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.692717][ T5798] tipc: Enabling of bearer rejected, already enabled [ 351.980784][ T775] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 352.160839][ T775] usb 3-1: Using ep0 maxpacket: 8 [ 352.167349][ T775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.175936][ T775] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 352.184284][ T775] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 352.194423][ T775] usb 3-1: config 4 has no interface number 0 [ 352.202624][ T775] usb 3-1: string descriptor 0 read error: -22 [ 352.208851][ T775] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 352.218083][ T775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.239688][ T775] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 352.246829][ T775] usb 3-1: No valid video chain found. [ 353.789991][ T289] usb 3-1: USB disconnect, device number 27 [ 353.805965][ T5837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5837 comm=syz.0.1520 [ 353.819375][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 354.730809][ T775] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 354.751367][ T775] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.762542][ T28] audit: type=1400 audit(611.749:6078): avc: denied { create } for pid=5879 comm="syz.2.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 354.799676][ T28] audit: type=1400 audit(611.769:6079): avc: denied { write } for pid=5879 comm="syz.2.1533" path="socket:[34810]" dev="sockfs" ino=34810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 357.441050][ T28] audit: type=1400 audit(614.409:6080): avc: denied { remove_name } for pid=5899 comm="syz.3.1539" name="bus" dev="incremental-fs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.545178][ T28] audit: type=1400 audit(614.409:6081): avc: denied { rmdir } for pid=5899 comm="syz.3.1539" name="bus" dev="incremental-fs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.567831][ T28] audit: type=1400 audit(614.419:6082): avc: denied { execute_no_trans } for pid=5899 comm="syz.3.1539" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 357.612604][ T28] audit: type=1400 audit(614.419:6083): avc: denied { execute } for pid=5899 comm="syz.3.1539" name="file0" dev="incremental-fs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.635760][ T285] ------------[ cut here ]------------ [ 357.641647][ T285] WARNING: CPU: 1 PID: 285 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 357.649567][ T285] Modules linked in: [ 357.653527][ T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 357.661077][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.671163][ T285] RIP: 0010:drop_nlink+0xc5/0x110 [ 357.676187][ T285] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 357.695945][ T285] RSP: 0000:ffffc9000cf2fc38 EFLAGS: 00010293 [ 357.702106][ T285] RAX: ffffffff81c3ab85 RBX: ffff888147c11af8 RCX: ffff88810dbf3cc0 [ 357.710081][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.718092][ T285] RBP: ffffc9000cf2fc60 R08: 0000000000000004 R09: 0000000000000003 [ 357.726123][ T285] R10: fffff520019e5f78 R11: 1ffff920019e5f78 R12: dffffc0000000000 [ 357.734124][ T285] R13: 1ffff11028f82368 R14: ffff888147c11b40 R15: 0000000000000000 [ 357.742134][ T285] FS: 000055555c53f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 357.751082][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.757757][ T285] CR2: 0000200000d4f030 CR3: 000000012f94b000 CR4: 00000000003506a0 [ 357.765778][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.773800][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.781826][ T285] Call Trace: [ 357.785102][ T285] [ 357.788035][ T285] shmem_rmdir+0x5b/0x90 [ 357.792323][ T285] vfs_rmdir+0x393/0x500 [ 357.796570][ T285] incfs_kill_sb+0x105/0x220 [ 357.801213][ T285] deactivate_locked_super+0xb5/0x120 [ 357.806587][ T285] deactivate_super+0xaf/0xe0 [ 357.811304][ T285] cleanup_mnt+0x45f/0x4e0 [ 357.815718][ T285] __cleanup_mnt+0x19/0x20 [ 357.820125][ T285] task_work_run+0x1db/0x240 [ 357.824756][ T285] ? __cfi_task_work_run+0x10/0x10 [ 357.829870][ T285] ? __x64_sys_umount+0x125/0x160 [ 357.834920][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 357.840292][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 357.845529][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 357.851022][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 357.856775][ T285] do_syscall_64+0x58/0xa0 [ 357.861394][ T285] ? clear_bhb_loop+0x30/0x80 [ 357.866311][ T285] ? clear_bhb_loop+0x30/0x80 [ 357.871031][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.876928][ T285] RIP: 0033:0x7f16ecf902f7 [ 357.881367][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 357.901009][ T285] RSP: 002b:00007ffe8f5bf7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 357.909428][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f16ecf902f7 [ 357.917462][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f5bf880 [ 357.925614][ T285] RBP: 00007ffe8f5bf880 R08: 0000000000000000 R09: 0000000000000000 [ 357.933849][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8f5c0910 [ 357.941864][ T285] R13: 00007f16ed011d7d R14: 000000000005746e R15: 00007ffe8f5c0950 [ 357.949837][ T285] [ 357.952895][ T285] ---[ end trace 0000000000000000 ]--- [ 357.960999][ T285] ================================================================== [ 357.969090][ T285] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 357.975338][ T285] Write of size 4 at addr 0000000000000170 by task syz-executor/285 [ 357.983315][ T285] [ 357.985641][ T285] CPU: 0 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 357.994566][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.004611][ T285] Call Trace: [ 358.007879][ T285] [ 358.010792][ T285] __dump_stack+0x21/0x24 [ 358.015111][ T285] dump_stack_lvl+0xee/0x150 [ 358.019702][ T285] ? __cfi_dump_stack_lvl+0x8/0x8 [ 358.024792][ T285] ? ihold+0x20/0x60 [ 358.028666][ T285] ? ihold+0x20/0x60 [ 358.032538][ T285] print_report+0x3d/0x60 [ 358.036851][ T285] kasan_report+0x122/0x150 [ 358.041334][ T285] ? ihold+0x20/0x60 [ 358.045213][ T285] kasan_check_range+0x280/0x290 [ 358.050133][ T285] __kasan_check_write+0x14/0x20 [ 358.055050][ T285] ihold+0x20/0x60 [ 358.058753][ T285] vfs_rmdir+0x25f/0x500 [ 358.062981][ T285] incfs_kill_sb+0x105/0x220 [ 358.067553][ T285] deactivate_locked_super+0xb5/0x120 [ 358.072912][ T285] deactivate_super+0xaf/0xe0 [ 358.077576][ T285] cleanup_mnt+0x45f/0x4e0 [ 358.081976][ T285] __cleanup_mnt+0x19/0x20 [ 358.086370][ T285] task_work_run+0x1db/0x240 [ 358.090946][ T285] ? __cfi_task_work_run+0x10/0x10 [ 358.096039][ T285] ? __x64_sys_umount+0x125/0x160 [ 358.101045][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 358.106410][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 358.111591][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 358.117028][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 358.122469][ T285] do_syscall_64+0x58/0xa0 [ 358.126869][ T285] ? clear_bhb_loop+0x30/0x80 [ 358.131529][ T285] ? clear_bhb_loop+0x30/0x80 [ 358.136191][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.142063][ T285] RIP: 0033:0x7f16ecf902f7 [ 358.146458][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 358.166042][ T285] RSP: 002b:00007ffe8f5bf7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.174438][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f16ecf902f7 [ 358.182391][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f5bf880 [ 358.190340][ T285] RBP: 00007ffe8f5bf880 R08: 0000000000000000 R09: 0000000000000000 [ 358.198312][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8f5c0910 [ 358.206262][ T285] R13: 00007f16ed011d7d R14: 000000000005746e R15: 00007ffe8f5c0950 [ 358.214216][ T285] [ 358.217214][ T285] ================================================================== [ 358.231951][ T285] Disabling lock debugging due to kernel taint [ 358.238243][ T285] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 358.246036][ T285] #PF: supervisor write access in kernel mode [ 358.252081][ T285] #PF: error_code(0x0002) - not-present page [ 358.258045][ T285] PGD 132ce3067 P4D 132ce3067 PUD 0 [ 358.263317][ T285] Oops: 0002 [#1] PREEMPT SMP KASAN [ 358.268511][ T285] CPU: 1 PID: 285 Comm: syz-executor Tainted: G B W syzkaller #0 [ 358.277420][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.287454][ T285] RIP: 0010:ihold+0x26/0x60 [ 358.291942][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 358.311531][ T285] RSP: 0018:ffffc9000cf2fc78 EFLAGS: 00010246 [ 358.317578][ T285] RAX: ffff88810dbf3c00 RBX: 0000000000000000 RCX: ffff88810dbf3cc0 [ 358.325534][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.333485][ T285] RBP: ffffc9000cf2fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 358.341435][ T285] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888147c11b04 [ 358.349387][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 358.357335][ T285] FS: 000055555c53f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 358.366251][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.372812][ T285] CR2: 0000000000000170 CR3: 000000012f94b000 CR4: 00000000003506a0 [ 358.380765][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.388720][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.396669][ T285] Call Trace: [ 358.399928][ T285] [ 358.402842][ T285] vfs_rmdir+0x25f/0x500 [ 358.407073][ T285] incfs_kill_sb+0x105/0x220 [ 358.411646][ T285] deactivate_locked_super+0xb5/0x120 [ 358.417001][ T285] deactivate_super+0xaf/0xe0 [ 358.421659][ T285] cleanup_mnt+0x45f/0x4e0 [ 358.426054][ T285] __cleanup_mnt+0x19/0x20 [ 358.430447][ T285] task_work_run+0x1db/0x240 [ 358.435019][ T285] ? __cfi_task_work_run+0x10/0x10 [ 358.440112][ T285] ? __x64_sys_umount+0x125/0x160 [ 358.445118][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 358.450473][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 358.455653][ T285] exit_to_user_mode_prepare+0x5a/0xa0 [ 358.461091][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 358.466534][ T285] do_syscall_64+0x58/0xa0 [ 358.470927][ T285] ? clear_bhb_loop+0x30/0x80 [ 358.475589][ T285] ? clear_bhb_loop+0x30/0x80 [ 358.480252][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.486127][ T285] RIP: 0033:0x7f16ecf902f7 [ 358.490524][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 358.510121][ T285] RSP: 002b:00007ffe8f5bf7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.518514][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f16ecf902f7 [ 358.526465][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8f5bf880 [ 358.534414][ T285] RBP: 00007ffe8f5bf880 R08: 0000000000000000 R09: 0000000000000000 [ 358.542369][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8f5c0910 [ 358.550332][ T285] R13: 00007f16ed011d7d R14: 000000000005746e R15: 00007ffe8f5c0950 [ 358.558289][ T285] [ 358.561290][ T285] Modules linked in: [ 358.565160][ T285] CR2: 0000000000000170 [ 358.569290][ T285] ---[ end trace 0000000000000000 ]--- [ 358.574720][ T285] RIP: 0010:ihold+0x26/0x60 [ 358.579207][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 358.598791][ T285] RSP: 0018:ffffc9000cf2fc78 EFLAGS: 00010246 [ 358.604837][ T285] RAX: ffff88810dbf3c00 RBX: 0000000000000000 RCX: ffff88810dbf3cc0 [ 358.612791][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.620742][ T285] RBP: ffffc9000cf2fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 358.628692][ T285] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888147c11b04 [ 358.636644][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 358.644602][ T285] FS: 000055555c53f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 358.653512][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.660075][ T285] CR2: 0000000000000170 CR3: 000000012f94b000 CR4: 00000000003506a0 [ 358.668027][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.675984][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.683935][ T285] Kernel panic - not syncing: Fatal exception [ 358.690180][ T285] Kernel Offset: disabled [ 358.694480][ T285] Rebooting in 86400 seconds..