last executing test programs: 1m48.900555303s ago: executing program 2 (id=340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0xffffffffffffff2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x5549, &(0x7f0000007a00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x2841, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x0, 0x189, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x280000, &(0x7f00000007c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@euid_gt}, {@euid_eq}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5dc77000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000030285000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaac7b96fd2c173c6322ab865b5b0c1aaaa00000000000008004503002c000000000004907800000000e00000014e2200000018907804000000a5062000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}}}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee00, 0x0) 1m46.336556386s ago: executing program 2 (id=355): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0, 0xfdef}]) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x9}, @mss={0x2, 0x1}, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m46.045355298s ago: executing program 2 (id=358): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0xffff, 0x6f5, {{0x3f, 0x4, 0x0, 0x6, 0xfc, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x11, 0x1, 0x2, [{@remote, 0x1000}, {@private=0xa010100, 0x2}, {@remote, 0x2}, {@multicast2, 0x401}, {@multicast2, 0x8}, {@multicast2, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x4, [{@remote}, {@remote, 0x800}, {@rand_addr=0x64010101, 0x6}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x8d, 0x1, 0x9, [{@broadcast, 0x94}]}, @generic={0x83, 0x2}, @lsrr={0x83, 0x17, 0xde, [@remote, @remote, @empty, @rand_addr=0x64010100, @local]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x66, 0x0, [{0x1, 0x7, "a717fcfb2d"}, {0x1, 0xa, "503d8a18b15a7aef"}, {0x1, 0xd, "9faa142373435477bc1e40"}, {0x6, 0xc, "533e5d287a27a1ce3738"}, {0x7, 0xd, "4f0c26acbdaaea31fa2c7b"}, {0x6, 0xd, "3b2b23a0c6b99324c329d9"}, {0x2, 0x5, "1a421b"}, {0x6, 0x6, "428518c0"}, {0x6, 0x11, "a747cb15a51203436391145388fb36"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000071cdbba4c427580b110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r5) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000001880)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8=r4, @ANYRES64], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000dc7d5bab457c2705480b00000000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) tgkill(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000017850a47fb0867", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000017850a47fb0867", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x8980, 0xe8) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000b00)=ANY=[]) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r11) (async) dup(r11) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000040)) 1m45.965591828s ago: executing program 2 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet(0x2, 0x3, 0x2) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xe0000002}}}}}, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000043c0)=ANY=[], 0x18}, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) utime(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m45.963946918s ago: executing program 2 (id=364): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000030000000410000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000600000000000000aa8759cf7816becd3ab72f82baae"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$inet(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)="1a6a618ddb7993d170db787966714624dd642d43a0c54a15cbd415562ecfd005257e591aa300b3f77fa178d5ecad767425f61bf4b617cd3568678da5cbe2259f95f37086a5724e9a610e136c3de3785a77939486131b85244db63f70ac93d708799b8b66821aeafcbd357fc55c4e2ca590786b2a507e814e09b022feeafdfd4e", 0x80}], 0x1, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x18}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1m45.834825969s ago: executing program 2 (id=367): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', '', [{0x20, 'I#{\xbc\x10\x17H4\x03\x1b\xe3\xb3\x9co\x0f\xcf@\x03M\xda*m\xdf\x8cT[\xd9p\xf3\x8f8\xecG\xf5\xe2T\'\xc7\xa5E\x84\xe1}\xd9\x9c\xef\xdc\xe7\x87>h\x8fN\x86L\xa7j\xbe\xddZ\xbcG\x86\x11\x97a`u?>\xd9\xe4\x13\xec{\xee\x87X5\xf9\x8a\x80\x16k\t\x1e\x9d\xd7;m>.\xa6\xc4\"\xbd\x83;U\x90\x16\xc5\xc3\x88\x82-\xd1\xe7\xab\x8bo\xca\x80\xd9\x1f \x04\xaa\xb1\xcaTX\x05\x8a\xa9\b\x83\x12\x00\xba\x19\xe9\xb5\x11\xb6\xd3\xf6\x7f\xa1,\xfd\xbf\xbdz\x85\xb6\xa26[\xd8\xa2\x7f\x86'}]}, 0x9e) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m45.818051229s ago: executing program 32 (id=367): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', '', [{0x20, 'I#{\xbc\x10\x17H4\x03\x1b\xe3\xb3\x9co\x0f\xcf@\x03M\xda*m\xdf\x8cT[\xd9p\xf3\x8f8\xecG\xf5\xe2T\'\xc7\xa5E\x84\xe1}\xd9\x9c\xef\xdc\xe7\x87>h\x8fN\x86L\xa7j\xbe\xddZ\xbcG\x86\x11\x97a`u?>\xd9\xe4\x13\xec{\xee\x87X5\xf9\x8a\x80\x16k\t\x1e\x9d\xd7;m>.\xa6\xc4\"\xbd\x83;U\x90\x16\xc5\xc3\x88\x82-\xd1\xe7\xab\x8bo\xca\x80\xd9\x1f \x04\xaa\xb1\xcaTX\x05\x8a\xa9\b\x83\x12\x00\xba\x19\xe9\xb5\x11\xb6\xd3\xf6\x7f\xa1,\xfd\xbf\xbdz\x85\xb6\xa26[\xd8\xa2\x7f\x86'}]}, 0x9e) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m4.060181183s ago: executing program 4 (id=622): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000117000000000000000000b6a118fb0bfa080084145d5a00000002", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1m2.58266506s ago: executing program 4 (id=626): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6, 0x400, r1, 0xffffa0b0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") (async) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000e40)='./bus\x00', 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000406d040cc50000000000010902240600000000000904000006030000000921feff000122ce0009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022140600000086"], 0x0}, 0x0) 1m2.195469333s ago: executing program 4 (id=628): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190004000800000000000020000000008c00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x22048040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 1m2.193741232s ago: executing program 4 (id=630): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='huge=always']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x84}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, r2}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x58}}], 0x1, 0x4000014) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) syz_clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setfsuid(0xee00) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m2.057947993s ago: executing program 4 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f00009e2000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="17000000020001004003be8c5e687a8a6a003300020100ecff3f00000003a96c6b06169da9c0f8d94d5bbb6a880a00243c5197b29f9368bdd6c8db933e7a2fdfff0afc5e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000300000000feff000080c457681f009cee4a0a003dff010000b7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfcc5800000000002175bb039cc84d5c705b4de27d5cf079", 0xb8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00', r8}, 0x10) unshare(0x42000000) r9 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000100)={0x2, 0x65, "c3e403120cd1250b39c2588fb8d0adaeb82eabb319572c0b3cdcdc764d13124e4d642c839bd413b9ffcb80de701161deeef506cf41b2517391255238e8c802aa3a4a9689d442d43f8f3ce5c72ba9bb590b682473edcb070b40766dcb671df32c7ecc1bf5f9"}) pread64(r9, &(0x7f0000000240)=""/76, 0x4c, 0x33c) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0xa8, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x94, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x1}, 0x34fad5c4a5ffc2d1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x2, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x2, 0x4, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000d5}, 0x0) unshare(0x52040000) 1m1.915361094s ago: executing program 4 (id=636): ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x4, 0x8, [0x6, 0x100000000, 0x800, 0x9], &(0x7f0000000000)=[0x0]}) io_setup(0x2, &(0x7f0000000080)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100102, 0x0) r2 = eventfd2(0x8, 0xc01) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = eventfd2(0x10000, 0x800) r7 = eventfd(0xd8a9) io_submit(r0, 0x4, &(0x7f00000013c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc18, r1, &(0x7f0000000100)="b44342733fd319a47dfc2183aa3d82d3911ec1858a0cb4df5e6917cdabcdbfac5f346b390d7e7c4d98ed50da9914aac1637bdc3fdd2b2943f736", 0x3a, 0x3, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xda5, r3, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x4, r5, &(0x7f00000002c0)="c8660bbb11b0af7ee12efe670eb032a1111591806041c31aed271ea54be333480c56241bfb2cb2e83af2c3f840564dd1054fce09d8cca4dd128cb133964d22e169b19671909d2dc047", 0x49, 0x4, 0x0, 0x2, r6}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000380)="5047a60ffe6645f7bbeab8c702df7b8688025b32d112fcb693e27ddcf54a407385a2e0bc0052459ea08700e813891676a51e711307f8a6e2555436165ae1f6b8ac33975b9ffdbdc912314d6f0a1b9a8906c139ad13652d7939e4131235cf74047bfc60629d6d9c6adf48f10a187cb14cd9bf82ac24f7154d7a0b6d65885c32d265596621374034ece2f12fed1a4012a7c36257ce15121c8f5a1a241edea6585a6f6b145fcde1e257babfd32a3e945612d563b817ad1be177411bf84b4a1da00ae08800260839e87399f4e84afaa34a09e65459391c1f0d866163ab890854734979c009abea07d68a685b3606b397be7408be261a44ef18ff18e37e38942e2976483165f5d2871e48ab98ffdf8c6c3c054f0d588b5b93ad68d7fb9f2c7b2a162de2c069efd124d24dba0909980a8863b8c170d6b644fe438a8c345cffe1bee9ab9cabc12877b385c034a5de0311769c92e0fd8db438426717926024190c96d20033cc605dbb6830d8d0f5043c470b158981a70f2bef2ed9f8bc0a98be4cb9128d653af22aac53b2c04cbc1d02b236a5a75b39ee460be60fb79e946b6966827d39d0862cc682d1b162dd8b2d47a4e6a129326d1bd8ad59ab839c90960acbcc4540a10c19d684f2fa4e0d69182ada94e606159b99b0d5871b17720003997c9bb5609b66b49bfc360c35a407af8ebc5160ca6d95bc365dd341c84d609c8c53859c0d431296f2be2201a4b04b79cb5b7698da0db9c1032392cfb06461bd1f3a2318dc1c46b638c5c75193173f80496241d04518cb24e5b8a8accf19a9eff589c0e4c2aa707cb750c7c98d1b74eff115ad45b694b63e6b1b961b26887ab236c4d5adecd9870d8b1b7e3a23024a2727f9881d5b038efe326fb71ec3bb4dd2f987877f9a2b6164107e35cc7a80bdf3ac48622fb7acd64dfa225335081482d377e4a9ef51dbf2948d43c8b021e9ec047584000c84fa09343f2caf4aeb46f19e621719eb1c2593d0b8454ac48acb8d9aaf867c181fff24b83ecd9940745a7bcea1860d664b607bbdd1f10a73fd09a2ed1dd98f4278c2f235caad19c6674fc9258d3515abd03582f589173f2bfc87218ada21aa977171fc29440ea09943c0a897c4e8fb8078620de0ca3c0c0668a44dabb8c3842dff30767fd257d24db3f6c3c8889ed58b4a0622760fed8e32142a50afa28c4735ed81d08ac0a768c6e27099ad83203e238ee7faac11f33adec7be87593ea201dbfdf93213681fc8e7111ea276a3510fb6ff1b6c7ed0564104d8cdc4e5dd81eb3f410b0118a90ec1bf59afddbdd46b310ecc636effc5ada8136aadf386e4ee803bd04f68a6cdd0abe042810e06110c57003f505b67efa75c881be14a2de56e2ca26cc435bebfe71f438195644be669990a7e59f24e659180598c31777e81d72bb5c1844ec2c9b801c21292740c539f56c813ffeeb9b89b5f7ca4f37c10ca74d63edd3d505aa2e2c3c3c78c1e2c56a767eb397e8bd2ae3708eea7add9d27258ce029614fcbeb55157247868a7e7285478e4c866e5117c096407f2baa65285d9fea0f8dfc258d3e32e578074c6dd0227285578ff17c349e3a80d762eea6508fab9193047a9fdd0a3c2ea43297ca79462bbdef843af6bd830705cff519fecd8e52255cecb4051367903111e82bcb96e9d65aeeab187b96870d84edacd9eced281b0e7a282a2da1b5bc9ce9ce4602a4aba9b6c15575cf3c24b0acee28da936ff992ab204ce4f8dd7a7c6204368b344b56dedc7cece28453df4b499c43e881094499851b755a7ed71b8c7886e0e04ef622ac77d90b419db05926822acfe96ea9154abdbc31d332ee567e64bc39591df28e360f364710d099feda74e8f5427cdb2d3c086ea5d36c99f47777d48237c7a5980be1a6212d1ceb0c0c4552d1b55c5c0b897f1a7bb9cafbf96d0cc57bce034879a85cfd57ad44c6f130e2bdea2ffa1feadbf99c775295cd2e97deccd1fc6ae4e047b327b3e27733adcaa2b8e90d5346a188fbb0e6ec382c3ab7e2452c21a278aae706c5bf042503fc5ac183b6f315f45b6d2522fba3c4861d036bbbe737a22ef10a43fcf9c2fb3cd553a918d233e9fcd4c969866486bc5128b321ced85034c880f5029ce704c20e318ac9fed084e90c5a0ad2fd2d0e6d253feb30d49a1fb5d7bc55764b425556d9a19cc31356294e9dde36697cdf85be6acb172aaa4ba04a7f7e855eb2b1e8523d542f0012c0ec3774d5486cdb79a30cdf1bf3028e3f39f0d374cdd3fe0ddac9c5b1fa103aebfa2fd528535809fb1d49a86b183d6e7a227a9651780aaf09674544b1f1274bfd3cdaba85ed9620c26d5772f32d7d6b7fdce56496598f8175347d793dad72499a6f139061c06114678fcddc4910122933678fd88e2fd5821f47f408b28b371dff9159f01884e694c1e4916336d1d2c8d024c34876e0c4b52467e852c0adeade9a8d9831ca82ad587789aff56903f7dba09cbd201882a8edc15b343f583e7316d8c71dc31aa651ff50ec28399e72acb21aac2bd2d2b4e97e05a8a4f422b4c8edbe770cede2cadfae7560070c964e86815968cdfa479507bef29ec1d32b68055374ef10441219a59ba7aab5cca9c62346adf5278e43b1b549be0df6dc1a559f5666c043457cf9d949488ca1e5522a80f12b3af05281902c535b88dd92ceed42fd57e8cb8fd10f343c823c45abc326ad60950b3f58e09513ed41a2f7564d680662adecb81290aec82564e1de71f0a581f4815214bb9c53769231846ac9e88e72f3de9fb38b520d4a414bda33fd65bf40a2dbf2d9c39865824e3216ab8294299fbcf8ca44be14608d4c07ba3506fa9f6abccb057278797daa613afebd4dc00bbce0e8f3e35eb914339fc9f9777ee74a73af487b4fb8ba217c110375e014945ff663a520a0874007e7d521da3eb2079e70b0255095fdf836c7d971609cec503f5758c5435592c3a11b6c45aeeffa865d26dda3b9a7914914b69c9069b8f75773b503db9701719926aee2582b2336b75b3a29662c980f9ae3452baeaf565382154de72a69c8ce88eb0d0be909f398b9f9978eada2583a053fc1e624d469a9cad3497e4ccc8004914d608d804e7203495fe645acaec02cd0749cd6003ea7807c00d07dfea1373d0ee46d61af7b2cc5e215fced16593605036cac43b8812ef5ee9cfb3defb6bd6fa12e9644ab9989aea011851f99ee3eeb0793f20270852362b47cd9052bee95e448ea9201e0f8db066dd234f04868dc718e8ea652d7ce0239fa2e586330927b584da0b63df594d926f66728c6887879176814bd0c4d0a2cff5fe27d0b4dbd925070958f3f53116605e0581af7f572636e156c9edcb789de4838f9640f94b17cc2379b140778b8a34769f425cfbff769d4367294b48afd1f55fb8048e890630a7ada7a91ca9ba5abec9208a6a74fe864105380a9ff9abadd2ef0bf4d0c6dbdf67a43bacb6990da91136fee19e773645ad3b656971e9b771a9c68d8a65d05efe43d16a9cde552a213f9bafd01fba8eef3b8cd3b47b8fa7d1dfbb3250354d5d1d9171437992e7ffe2ce21c9bfd90491f0f9df4c51bd7f7a2efd706b674230c4200df89dfc966f45ef7240836616a5730aa2237bf7cc3865bc2b394d0c613900bf42e7ec8dfe22d1bbb67f93ac134661a6603cdcfeef854a1177d5086241190dd268d87f550b4c67211278eca9f4800b0260bde2af6ba2e106f2611ad3903fbe8d11c82590c68d63ef8c582bca8bc8ad46a36e3b3bc178d68dd37975057daf0508eb9dc1e57c68ec9bf16e46c306e492660f2a19244033b38820c2be9617bea957b27c17eecef9e8ab5637c178cf0c6154f3f9efa476bd349d1e89724f1f58e74e5e3fa6538ff39beadc1f792f21c899dff8f206bd56c84b8f5961ef8d42c6571bd7c93da3730c2fe05c7e54ab3b0f73e0bde46e62dbe02e9a7f7c5560a3a5cd923a0eb55429c1679b63926fcfc10d1cc6ed14416b5c9959bef7324e8a4600b9e6da916a5211c4eb321b4c981cdec6cc611079b2b0c88735c01aa04e478b0eb137a173254148a81de4fc78ed595be0fcfb83e1189f7d139e9d4c59467cfcb36a6a46ee6602ce7b2f926cd0856ad817cc85a5fab28abe426d878e2f3eb1fd94ef63cb7d7a9f1b1ac569fc3aeb026e0436977f6ce892aa4d0bbc91ef961678e2bdb86d19830c1a724913e726446d166ee5df39094504ba4697cc2ee6ce02721b242e786daa301c01476814bdcbcf4a1fcf8591c669f19c3fc5904a952307b928f9418ca09c226611230a597aec5902404c982110d4dd9d1fba01d06873257216eeda85f99024fce98940d17d5df4d7daea7ace9f78273de1331161f01dd49f200c609858b01fc087bb9959a7026e45d5f0f473ae46e6e2b995caed4d9dce693be35ed254f24598c86903e1e35f284b1cfeab17edc4e3c0c2d71a5568e03089200009f320deae0ec20311ded0c05c216fbd0c8dc2e6333b33375acbbadde6a3d8d70f6c9287b0ad8ffe240621db51f85e3b509fa77b6924652c3c3e059c2d1b7bd79f6ffec1f4de126e1d347d998a9784e51e7550c8eeaffc793c7502fad5acd4fcf7a75f990b921d36242559b059ca1f62c79db3a86ba8f38f1be28ac2497e5027ba2353abe55989dab6ff90582aec4b8e086ca5c4dc55199a43cd17100317ab98ff1438fea3d685ca103992e14331d46be2d3759e06e23087a7c943cd7d4cbe2949ba74f3081bd9cc0f30db203f9c39ff04539f1507e80c1714fb483545359df0c8beb151baf21299f24942f8d8dddc1ca14241b7ce25c763e97f364303cd18af38bacc42eea5285d3aadc437a23ea6e7ed1e358b3b486881fb432c5b065dda56989ef815f7f7276552a763d6bbad703ae8881f435037e25018c45469665faa96dcc4c5e8c412414a28b52c5ef80d17775a81879e3f077db0bb777bf9953d01ee2c0ddc53976ade8ee50cfa6cd2ec795aa1f15ae9584effa5c453630baeeeb9832d441752c3856e5d8b55cd8c304eb5e7a6260ce5553264456ca695a6d10ca903fc22efb2df4f9f2d826a11852772fd8ad2085a3db9ea6e52f9f70794535e5602e44f7ea6ba0829999b659512179c1b44bb0f23658f47e06a16a454e2d967967a8ba4efc27c190b16708fe7a13785813511d8928eeed9ac136a5abd676aefccb7a29bd365b3b8ae073466dd2b1addb8937dd833f480cfd839bf2acb98d7c34a077f46cf544cc30302daa2469ba0dc4dcfca46e5def7b18cf253a0453240f691ce0c3d7b64dc19a1e631fb247cb4835e56adca88a9a987e95c9f91965ce8180d216a7b5f36ad020a8e8e8b37d71b05fb0e7ceef30f8ecaa139599fe9e110abc488c734790a97e74c23abe62fb4040c2a0922d4c0817729b2ab9b91f2faa7ac255556a5e800c368a18279e940203e55f2c7794ceade61dbc8dba28464e632fb6ef43231a265cfd720937752a7615e73c11d9f97f7e94eae97457b2528de9167c4d5670eba09bf19229769a6fd7ece24f69fe63169cc1795b44fe388a0ebb9e21e814a4ad7356574a4bc4dfc3b00993e5bae8b1739da48e33f56d077345b77d907014df1cb3b0f599be86a9a4b0a3511c24e5b1f5cd73d59db17fe22d88bd03dcc158d7b989fd0094b7f3c95991d101c1333114df44989a37c8a66683e274acd3296107a0c764ed1e4230a64c8389a8ffffb409f079b7e158305d1bbe73e34f65b93ad7404eb07b630f4e0bd76a58e80e5ac10e677ca427a3765e8004f9614aea206cde8bd8493b973da60c7f0ea08bf2380d6de4327074018", 0x1000, 0x7, 0x0, 0x1, r7}]) r8 = gettid() prlimit64(r8, 0xf, &(0x7f0000001400)={0xffffffffffffffc0, 0x4}, &(0x7f0000001440)) read$eventfd(r4, &(0x7f0000001480), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0xd, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xae8d43e36c462497}}]}, &(0x7f0000001540)='GPL\x00', 0x2, 0xc2, &(0x7f0000001580)=""/194, 0x41000, 0x4d, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001680)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001700)=[r3], &(0x7f0000001740)=[{0x4, 0x1, 0xc, 0xa}], 0x10, 0x8, @void, @value}, 0x94) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000001840), &(0x7f0000001880), 0x2, 0x1) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000001940)={{}, 0x61, 0x748d, &(0x7f00000018c0)="e42167a7b48c435905539ca610e474b778dca6d8777e1f8b257d40a23facb44424e49265ba1ddc3fc3cbaba0222c0b58683f673df05bb6ee02200de1d7f6f20ca27bb7f800e4441bb3bb6885d0cb791674a5872d578b3d4c49686b727f5c17f96e"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), r4) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x64, r10, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000841}, 0x15) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000001c00)=0x81, 0x4) syz_open_procfs(r8, &(0x7f0000001c40)='ns\x00') madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r11, 0x8905, &(0x7f0000001c80)) prctl$PR_SET_FPEXC(0xc, 0x0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) connect$unix(r12, &(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) timer_create(0x7, &(0x7f0000001d80)={0x0, 0x32, 0x0, @tid=r8}, &(0x7f0000001dc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)) 1m1.915168823s ago: executing program 33 (id=636): ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x4, 0x8, [0x6, 0x100000000, 0x800, 0x9], &(0x7f0000000000)=[0x0]}) io_setup(0x2, &(0x7f0000000080)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100102, 0x0) r2 = eventfd2(0x8, 0xc01) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = eventfd2(0x10000, 0x800) r7 = eventfd(0xd8a9) io_submit(r0, 0x4, &(0x7f00000013c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc18, r1, &(0x7f0000000100)="b44342733fd319a47dfc2183aa3d82d3911ec1858a0cb4df5e6917cdabcdbfac5f346b390d7e7c4d98ed50da9914aac1637bdc3fdd2b2943f736", 0x3a, 0x3, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xda5, r3, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x4, r5, &(0x7f00000002c0)="c8660bbb11b0af7ee12efe670eb032a1111591806041c31aed271ea54be333480c56241bfb2cb2e83af2c3f840564dd1054fce09d8cca4dd128cb133964d22e169b19671909d2dc047", 0x49, 0x4, 0x0, 0x2, r6}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000380)="5047a60ffe6645f7bbeab8c702df7b8688025b32d112fcb693e27ddcf54a407385a2e0bc0052459ea08700e813891676a51e711307f8a6e2555436165ae1f6b8ac33975b9ffdbdc912314d6f0a1b9a8906c139ad13652d7939e4131235cf74047bfc60629d6d9c6adf48f10a187cb14cd9bf82ac24f7154d7a0b6d65885c32d265596621374034ece2f12fed1a4012a7c36257ce15121c8f5a1a241edea6585a6f6b145fcde1e257babfd32a3e945612d563b817ad1be177411bf84b4a1da00ae08800260839e87399f4e84afaa34a09e65459391c1f0d866163ab890854734979c009abea07d68a685b3606b397be7408be261a44ef18ff18e37e38942e2976483165f5d2871e48ab98ffdf8c6c3c054f0d588b5b93ad68d7fb9f2c7b2a162de2c069efd124d24dba0909980a8863b8c170d6b644fe438a8c345cffe1bee9ab9cabc12877b385c034a5de0311769c92e0fd8db438426717926024190c96d20033cc605dbb6830d8d0f5043c470b158981a70f2bef2ed9f8bc0a98be4cb9128d653af22aac53b2c04cbc1d02b236a5a75b39ee460be60fb79e946b6966827d39d0862cc682d1b162dd8b2d47a4e6a129326d1bd8ad59ab839c90960acbcc4540a10c19d684f2fa4e0d69182ada94e606159b99b0d5871b17720003997c9bb5609b66b49bfc360c35a407af8ebc5160ca6d95bc365dd341c84d609c8c53859c0d431296f2be2201a4b04b79cb5b7698da0db9c1032392cfb06461bd1f3a2318dc1c46b638c5c75193173f80496241d04518cb24e5b8a8accf19a9eff589c0e4c2aa707cb750c7c98d1b74eff115ad45b694b63e6b1b961b26887ab236c4d5adecd9870d8b1b7e3a23024a2727f9881d5b038efe326fb71ec3bb4dd2f987877f9a2b6164107e35cc7a80bdf3ac48622fb7acd64dfa225335081482d377e4a9ef51dbf2948d43c8b021e9ec047584000c84fa09343f2caf4aeb46f19e621719eb1c2593d0b8454ac48acb8d9aaf867c181fff24b83ecd9940745a7bcea1860d664b607bbdd1f10a73fd09a2ed1dd98f4278c2f235caad19c6674fc9258d3515abd03582f589173f2bfc87218ada21aa977171fc29440ea09943c0a897c4e8fb8078620de0ca3c0c0668a44dabb8c3842dff30767fd257d24db3f6c3c8889ed58b4a0622760fed8e32142a50afa28c4735ed81d08ac0a768c6e27099ad83203e238ee7faac11f33adec7be87593ea201dbfdf93213681fc8e7111ea276a3510fb6ff1b6c7ed0564104d8cdc4e5dd81eb3f410b0118a90ec1bf59afddbdd46b310ecc636effc5ada8136aadf386e4ee803bd04f68a6cdd0abe042810e06110c57003f505b67efa75c881be14a2de56e2ca26cc435bebfe71f438195644be669990a7e59f24e659180598c31777e81d72bb5c1844ec2c9b801c21292740c539f56c813ffeeb9b89b5f7ca4f37c10ca74d63edd3d505aa2e2c3c3c78c1e2c56a767eb397e8bd2ae3708eea7add9d27258ce029614fcbeb55157247868a7e7285478e4c866e5117c096407f2baa65285d9fea0f8dfc258d3e32e578074c6dd0227285578ff17c349e3a80d762eea6508fab9193047a9fdd0a3c2ea43297ca79462bbdef843af6bd830705cff519fecd8e52255cecb4051367903111e82bcb96e9d65aeeab187b96870d84edacd9eced281b0e7a282a2da1b5bc9ce9ce4602a4aba9b6c15575cf3c24b0acee28da936ff992ab204ce4f8dd7a7c6204368b344b56dedc7cece28453df4b499c43e881094499851b755a7ed71b8c7886e0e04ef622ac77d90b419db05926822acfe96ea9154abdbc31d332ee567e64bc39591df28e360f364710d099feda74e8f5427cdb2d3c086ea5d36c99f47777d48237c7a5980be1a6212d1ceb0c0c4552d1b55c5c0b897f1a7bb9cafbf96d0cc57bce034879a85cfd57ad44c6f130e2bdea2ffa1feadbf99c775295cd2e97deccd1fc6ae4e047b327b3e27733adcaa2b8e90d5346a188fbb0e6ec382c3ab7e2452c21a278aae706c5bf042503fc5ac183b6f315f45b6d2522fba3c4861d036bbbe737a22ef10a43fcf9c2fb3cd553a918d233e9fcd4c969866486bc5128b321ced85034c880f5029ce704c20e318ac9fed084e90c5a0ad2fd2d0e6d253feb30d49a1fb5d7bc55764b425556d9a19cc31356294e9dde36697cdf85be6acb172aaa4ba04a7f7e855eb2b1e8523d542f0012c0ec3774d5486cdb79a30cdf1bf3028e3f39f0d374cdd3fe0ddac9c5b1fa103aebfa2fd528535809fb1d49a86b183d6e7a227a9651780aaf09674544b1f1274bfd3cdaba85ed9620c26d5772f32d7d6b7fdce56496598f8175347d793dad72499a6f139061c06114678fcddc4910122933678fd88e2fd5821f47f408b28b371dff9159f01884e694c1e4916336d1d2c8d024c34876e0c4b52467e852c0adeade9a8d9831ca82ad587789aff56903f7dba09cbd201882a8edc15b343f583e7316d8c71dc31aa651ff50ec28399e72acb21aac2bd2d2b4e97e05a8a4f422b4c8edbe770cede2cadfae7560070c964e86815968cdfa479507bef29ec1d32b68055374ef10441219a59ba7aab5cca9c62346adf5278e43b1b549be0df6dc1a559f5666c043457cf9d949488ca1e5522a80f12b3af05281902c535b88dd92ceed42fd57e8cb8fd10f343c823c45abc326ad60950b3f58e09513ed41a2f7564d680662adecb81290aec82564e1de71f0a581f4815214bb9c53769231846ac9e88e72f3de9fb38b520d4a414bda33fd65bf40a2dbf2d9c39865824e3216ab8294299fbcf8ca44be14608d4c07ba3506fa9f6abccb057278797daa613afebd4dc00bbce0e8f3e35eb914339fc9f9777ee74a73af487b4fb8ba217c110375e014945ff663a520a0874007e7d521da3eb2079e70b0255095fdf836c7d971609cec503f5758c5435592c3a11b6c45aeeffa865d26dda3b9a7914914b69c9069b8f75773b503db9701719926aee2582b2336b75b3a29662c980f9ae3452baeaf565382154de72a69c8ce88eb0d0be909f398b9f9978eada2583a053fc1e624d469a9cad3497e4ccc8004914d608d804e7203495fe645acaec02cd0749cd6003ea7807c00d07dfea1373d0ee46d61af7b2cc5e215fced16593605036cac43b8812ef5ee9cfb3defb6bd6fa12e9644ab9989aea011851f99ee3eeb0793f20270852362b47cd9052bee95e448ea9201e0f8db066dd234f04868dc718e8ea652d7ce0239fa2e586330927b584da0b63df594d926f66728c6887879176814bd0c4d0a2cff5fe27d0b4dbd925070958f3f53116605e0581af7f572636e156c9edcb789de4838f9640f94b17cc2379b140778b8a34769f425cfbff769d4367294b48afd1f55fb8048e890630a7ada7a91ca9ba5abec9208a6a74fe864105380a9ff9abadd2ef0bf4d0c6dbdf67a43bacb6990da91136fee19e773645ad3b656971e9b771a9c68d8a65d05efe43d16a9cde552a213f9bafd01fba8eef3b8cd3b47b8fa7d1dfbb3250354d5d1d9171437992e7ffe2ce21c9bfd90491f0f9df4c51bd7f7a2efd706b674230c4200df89dfc966f45ef7240836616a5730aa2237bf7cc3865bc2b394d0c613900bf42e7ec8dfe22d1bbb67f93ac134661a6603cdcfeef854a1177d5086241190dd268d87f550b4c67211278eca9f4800b0260bde2af6ba2e106f2611ad3903fbe8d11c82590c68d63ef8c582bca8bc8ad46a36e3b3bc178d68dd37975057daf0508eb9dc1e57c68ec9bf16e46c306e492660f2a19244033b38820c2be9617bea957b27c17eecef9e8ab5637c178cf0c6154f3f9efa476bd349d1e89724f1f58e74e5e3fa6538ff39beadc1f792f21c899dff8f206bd56c84b8f5961ef8d42c6571bd7c93da3730c2fe05c7e54ab3b0f73e0bde46e62dbe02e9a7f7c5560a3a5cd923a0eb55429c1679b63926fcfc10d1cc6ed14416b5c9959bef7324e8a4600b9e6da916a5211c4eb321b4c981cdec6cc611079b2b0c88735c01aa04e478b0eb137a173254148a81de4fc78ed595be0fcfb83e1189f7d139e9d4c59467cfcb36a6a46ee6602ce7b2f926cd0856ad817cc85a5fab28abe426d878e2f3eb1fd94ef63cb7d7a9f1b1ac569fc3aeb026e0436977f6ce892aa4d0bbc91ef961678e2bdb86d19830c1a724913e726446d166ee5df39094504ba4697cc2ee6ce02721b242e786daa301c01476814bdcbcf4a1fcf8591c669f19c3fc5904a952307b928f9418ca09c226611230a597aec5902404c982110d4dd9d1fba01d06873257216eeda85f99024fce98940d17d5df4d7daea7ace9f78273de1331161f01dd49f200c609858b01fc087bb9959a7026e45d5f0f473ae46e6e2b995caed4d9dce693be35ed254f24598c86903e1e35f284b1cfeab17edc4e3c0c2d71a5568e03089200009f320deae0ec20311ded0c05c216fbd0c8dc2e6333b33375acbbadde6a3d8d70f6c9287b0ad8ffe240621db51f85e3b509fa77b6924652c3c3e059c2d1b7bd79f6ffec1f4de126e1d347d998a9784e51e7550c8eeaffc793c7502fad5acd4fcf7a75f990b921d36242559b059ca1f62c79db3a86ba8f38f1be28ac2497e5027ba2353abe55989dab6ff90582aec4b8e086ca5c4dc55199a43cd17100317ab98ff1438fea3d685ca103992e14331d46be2d3759e06e23087a7c943cd7d4cbe2949ba74f3081bd9cc0f30db203f9c39ff04539f1507e80c1714fb483545359df0c8beb151baf21299f24942f8d8dddc1ca14241b7ce25c763e97f364303cd18af38bacc42eea5285d3aadc437a23ea6e7ed1e358b3b486881fb432c5b065dda56989ef815f7f7276552a763d6bbad703ae8881f435037e25018c45469665faa96dcc4c5e8c412414a28b52c5ef80d17775a81879e3f077db0bb777bf9953d01ee2c0ddc53976ade8ee50cfa6cd2ec795aa1f15ae9584effa5c453630baeeeb9832d441752c3856e5d8b55cd8c304eb5e7a6260ce5553264456ca695a6d10ca903fc22efb2df4f9f2d826a11852772fd8ad2085a3db9ea6e52f9f70794535e5602e44f7ea6ba0829999b659512179c1b44bb0f23658f47e06a16a454e2d967967a8ba4efc27c190b16708fe7a13785813511d8928eeed9ac136a5abd676aefccb7a29bd365b3b8ae073466dd2b1addb8937dd833f480cfd839bf2acb98d7c34a077f46cf544cc30302daa2469ba0dc4dcfca46e5def7b18cf253a0453240f691ce0c3d7b64dc19a1e631fb247cb4835e56adca88a9a987e95c9f91965ce8180d216a7b5f36ad020a8e8e8b37d71b05fb0e7ceef30f8ecaa139599fe9e110abc488c734790a97e74c23abe62fb4040c2a0922d4c0817729b2ab9b91f2faa7ac255556a5e800c368a18279e940203e55f2c7794ceade61dbc8dba28464e632fb6ef43231a265cfd720937752a7615e73c11d9f97f7e94eae97457b2528de9167c4d5670eba09bf19229769a6fd7ece24f69fe63169cc1795b44fe388a0ebb9e21e814a4ad7356574a4bc4dfc3b00993e5bae8b1739da48e33f56d077345b77d907014df1cb3b0f599be86a9a4b0a3511c24e5b1f5cd73d59db17fe22d88bd03dcc158d7b989fd0094b7f3c95991d101c1333114df44989a37c8a66683e274acd3296107a0c764ed1e4230a64c8389a8ffffb409f079b7e158305d1bbe73e34f65b93ad7404eb07b630f4e0bd76a58e80e5ac10e677ca427a3765e8004f9614aea206cde8bd8493b973da60c7f0ea08bf2380d6de4327074018", 0x1000, 0x7, 0x0, 0x1, r7}]) r8 = gettid() prlimit64(r8, 0xf, &(0x7f0000001400)={0xffffffffffffffc0, 0x4}, &(0x7f0000001440)) read$eventfd(r4, &(0x7f0000001480), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0xd, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xae8d43e36c462497}}]}, &(0x7f0000001540)='GPL\x00', 0x2, 0xc2, &(0x7f0000001580)=""/194, 0x41000, 0x4d, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001680)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001700)=[r3], &(0x7f0000001740)=[{0x4, 0x1, 0xc, 0xa}], 0x10, 0x8, @void, @value}, 0x94) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000001840), &(0x7f0000001880), 0x2, 0x1) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000001940)={{}, 0x61, 0x748d, &(0x7f00000018c0)="e42167a7b48c435905539ca610e474b778dca6d8777e1f8b257d40a23facb44424e49265ba1ddc3fc3cbaba0222c0b58683f673df05bb6ee02200de1d7f6f20ca27bb7f800e4441bb3bb6885d0cb791674a5872d578b3d4c49686b727f5c17f96e"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), r4) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x64, r10, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xa}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000841}, 0x15) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000001c00)=0x81, 0x4) syz_open_procfs(r8, &(0x7f0000001c40)='ns\x00') madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r11, 0x8905, &(0x7f0000001c80)) prctl$PR_SET_FPEXC(0xc, 0x0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) connect$unix(r12, &(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) timer_create(0x7, &(0x7f0000001d80)={0x0, 0x32, 0x0, @tid=r8}, &(0x7f0000001dc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e00)) 3.189288554s ago: executing program 3 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a0092a400000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000faffffffaa8d000001000000a0100100", @ANYRES32, @ANYBLOB="b700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000010000000800"/24, @ANYRES32, @ANYBLOB="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"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xen_mc_entry_alloc\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.540604648s ago: executing program 6 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x84180) r3 = geteuid() statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) openat$cgroup_ro(r5, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x2000000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\*\xf7'}}, {@subj_role={'subj_role', 0x3d, '+:{:^(:'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\xf0'}}, {@pcr={'pcr', 0x3d, 0x29}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash}, {@seclabel}, {@euid_gt={'euid>', r4}}]}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.515398878s ago: executing program 1 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0, 0x803e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083e95140acffff8564160102030109021b00010000000009040000010e01000009050d"], 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000230040120c050000000000000109022d00010000000009040081010300000009210000ff0122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022060000000807"], 0x0}, 0x0) 2.462774977s ago: executing program 6 (id=953): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xc98}}, {@data_err_abort}]}, 0xd, 0x5ec, &(0x7f0000001300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x54) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x803, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@discard}, {@namecase}, {@errors_remount}, {@errors_continue}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x5, 0x1522, &(0x7f00000037c0)="$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") socket$pppl2tp(0x18, 0x1, 0x1) fdatasync(r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) 2.263419709s ago: executing program 3 (id=956): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2d, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20003af1}, 0xa}], 0x400000000000172, 0x4000300) 2.192599169s ago: executing program 3 (id=957): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200), 0x3, 0x43b, &(0x7f0000000bc0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa"], 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000014000705000000000000000002010000bc783270f87e8e68bc8532f5369b30bfcdfe61d6175fb76211d03360839f8fc2b9f2e5e9b50000de993289fd12af3b0fa002b349011d093b11729cc6a25f6031c930df3531f1760750cb73950e91db0100f33fe7b6b4764346b24f791972ddf6980e1faf2b1383caf50062fc8f51f556977242392f7781bbdf54986d2e2152602f75db71e4e490b8f4d2d5f15eeef0015b2332eceb7ff2eb558273f0", @ANYRES32=r5, @ANYBLOB="1400060000000000000400f0000000000000000008000200ac1414aa080009008000000008000100e0000002"], 0x44}}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000380)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000001000)=""/4096}, {0x3000, 0x47, &(0x7f0000000180)=""/71}, {0x100000, 0xb, &(0x7f0000000340)=""/11}]}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000580)="d632c122a4c50159a2f9dc0300000052102b960bec0479cf1e7fd82f0ca104f8b2e1ca668fcd80b8f6bb9b52ff9189cc4538449f5c14a3b044eefd4406195739", 0x40}, {0x0}, {&(0x7f0000000080)='(\x00', 0x2}], 0x3) 2.065037109s ago: executing program 3 (id=958): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0x17, 0x7ffffffffffffffe, 0x0, 0x0, 0x0, 0x40000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x1}) 1.92333141s ago: executing program 6 (id=959): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x80000001, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="b8432c4f1e7cf0d98a014fd6ac4bf5483edbb359af5c5a83e97bd047243db0cbe52aceb367dc56e85aea8fba48a264ecdf74311b81d7268204638756d93ac5064c03c326be42d7578c9878a1074c57fb9d0b61724d394ef973f6736f2af56f082a5cb1f1a9a42a735a51f2eaefbaa9909c5e6b991f3aff078aa985b2af36c710791b313b0ab47f144a52c0da786ef3e3d712b946ab6ba24c9005a141c4ecb75e68530be047bdeff040383cd191a7017bf16f92d454a2422473ef4e718c0d5c0accffce5de3317d6721e5eca6ae9b8c03f5a5", 0xd2}], 0x1, 0x1, 0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xfffffffffffffffd, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x7a, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x9, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x40, {{0xa, 0x24, 0x6, 0x0, 0x0, "d77f626483"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x2, 0x8, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x4, 0xf, 0x82, 0x1, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x8, 0xc0, 0x3, 0x477, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x50, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x6, 0x70}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x80, 0x6, 0x6, 0x10, 0x6}, 0x4b, &(0x7f0000000300)={0x5, 0xf, 0x4b, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3, 0x5, 0xffca, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0xf00, 0xd0, [0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x85, "b3a3a7b29b191353e782ec7fab0ee799"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "5c7886109ad2f7e7ffcdcccd62717fb3"}, @ptm_cap={0x3}]}, 0x2, [{0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "dac61ff49ecb0dc5cbf9f4e44a7db2a3d4dfaf0aed364073998bee4787929cead2e980cbca364a26df85f597c1afe530d3694280476e0c5a0f361eb3bfbf42c022efe1568d388f0997a4443c869d71bfb23a609a7e0a657ce0901d9275bb1fe7955b5f6ba694a26005c422b867836f2211a9ff4bcf425898fdebdd2f2b69da9d0dc76aee4293d9e6d54c5b19bdf68fefe4d951797ca3b29e96dd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44e}}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044801}, 0x4004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000640)={{0x6000, 0xf000, 0x8, 0x5, 0x40, 0xff, 0x0, 0x2, 0x6, 0x0, 0x7, 0x3}, {0xffff1000, 0xf000, 0xf, 0xa, 0x0, 0x6, 0x4, 0x6, 0xfb, 0x9, 0x1, 0xd}, {0x80a0000, 0x2, 0xd, 0xff, 0x6, 0xf7, 0x4, 0x0, 0x9, 0xdf, 0x23, 0x6}, {0xffff1000, 0x5000, 0xd, 0x7, 0x6, 0x7, 0x0, 0x18, 0x5e, 0x81, 0x4, 0x3}, {0x5000, 0x10000, 0xc, 0x1, 0x5, 0x0, 0x2, 0x9, 0x4, 0xfe, 0x81, 0x5}, {0x80a0000, 0x5000, 0x8, 0x6, 0x40, 0x7, 0x0, 0x68, 0x4, 0x7, 0x17, 0x7}, {0xffff1000, 0x3000, 0xd, 0x7, 0x8, 0xb, 0x6, 0x4, 0x9, 0x1, 0x7f, 0xdc}, {0x1000, 0xdddd1000, 0xd, 0xc, 0x9, 0x4, 0x4, 0x7, 0x7f, 0x3a, 0x5, 0x2}, {0xdddd1000, 0x7fff}, {0xf000, 0x3}, 0x20, 0x0, 0xdddd1000, 0x2000, 0x4, 0xa00, 0xf000, [0x2, 0x4, 0x596, 0x7]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x20, 0x11, 0xac, {0xac, 0x22, "1bcc5c99cc0f6f92f85e101dbab66292a710c7808a56db07e76b4ee4ea5cb54f160b3a55e88e387dc900bfc677f322420aaa8f4b768992d2d7f701d1cf2dff0c71792d44d12770078106e2fe79cc4e28ff9c6d6900c72b0371142517459b08b98eafc99f3e6f06371283dd6c5aa9487dff4a2de7a9c55f867a300dcd135e78011bcce6f6dcf0ce90b60c992c1377630fc8870283370c8789adfd7ae32094c4dc620041625cd831034cef"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x31, 0x5f, "74cb6a5f2dfa55c28ad6023fa6828ad2332a69e2deb32fb4a4dde3e8d7131d629623a784157b8c64ed7fc9d2e23b656d33fa11704739f96f6fc36263b06c9b53cc73f8ef3f7b8b6f3687a7d81784d1ba14205b89fa2047f6af9300e4e74c77"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x81}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r6, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000b40)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000b80)={0x41, 0x4, 0x3}, 0x10) recvmmsg(r2, &(0x7f0000003a00)=[{{&(0x7f0000000bc0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/29, 0x1d}], 0x1, &(0x7f0000000cc0)=""/164, 0xa4}, 0xa}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/39, 0x27}], 0x1, &(0x7f0000000e80)=""/250, 0xfa}, 0x8}, {{&(0x7f0000000f80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)=""/208, 0xd0}], 0x1, &(0x7f0000001140)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002140)=@nfc, 0x80, &(0x7f0000003400)=[{&(0x7f00000021c0)=""/101, 0x65}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000002340)=""/118, 0x76}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/53, 0x35}], 0x5}, 0xc}, {{&(0x7f0000003480)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/247, 0xf7}, {&(0x7f0000003600)=""/216, 0xd8}], 0x2, &(0x7f0000003740)=""/233, 0xe9}, 0x4}, {{&(0x7f0000003840)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/193, 0xc1}], 0x1}, 0xa8000000}], 0x6, 0x40000103, &(0x7f0000003b80)={0x0, 0x3938700}) sendmsg$key(r2, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x2, 0x16, 0x6, 0x2, 0x9, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x7fff, @local, 0x2}}]}, 0x48}}, 0x484) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x3, 0x1a4, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000003e40)={0x14, &(0x7f0000003dc0)={0x20, 0x1, 0x36, {0x36, 0x7, "67ac1476f33b5671ca2d4f3624eb49eb7639642f1805a842fcd5a865f8d27ced6b9ddf9bdec72b477747d11558c081dd87c8a4d6"}}, &(0x7f0000003e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004000)={0x1c, &(0x7f0000003e80)={0x20, 0x15, 0xd9, "a40338b4e97ef083d2b5315273e0b983e936e350483d16f900d95b3502ec016be1f0647612139b133d918c8c4911cd37ddad0879c44977eaa60adffe55d90128eb5d7fa48f783d9e570e48f539ca460081c8afd319036811fb962b6a9b8313562ef241ac0615e97dcb3e5223964b92c2e10780ba97bfda12c74734b982be6d344ae3bec68ac6415d41437e4fc24fcf0e972a75bccf1351aca8b74253371d51037dc2e92fe726702b1a432d7a7aeec7caa262fd6c607a156d6950e6cbafb20514192780ceb0a7203fcaf1672c5f25ecd9159d29693a7d9d47f6"}, &(0x7f0000003f80)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000003fc0)={0x0, 0x8, 0x1, 0x9}}) write$UHID_INPUT(r2, &(0x7f0000004040)={0x8, {"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", 0x1000}}, 0x1006) r8 = gettid() waitid(0x0, r8, &(0x7f0000005080), 0x60000009, &(0x7f0000005100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005200), r2) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x30, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000005300)={@private=0xa010101, @multicast2, @private=0xa010101}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000005340), r9) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000005380)={'macvtap0\x00', 0xfffffffc}) wait4(0x0, &(0x7f0000005400), 0x8, &(0x7f0000005440)) 1.624948532s ago: executing program 0 (id=960): sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='xfs\x00', 0x20001, &(0x7f0000000200)='@{:(.\\*(*)\xab{+*\x00') recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unshare(0x62040200) 1.421956063s ago: executing program 5 (id=962): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000100)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x12) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x5}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x31, 0x0, &(0x7f0000000280)) bind$can_raw(r5, &(0x7f00000001c0), 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.359531753s ago: executing program 5 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffd63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = inotify_init1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x2}]}}]}, 0x40}}, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x50007a2) 1.359033844s ago: executing program 6 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x84180) r3 = geteuid() statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) openat$cgroup_ro(r5, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x2000000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\*\xf7'}}, {@subj_role={'subj_role', 0x3d, '+:{:^(:'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '#\xf0'}}, {@pcr={'pcr', 0x3d, 0x29}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash}, {@seclabel}, {@euid_gt={'euid>', r4}}]}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r11, 0x400455c8, 0x0) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.191875765s ago: executing program 5 (id=965): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000200)={[{@orlov}, {@minixdf}, {@test_dummy_encryption_v1}, {@debug}, {@barrier}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x456, &(0x7f00000017c0)="$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") 1.191710824s ago: executing program 5 (id=966): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) 1.185958244s ago: executing program 5 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f0000000000)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) 1.185354284s ago: executing program 6 (id=968): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$pokeuser(0x6, r1, 0x2, 0x9) r2 = syz_open_pts(r0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001800)={0x0, 0x0}) prlimit64(r3, 0x0, &(0x7f0000000140)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0xa, &(0x7f0000001a80)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x2c, &(0x7f0000001880)=""/44, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0x9, 0x7ac1, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001980)=[{0x0, 0x5, 0x2, 0x9}, {0x3, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xe, 0x9}], 0x10, 0x80000000, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='console\x00', r8}, 0x18) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket(0x18, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) dup3(r0, r2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xff, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) 1.037818555s ago: executing program 5 (id=969): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x11, 0x65, 0x0, &(0x7f00000004c0)) syz_usb_connect(0x2, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0x8b, 0x4, 0xd6, 0x10, 0x5ac, 0xd181, 0xb4a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0xff, 0x0, 0x80, [{{0x9, 0x4, 0x94, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x6, [], [{{0x9, 0x5, 0xc, 0x1, 0x3ff, 0xfa, 0x7, 0x57}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4001451c1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utime(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000005440)=0x6, 0x4) statx(r1, &(0x7f0000000ac0)='./bus\x00', 0x100, 0x80, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000a80)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000c00)={0xffffffffffffffff, 0x1, 0x1, 0x6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10) recvmmsg(r0, &(0x7f0000005300)=[{{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f0000001040)=[{&(0x7f0000000cc0)=""/1, 0x1}, {&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000e00)=""/195, 0xc3}, {&(0x7f0000000f00)=""/57, 0x39}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/232, 0xe8}], 0x8, &(0x7f00000010c0)=""/236, 0xec}, 0x5}, {{&(0x7f00000011c0)=@caif=@dbg, 0x80, &(0x7f0000001480)=[{&(0x7f0000001240)=""/104, 0x68}, {&(0x7f00000012c0)=""/219, 0xdb}, {&(0x7f00000013c0)=""/179, 0xb3}], 0x3, &(0x7f00000014c0)=""/30, 0x1e}, 0xc12}, {{&(0x7f0000001500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001580)=""/244, 0xf4}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/213, 0xd5}, {&(0x7f0000001840)=""/149, 0x95}, {&(0x7f0000001900)=""/6, 0x6}, {&(0x7f0000001940)=""/180, 0xb4}, {&(0x7f0000001a40)=""/86, 0x56}], 0x7, &(0x7f0000001b40)=""/32, 0x20}, 0x7e201c74}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/214, 0xd6}, {&(0x7f0000001cc0)=""/158, 0x9e}, {&(0x7f0000001d80)=""/219, 0xdb}, {&(0x7f0000001e80)=""/144, 0x90}, {&(0x7f0000001f40)=""/69, 0x45}, {&(0x7f00000050c0)=""/197, 0xc5}, {&(0x7f0000001fc0)=""/173, 0xad}], 0x8, &(0x7f0000005240)=""/149, 0x95}, 0x951b}], 0x4, 0x101, &(0x7f0000005400)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x5, 0x6, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x700, 0x7, 0x2, 0x10000000}}) 819.511786ms ago: executing program 3 (id=970): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, &(0x7f0000000440)}) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 624.983677ms ago: executing program 0 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x1e, &(0x7f0000000300)={@random="8df18ab00b0e", @multicast, @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "12910bf47c0e88f2"}}}}, &(0x7f0000000340)={0x1, 0x3, [0x56a, 0x97e, 0x79e, 0x72a]}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newnexthop={0x2c, 0x68, 0x521, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x7fffffffffffffff}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, 0x0) 573.364268ms ago: executing program 0 (id=972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d5c5342adbe0927ae066c8a3d55d567f7c9b3093ca1fdec9ea95098bb06bc396605668f1646bacc3817614833636f6b4da1e84481ef058deb19cc3f542661c201c3442d2cdf10d5433fbfa8e9c06b74c31d9368ef007698c18fb290325e0522c50a5174c472c35d675986e93721911a6309fdcc462fd96403332f3f706e0994ff0862ea2fb04cfbf697bcf1dba3157e228f85caa04b34ed6e4b077e68509252ab76de719a5fb88036f3a6ff6bcdadbe0b6843889df85ceb63a0aca3be7fa56", @ANYRES16=r2, @ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) getgid() r8 = dup(r6) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e006"]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000380)={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x5, 0x5b67, 0x2, 0x400, 0x7fff, 0x4a820208, r3}) 485.661498ms ago: executing program 1 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) setgid(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0xa3}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 453.893528ms ago: executing program 1 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r2, 0xd7, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) read$FUSE(r2, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000600)=ANY=[@ANYRES64=r6, @ANYRES64, @ANYRES32=r7, @ANYRESHEX, @ANYBLOB="00000000325643fd31736574e995938c382c009cd0aeba477309000000000000004bd39e0378bfe3e990b3c61deade3942b079b5a276e9a30600000000000000b5f8224e2ab8bacfc6987894fb6fac1518c4f1031e702457e9a4d1ea31b2c409ed2eb513071397e87084ec0caf15ae1968d992d188bb86eb331bfab65c2ad10e50a98cf4a69f718c43de1841e25aa247d1a6b805ff0ff0038e71636166358e0df1ce268e823e914e002659572b8589484790cb55bedec7fb84ae86c610d529b7a50111ae8f663c2b545b2137d1a773e30d20807627f298ddfee66a6da84c334bb07729452aaf5468f23f6700dcaef2788ff51c6f16d4065a6f941ca7d32c000000000000001de077353478050004000000000000050000000378f9ae3c3025b79deda97a00000900000000487b50f8118d8bffe7d7ca8380a3ff5d9cd8a26bab9c8809973e06000000a3eee7b3e522d1363f262a595daab663799385080131363c00640d11aa6af7c102d11cf7f50a6b649f8576bfc9c16bffdc072c055cf9e022177dc07a697902554fddfe18dcdc43a467f0db6412b77f25ea17793aa5e754628c2bf08a27843d131d697954609c4c2acdcc3c020016ea221bdeac6a2cdb80fc2f76fee712ed689ca11cea3651c0a84aec8e06a4ea9ccc190cf7d8bd43408541533556592fefefaf2ba32bfd5506b50016d91465cead29f5f3d5fac2a34f35478cd3f731164ffe56179aae7ee49e50183650edc70619fa20a1f1fa8df02ecec29dd1a08a05bba26415e118af67352177bd9411082f76877a2c236071ec3b8790ef38f9ae208b395c2e4e506a9a6c236098051951dc0b2abe1aec383b4a3c368c7177bfeba6be5acb36fed06aca", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES64=r5], 0x1, 0x14e6, &(0x7f0000002a80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000370429bd70000000000000000000", @ANYRES32, @ANYBLOB="93040400000000004800128008000100736974003c00028006000f00"], 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0x1, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010000000100faffffff00000002", @ANYRES32=r13, @ANYBLOB="40040000201506000500210001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f80)={'gre0\x00', 0x0, 0x40, 0x7800, 0x8, 0x5, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x7, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x96}, {@remote, 0x92}, {@loopback, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) getpeername$packet(r2, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14) getpeername$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001580)={0xd60, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0xf, 0x7, 0x7}, {0x5, 0x9, 0x8, 0x81}, {0x5, 0xce, 0x7, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x7f, 0xff, 0x4809}, {0xe, 0xd, 0xc, 0x5}, {0x2, 0xa4, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2a, 0x0, 0x7, 0x6c83}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x95}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffd, 0x2, 0xfd, 0xc}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4ec3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x0, 0x4, 0x2}, {0x8, 0x1, 0x9f, 0x1}, {0x4, 0xc, 0x1, 0x9}, {0x9, 0x5, 0xf, 0x3}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x92}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf14ce6a}}}]}}, {{0x8, 0x1, r18}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0xd60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) fchownat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, r7, 0x100) 453.133008ms ago: executing program 0 (id=975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x111) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff0000007071102700000000009500000300000000af3a5361def13534bc7547ae7cb94dc424ff85e5af219b1f9ccdb8878ef4f5871775762d16dee914f6bcfa1ba01940f52a0c86b648d572b55b5478b1553ed08c29ff9e24228aa860d62798f1a210534936bfbcb9"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095", @ANYBLOB="f2df7362aa80eb9c039e1b250d8d9acb4f0938b5a2d5a25d7a1cf3320e06", @ANYRES8=r3, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) close(r5) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='ufshcd_command\x00', r1, 0x0, 0x5}, 0x18) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 452.225728ms ago: executing program 1 (id=976): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000000000000000000000f3ffffff00f8a2f73609db40040e72bff52d0b1e6da1798304c6d711db3aa8a3eda41b3646f218d0f4d7f4c40727"], 0x48) (rerun: 64) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004020000860000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000edffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850008bcfae18908a9211b4ce4fa010000190000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000000000000000000001c00000018110000b9449e0132858934579d26f1", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020006000000dbaaf0ff000000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='objagg_obj_root_create\x00', r9}, 0x18) (async) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') preadv(r10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS") r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) (async) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 359.434758ms ago: executing program 1 (id=977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000775fb7bfc21ceec600000000b9b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") io_submit(0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000f0200000031000000f7"]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'veth0_to_team\x00', @broadcast}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r10, 0x6, 0x4, 0x0, 0x2000e881) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYRESOCT=r11], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) setpriority(0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) inotify_init1(0x0) 289.409159ms ago: executing program 1 (id=978): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) fsync(r2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$int_in(r4, 0x5452, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000705300000000000000000000000000000000000000000050fd1e40e3093e0300705b1c9d81d077bb25b1e2ab9f60e99ec6922765759a00854866e52afe1246509574dac1c3e460e43b11b219efc81b6f715c86bb7bbbad06b2857341d15a3e46fe5b20fa8a8300a1cbced0f916ffcd06cd6dd0aa7ad24feea519845da50b203ab30764b3deaed43ad1a47cb7f183ea4e52cf67de82f82305f1664410daefaefc86dbdfdb2644595d785bef525036fa60072da0f141aac401522fecb15187fea1ca01a495182f29be38a5945f61f752caf7c39e46007ef45d7608c5b7f31d362a290ee67d4f1aad24ca126000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffd]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 147.75111ms ago: executing program 0 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 91.53819ms ago: executing program 0 (id=980): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0x17, 0x7ffffffffffffffe, 0x0, 0x0, 0x0, 0x40000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x1}) 49.13168ms ago: executing program 6 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010003000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000030c0), 0xfe, 0x5d8, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) get_robust_list(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7317000000000000086f3d00000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k']) 0s ago: executing program 3 (id=982): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x6d, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000117000000000000000000b6a118fb0bfa080084145d5a00000002", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x210) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@redirect_dir_follow}, {@xino_auto}]}) kernel console output (not intermixed with test programs): ce found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.346375][ T24] audit: type=1326 audit(1732028191.927:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 83.370912][ T610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.380433][ T610] usb 1-1: config 0 descriptor?? [ 83.385539][ T24] audit: type=1326 audit(1732028191.927:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 83.409219][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 83.427098][ T24] audit: type=1326 audit(1732028191.927:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 83.451950][ T24] audit: type=1326 audit(1732028191.927:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 83.475388][ T24] audit: type=1326 audit(1732028191.927:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1683 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 83.527861][ T714] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.685491][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 83.766448][ T714] usb 5-1: Using ep0 maxpacket: 32 [ 83.823837][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.842511][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.853427][ T610] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 83.860832][ T610] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 83.870016][ T610] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 83.882647][ T714] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 83.891211][ T714] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 83.901321][ T714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.958939][ T1704] syz.5.385[1704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.959165][ T1704] syz.5.385[1704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.089878][ T5] usb 1-1: USB disconnect, device number 9 [ 84.138963][ T714] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.148488][ T714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.157868][ T714] usb 5-1: Product: syz [ 84.163230][ T714] usb 5-1: Manufacturer: syz [ 84.169697][ T714] usb 5-1: SerialNumber: syz [ 84.237300][ T290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 84.257051][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 84.265979][ T25] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 84.274115][ T25] usb 4-1: Product: syz [ 84.278197][ T25] usb 4-1: Manufacturer: syz [ 84.283224][ T25] usb 4-1: config 0 descriptor?? [ 84.493802][ T714] usb 5-1: 0:2 : does not exist [ 84.502338][ T714] usb 5-1: USB disconnect, device number 11 [ 84.690998][ T290] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.769846][ T290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.779918][ T290] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.789040][ T290] usb 2-1: too many endpoints for config 1 interface 1 altsetting 255: 146, using maximum allowed: 30 [ 84.800467][ T290] usb 2-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 84.813917][ T290] usb 2-1: config 1 interface 1 has no altsetting 0 [ 84.944827][ T1722] SELinux: failed to load policy [ 84.977166][ T290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.986130][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.993903][ T290] usb 2-1: Product: syz [ 84.997963][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 85.003745][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 85.010132][ T290] usb 2-1: Manufacturer: syz [ 85.014542][ T290] usb 2-1: SerialNumber: syz [ 85.019820][ T25] usb 4-1: USB disconnect, device number 13 [ 85.085349][ T310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.213589][ T714] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.361650][ T310] usb 6-1: Using ep0 maxpacket: 8 [ 85.490047][ T310] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 85.503691][ T310] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 85.533612][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.588932][ T714] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 85.893782][ T714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.903889][ T714] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.917031][ T714] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 85.926069][ T714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.935114][ T714] usb 5-1: config 0 descriptor?? [ 85.975778][ T714] usb-storage 5-1:0.0: USB Mass Storage device detected [ 85.990550][ T714] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 86.013087][ T310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.022123][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.035427][ T310] usb 6-1: Product: syz [ 86.039492][ T310] usb 6-1: Manufacturer: syz [ 86.044250][ T310] usb 6-1: SerialNumber: syz [ 86.368570][ T310] usb 6-1: 0:2 : does not exist [ 86.378212][ T310] usb 6-1: USB disconnect, device number 2 [ 86.693740][ T1748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 86.917167][ T1750] device pim6reg1 entered promiscuous mode [ 86.934825][ T714] usb 5-1: USB disconnect, device number 12 [ 86.980578][ T1752] xt_hashlimit: size too large, truncated to 1048576 [ 87.267503][ T290] usb 2-1: 0:2 : does not exist [ 87.292275][ T1768] device wireguard0 entered promiscuous mode [ 87.327045][ T290] cdc_wdm 2-1:1.1: invalid descriptor buffer length [ 87.343619][ T290] cdc_wdm: probe of 2-1:1.1 failed with error -22 [ 87.351230][ T290] usb 2-1: USB disconnect, device number 13 [ 87.652864][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 87.846170][ T1772] syz.4.405[1772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.846220][ T1772] syz.4.405[1772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.869332][ T1772] serio: Serial port ptm1 [ 87.989400][ T1775] Zero length message leads to an empty skb [ 88.008749][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.018900][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.097808][ T310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.107241][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.115282][ T310] usb 1-1: SerialNumber: syz [ 88.157393][ T24] kauditd_printk_skb: 112 callbacks suppressed [ 88.157407][ T24] audit: type=1400 audit(1732028196.912:1650): avc: denied { getopt } for pid=1784 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.189715][ T1789] FAULT_INJECTION: forcing a failure. [ 88.189715][ T1789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.202849][ T1789] CPU: 0 PID: 1789 Comm: syz.5.411 Not tainted 5.10.226-syzkaller-00001-g6a01908517df #0 [ 88.212462][ T1789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.222349][ T1789] Call Trace: [ 88.225483][ T1789] dump_stack_lvl+0x1e2/0x24b [ 88.230000][ T1789] ? bfq_pos_tree_add_move+0x43b/0x43b [ 88.235292][ T1789] ? preempt_count_add+0x92/0x1a0 [ 88.240151][ T1789] dump_stack+0x15/0x17 [ 88.244138][ T1789] should_fail+0x3c6/0x510 [ 88.248426][ T1789] should_fail_usercopy+0x1a/0x20 [ 88.253257][ T1789] _copy_from_user+0x20/0xd0 [ 88.257685][ T1789] get_timespec64+0x93/0x270 [ 88.262217][ T1789] ? mutex_trylock+0xa0/0xa0 [ 88.266620][ T1789] ? timespec64_add_safe+0x220/0x220 [ 88.271833][ T1789] __se_sys_ppoll+0xcd/0x330 [ 88.276253][ T1789] ? ksys_write+0x260/0x2c0 [ 88.280593][ T1789] ? __x64_sys_ppoll+0xd0/0xd0 [ 88.285196][ T1789] ? __ia32_sys_read+0x90/0x90 [ 88.289795][ T1789] __x64_sys_ppoll+0xbf/0xd0 [ 88.294222][ T1789] do_syscall_64+0x34/0x70 [ 88.298575][ T1789] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.304286][ T1789] RIP: 0033:0x7f5ff6800759 [ 88.308631][ T1789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.328464][ T1789] RSP: 002b:00007f5ff5479038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 88.336702][ T1789] RAX: ffffffffffffffda RBX: 00007f5ff69b7f80 RCX: 00007f5ff6800759 [ 88.344514][ T1789] RDX: 0000000020000300 RSI: 0000000000000025 RDI: 0000000020000d40 [ 88.352323][ T1789] RBP: 00007f5ff5479090 R08: 0000000000000000 R09: 0000000000000000 [ 88.360136][ T1789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.367947][ T1789] R13: 0000000000000000 R14: 00007f5ff69b7f80 R15: 00007ffc4ae63f78 [ 88.414842][ T310] usb 1-1: 0:2 : does not exist [ 88.419956][ T310] usb 1-1: unit 255 not found! [ 88.435775][ T310] usb 1-1: USB disconnect, device number 10 [ 88.457486][ T1799] ------------[ cut here ]------------ [ 88.467002][ T1799] trace type BPF program uses run-time allocation [ 88.476129][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.492272][ T1799] WARNING: CPU: 0 PID: 1799 at kernel/bpf/verifier.c:10493 check_map_prog_compatibility+0x65b/0x7c0 [ 88.509367][ T1799] Modules linked in: [ 88.515139][ T1801] overlayfs: unrecognized mount option "verity=off" or missing value [ 88.523411][ T1799] CPU: 0 PID: 1799 Comm: syz.1.414 Not tainted 5.10.226-syzkaller-00001-g6a01908517df #0 [ 88.534385][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.544887][ T1799] RIP: 0010:check_map_prog_compatibility+0x65b/0x7c0 [ 88.551436][ T1799] Code: c8 e9 84 fe ff ff e8 34 f4 ee ff 31 db e9 85 fe ff ff e8 28 f4 ee ff c6 05 0e 1d 65 05 01 48 c7 c7 e0 76 45 85 e8 15 7a c2 ff <0f> 0b e9 42 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 17 fa ff [ 88.571992][ T24] audit: type=1400 audit(1732028197.357:1651): avc: denied { read } for pid=1796 comm="syz.5.413" name="loop9" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.596511][ T1800] syz.5.413[1800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.596573][ T1800] syz.5.413[1800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.608938][ T24] audit: type=1400 audit(1732028197.357:1652): avc: denied { open } for pid=1796 comm="syz.5.413" path="/dev/loop9" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.644243][ T1799] RSP: 0018:ffffc90000ff6f90 EFLAGS: 00010246 [ 88.650202][ T1799] RAX: 164cbd96c2575200 RBX: ffff88811106a800 RCX: 0000000000040000 [ 88.658476][ T1799] RDX: ffffc9000132c000 RSI: 0000000000000837 RDI: 0000000000000838 [ 88.666492][ T1799] RBP: ffffc90000ff6fd0 R08: ffffffff81522098 R09: ffffed103ee0a5f8 [ 88.674663][ T1799] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 88.682767][ T24] audit: type=1400 audit(1732028197.387:1653): avc: denied { ioctl } for pid=1796 comm="syz.5.413" path="/dev/loop9" dev="devtmpfs" ino=120 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.708542][ T1799] R13: 1ffff9200003c204 R14: ffff888119bf8000 R15: ffffc900001e1020 [ 88.716619][ T1799] FS: 00007f35b52036c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 88.725817][ T1799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.732447][ T1799] CR2: 00000000ffffffff CR3: 000000010ebcd000 CR4: 00000000003506b0 [ 88.740430][ T1799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.752788][ T1799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.760769][ T1799] Call Trace: [ 88.764001][ T1799] ? show_regs+0x58/0x60 [ 88.768088][ T1799] ? __warn+0x160/0x2f0 [ 88.772325][ T1799] ? check_map_prog_compatibility+0x65b/0x7c0 [ 88.778334][ T1799] ? report_bug+0x3d9/0x5b0 [ 88.782928][ T1799] ? check_map_prog_compatibility+0x65b/0x7c0 [ 88.788929][ T1799] ? handle_bug+0x41/0x70 [ 88.793601][ T1799] ? exc_invalid_op+0x1b/0x50 [ 88.798211][ T1799] ? asm_exc_invalid_op+0x12/0x20 [ 88.803342][ T1799] ? wake_up_klogd+0xb8/0xf0 [ 88.807838][ T1799] ? check_map_prog_compatibility+0x65b/0x7c0 [ 88.814029][ T1799] ? __fdget+0x1bc/0x240 [ 88.818126][ T1799] resolve_pseudo_ldimm64+0x586/0x1020 [ 88.823594][ T1799] ? bpf_check+0xf2b0/0xf2b0 [ 88.828125][ T1799] ? kvmalloc_node+0x82/0x130 [ 88.832828][ T1799] bpf_check+0xaf21/0xf2b0 [ 88.837189][ T1799] ? stack_depot_save+0xe/0x10 [ 88.842037][ T1799] ? __se_sys_bpf+0x9856/0x11cb0 [ 88.846926][ T1799] ? sched_clock+0x3a/0x40 [ 88.851350][ T1799] ? 0xffffffffa0028df0 [ 88.855442][ T1799] ? bpf_get_btf_vmlinux+0x60/0x60 [ 88.860579][ T1799] ? __kernel_text_address+0x9b/0x110 [ 88.865882][ T1799] ? unwind_get_return_address+0x4d/0x90 [ 88.871667][ T1799] ? arch_stack_walk+0xf3/0x140 [ 88.876462][ T1799] ? stack_trace_save+0x113/0x1c0 [ 88.881529][ T1799] ? stack_trace_snprint+0xf0/0xf0 [ 88.886573][ T1799] ? stack_trace_snprint+0xf0/0xf0 [ 88.891621][ T1799] ? selinux_bpf_prog_alloc+0x51/0x140 [ 88.897018][ T1799] ? selinux_bpf_prog_alloc+0x51/0x140 [ 88.902529][ T1799] ? ____kasan_kmalloc+0xed/0x110 [ 88.919246][ T1799] ? ____kasan_kmalloc+0xdb/0x110 [ 88.936560][ T1799] ? __kasan_kmalloc+0x9/0x10 [ 88.946615][ T1799] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 88.955454][ T24] audit: type=1400 audit(1732028197.741:1654): avc: denied { create } for pid=1804 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.977022][ T1799] ? selinux_bpf_prog_alloc+0x51/0x140 [ 88.987831][ T1799] ? security_bpf_prog_alloc+0x62/0x90 [ 89.010516][ T1799] ? __se_sys_bpf+0x9f8c/0x11cb0 [ 89.027549][ T1799] ? __x64_sys_bpf+0x7b/0x90 [ 89.032150][ T1799] ? do_syscall_64+0x34/0x70 [ 89.036517][ T1799] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.052856][ T1799] ? __kasan_kmalloc+0x9/0x10 [ 89.072955][ T1799] __se_sys_bpf+0x107a2/0x11cb0 [ 89.082995][ T1799] ? __kasan_check_write+0x14/0x20 [ 89.096743][ T1799] ? __x64_sys_bpf+0x90/0x90 [ 89.114045][ T24] audit: type=1326 audit(1732028197.903:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 89.146665][ T1799] ? futex_wake+0x630/0x790 [ 89.156566][ T1799] ? do_futex+0x13c5/0x17b0 [ 89.157250][ T24] audit: type=1326 audit(1732028197.943:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 89.161051][ T1799] ? __kasan_check_write+0x14/0x20 [ 89.184631][ T24] audit: type=1326 audit(1732028197.943:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 89.220791][ T1799] ? put_vma+0x8f/0xb0 [ 89.241118][ T1799] ? __handle_speculative_fault+0x10c1/0x1e90 [ 89.247441][ T24] audit: type=1326 audit(1732028197.943:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 89.255438][ T1815] request_module fs-gfs2 succeeded, but still no fs? [ 89.277473][ T1799] ? futex_exit_release+0x1e0/0x1e0 [ 89.282503][ T1799] ? __kasan_check_write+0x14/0x20 [ 89.298244][ T24] audit: type=1326 audit(1732028197.943:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 89.304646][ T1799] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 89.354064][ T1799] ? __se_sys_futex+0x355/0x470 [ 89.362993][ T1799] ? __fget_files+0x31e/0x380 [ 89.374776][ T1823] FAULT_INJECTION: forcing a failure. [ 89.374776][ T1823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.393550][ T1799] ? fpu__clear_all+0x20/0x20 [ 89.398080][ T1799] ? __kasan_check_read+0x11/0x20 [ 89.403199][ T1799] __x64_sys_bpf+0x7b/0x90 [ 89.413322][ T1799] do_syscall_64+0x34/0x70 [ 89.417568][ T1799] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.426116][ T1823] CPU: 0 PID: 1823 Comm: syz.4.422 Not tainted 5.10.226-syzkaller-00001-g6a01908517df #0 [ 89.435732][ T1823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.445620][ T1823] Call Trace: [ 89.448757][ T1823] dump_stack_lvl+0x1e2/0x24b [ 89.453272][ T1823] ? bfq_pos_tree_add_move+0x43b/0x43b [ 89.458564][ T1823] dump_stack+0x15/0x17 [ 89.462559][ T1823] should_fail+0x3c6/0x510 [ 89.466817][ T1823] should_fail_usercopy+0x1a/0x20 [ 89.471667][ T1823] _copy_from_user+0x20/0xd0 [ 89.476450][ T1823] do_sys_poll+0x263/0x1330 [ 89.480768][ T1823] ? arch_stack_walk+0xf3/0x140 [ 89.482608][ T1799] RIP: 0033:0x7f35b658a759 [ 89.485453][ T1823] ? terminate_walk+0x407/0x4f0 [ 89.485465][ T1823] ? stack_trace_snprint+0xf0/0xf0 [ 89.485484][ T1823] ? poll_select_finish+0x7b0/0x7b0 [ 89.491974][ T1799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.494390][ T1823] ? __kasan_check_write+0x14/0x20 [ 89.494403][ T1823] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 89.494415][ T1823] ? kmem_cache_free+0xa9/0x1e0 [ 89.494443][ T1823] ? proc_fail_nth_read+0x210/0x210 [ 89.503115][ T1799] RSP: 002b:00007f35b5203038 EFLAGS: 00000246 [ 89.504377][ T1823] ? security_file_permission+0x86/0xb0 [ 89.504399][ T1823] ? rw_verify_area+0x1c3/0x360 [ 89.545416][ T1799] ORIG_RAX: 0000000000000141 [ 89.549857][ T1823] ? preempt_count_add+0x92/0x1a0 [ 89.549885][ T1823] ? sigprocmask+0x280/0x280 [ 89.573976][ T1823] __se_sys_ppoll+0x29c/0x330 [ 89.578471][ T1823] ? __x64_sys_ppoll+0xd0/0xd0 [ 89.583074][ T1823] ? __ia32_sys_read+0x90/0x90 [ 89.587678][ T1823] __x64_sys_ppoll+0xbf/0xd0 [ 89.592109][ T1823] do_syscall_64+0x34/0x70 [ 89.596358][ T1823] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.602094][ T1823] RIP: 0033:0x7fcd62147759 [ 89.606337][ T1823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.625777][ T1823] RSP: 002b:00007fcd60dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 89.634016][ T1823] RAX: ffffffffffffffda RBX: 00007fcd622fef80 RCX: 00007fcd62147759 [ 89.641827][ T1823] RDX: 0000000020000300 RSI: 0000000000000025 RDI: 0000000020000d40 [ 89.649657][ T1823] RBP: 00007fcd60dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.657454][ T1823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.665261][ T1823] R13: 0000000000000000 R14: 00007fcd622fef80 R15: 00007fff3f3049b8 [ 89.677875][ T1799] RAX: ffffffffffffffda RBX: 00007f35b6741f80 RCX: 00007f35b658a759 [ 89.685837][ T1799] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 89.693834][ T1799] RBP: 00007f35b65fd75e R08: 0000000000000000 R09: 0000000000000000 [ 89.702421][ T1799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.710382][ T1799] R13: 0000000000000000 R14: 00007f35b6741f80 R15: 00007fff8f2cb7c8 [ 89.718344][ T1799] ---[ end trace 5c4b95477636bcfd ]--- [ 89.874797][ T1835] syz.4.425[1835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.874860][ T1835] syz.4.425[1835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.086384][ T15] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 90.214710][ T310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 90.447375][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.458206][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.467809][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 90.476699][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.484960][ T15] usb 2-1: config 0 descriptor?? [ 90.646075][ T1863] FAULT_INJECTION: forcing a failure. [ 90.646075][ T1863] name failslab, interval 1, probability 0, space 0, times 0 [ 90.659059][ T1863] CPU: 1 PID: 1863 Comm: syz.4.435 Tainted: G W 5.10.226-syzkaller-00001-g6a01908517df #0 [ 90.670063][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.679950][ T1863] Call Trace: [ 90.683084][ T1863] dump_stack_lvl+0x1e2/0x24b [ 90.687592][ T1863] ? panic+0x812/0x812 [ 90.691502][ T1863] ? bfq_pos_tree_add_move+0x43b/0x43b [ 90.696793][ T1863] ? preempt_schedule_irq+0xe7/0x140 [ 90.701916][ T1863] ? preempt_schedule_notrace+0x140/0x140 [ 90.707473][ T1863] ? native_set_ldt+0x360/0x360 [ 90.712266][ T1863] dump_stack+0x15/0x17 [ 90.716247][ T1863] should_fail+0x3c6/0x510 [ 90.720507][ T1863] ? do_sys_poll+0x2de/0x1330 [ 90.725018][ T1863] __should_failslab+0xa4/0xe0 [ 90.729615][ T1863] should_failslab+0x9/0x20 [ 90.733952][ T1863] __kmalloc+0x60/0x330 [ 90.737944][ T1863] ? __kasan_check_write+0x14/0x20 [ 90.742909][ T1863] do_sys_poll+0x2de/0x1330 [ 90.747236][ T1863] ? __kasan_check_write+0x14/0x20 [ 90.752177][ T1863] ? __switch_to+0x5f6/0x1240 [ 90.756695][ T1863] ? poll_select_finish+0x7b0/0x7b0 [ 90.761724][ T1863] ? compat_start_thread+0x80/0x80 [ 90.766690][ T1863] ? irqentry_exit+0x4f/0x60 [ 90.771101][ T1863] ? sysvec_reschedule_ipi+0x83/0x160 [ 90.776308][ T1863] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 90.781779][ T1863] ? sigprocmask+0x280/0x280 [ 90.782595][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.786202][ T1863] __se_sys_ppoll+0x29c/0x330 [ 90.796997][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.801397][ T1863] ? __x64_sys_ppoll+0xd0/0xd0 [ 90.810982][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.815544][ T1863] ? switch_fpu_return+0x1e4/0x3c0 [ 90.828178][ T310] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 90.833075][ T1863] ? __ia32_sys_read+0x90/0x90 [ 90.841948][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.846520][ T1863] ? fpu__clear_all+0x20/0x20 [ 90.846533][ T1863] __x64_sys_ppoll+0xbf/0xd0 [ 90.846551][ T1863] do_syscall_64+0x34/0x70 [ 90.857921][ T310] usb 1-1: config 0 descriptor?? [ 90.858853][ T1863] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 90.878028][ T1863] RIP: 0033:0x7fcd62147759 [ 90.882280][ T1863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.901719][ T1863] RSP: 002b:00007fcd60dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 90.909962][ T1863] RAX: ffffffffffffffda RBX: 00007fcd622fef80 RCX: 00007fcd62147759 [ 90.917771][ T1863] RDX: 0000000020000300 RSI: 0000000000000025 RDI: 0000000020000d40 [ 90.925590][ T1863] RBP: 00007fcd60dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 90.933389][ T1863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.941203][ T1863] R13: 0000000000000000 R14: 00007fcd622fef80 R15: 00007fff3f3049b8 [ 91.175336][ T15] logitech-hidpp-device 0003:046D:C086.000E: unknown main item tag 0x2 [ 91.188340][ T15] logitech-hidpp-device 0003:046D:C086.000E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 91.369331][ T25] usb 2-1: USB disconnect, device number 14 [ 91.381207][ T310] gt683r_led 0003:1770:FF00.000F: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 91.683476][ T25] usb 1-1: USB disconnect, device number 11 [ 91.691445][ T311] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 91.701391][ T311] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 92.435044][ T1895] tipc: Started in network mode [ 92.444323][ T1895] tipc: Own node identity ac14140f, cluster identity 4711 [ 92.462295][ T1895] tipc: New replicast peer: 255.255.255.5 [ 92.477836][ T1895] tipc: Enabled bearer , priority 10 [ 93.079224][ T1908] input: syz0 as /devices/virtual/input/input7 [ 93.090736][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 93.090749][ T24] audit: type=1400 audit(1732028201.983:1735): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=758 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.122127][ T24] audit: type=1400 audit(1732028201.983:1736): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=758 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.166384][ T24] audit: type=1400 audit(1732028201.983:1737): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=758 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.204333][ T1911] overlayfs: statfs failed on './file0' [ 93.350080][ T1922] device ip6gre1 entered promiscuous mode [ 93.546075][ T24] audit: type=1400 audit(1732028202.230:1738): avc: denied { create } for pid=1916 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.570882][ T1924] input: syz0 as /devices/virtual/input/input8 [ 93.577167][ T742] tipc: 32-bit node address hash set to f1414ac [ 93.593168][ T1926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 93.621396][ T5] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 93.669719][ T24] audit: type=1400 audit(1732028202.569:1739): avc: denied { ioctl } for pid=1931 comm="syz.5.455" path="socket:[23261]" dev="sockfs" ino=23261 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.971717][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.982763][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.992671][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 94.001755][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.005096][ T742] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 94.019272][ T5] usb 1-1: config 0 descriptor?? [ 94.037140][ T1937] device syzkaller0 entered promiscuous mode [ 94.068760][ T24] audit: type=1326 audit(1732028202.980:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 94.092063][ T24] audit: type=1326 audit(1732028202.980:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 94.117171][ T24] audit: type=1326 audit(1732028202.980:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 94.148664][ T24] audit: type=1326 audit(1732028202.980:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 94.174002][ T24] audit: type=1326 audit(1732028203.042:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd62147759 code=0x7ffc0000 [ 94.474211][ T1913] udc-core: couldn't find an available UDC or it's busy [ 94.487380][ T1913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.567125][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.573995][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.586999][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.593821][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.600756][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.607646][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.614456][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.621316][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.628447][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.635418][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.642236][ T5] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 94.650138][ T5] lg-g15 0003:046D:C222.0010: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 94.663660][ T742] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 94.674070][ T742] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.687006][ T742] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.696235][ T742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.706211][ T742] usb 6-1: config 0 descriptor?? [ 94.761714][ T1953] ªªªªªª: renamed from vlan0 [ 94.762564][ T5] usb 1-1: USB disconnect, device number 12 [ 95.015481][ T742] usb 6-1: string descriptor 0 read error: -71 [ 95.021705][ T742] hub 6-1:0.0: bad descriptor, ignoring hub [ 95.028579][ T742] hub: probe of 6-1:0.0 failed with error -5 [ 95.035678][ T742] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 95.083574][ T742] usb 6-1: USB disconnect, device number 3 [ 95.502739][ T310] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 95.795624][ T742] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 96.176434][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.191389][ T310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.204400][ T310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.293873][ T742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.317435][ T742] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 96.360402][ T742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.434937][ T742] usb 4-1: config 0 descriptor?? [ 96.720199][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 96.735067][ T1994] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.834241][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.844531][ T310] usb 5-1: config 0 descriptor?? [ 96.891780][ T1977] udc-core: couldn't find an available UDC or it's busy [ 96.898705][ T1977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.956022][ T2003] fuse: Unknown parameter 'mask' [ 97.029519][ T2013] syz.3.469 (2013): /proc/1976/oom_adj is deprecated, please use /proc/1976/oom_score_adj instead. [ 97.155721][ T1458] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 97.180174][ T742] elo 0003:04E7:0030.0011: item fetching failed at offset 5/7 [ 97.189967][ T742] elo 0003:04E7:0030.0011: parse failed [ 97.195427][ T742] elo: probe of 0003:04E7:0030.0011 failed with error -22 [ 97.391002][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.398491][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.405889][ T1458] usb 2-1: Using ep0 maxpacket: 16 [ 97.411040][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.418294][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.425575][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.433050][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.440500][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.447744][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.455359][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.462638][ T310] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 97.470095][ T310] plantronics 0003:047F:FFFF.0012: unbalanced collection at end of report description [ 97.479757][ T310] plantronics 0003:047F:FFFF.0012: parse failed [ 97.485967][ T310] plantronics: probe of 0003:047F:FFFF.0012 failed with error -22 [ 97.526466][ T1458] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 97.594896][ T742] usb 5-1: USB disconnect, device number 13 [ 97.683125][ T1458] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 97.692146][ T1458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.700103][ T1458] usb 2-1: Product: syz [ 97.704136][ T1458] usb 2-1: Manufacturer: syz [ 97.708709][ T1458] usb 2-1: SerialNumber: syz [ 97.714244][ T1458] usb 2-1: config 0 descriptor?? [ 97.752534][ T1458] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 97.760385][ T1458] usb 2-1: Detected FT232RL [ 97.957428][ T1458] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 97.976817][ T1458] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 97.996783][ T1458] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 98.007958][ T1458] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.026358][ T1458] usb 2-1: USB disconnect, device number 15 [ 98.066074][ T1458] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.080316][ T1458] ftdi_sio 2-1:0.0: device disconnected [ 98.125492][ T24] kauditd_printk_skb: 191 callbacks suppressed [ 98.125505][ T24] audit: type=1400 audit(1732028207.145:1936): avc: denied { getopt } for pid=2041 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.457643][ T5] usb 4-1: USB disconnect, device number 14 [ 99.080366][ T24] audit: type=1400 audit(1732028208.114:1937): avc: denied { mounton } for pid=2056 comm="syz.4.492" path="/dev/net/tun" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 99.126493][ T2061] incfs: Error accessing: ./file0. [ 99.131495][ T2061] incfs: mount failed -2 [ 99.194057][ T24] audit: type=1400 audit(1732028208.145:1938): avc: denied { listen } for pid=2055 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.389607][ T24] audit: type=1400 audit(1732028208.369:1939): avc: denied { getopt } for pid=2055 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.416427][ T24] audit: type=1326 audit(1732028208.451:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 99.487308][ T24] audit: type=1326 audit(1732028208.451:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 100.160662][ T24] audit: type=1326 audit(1732028208.451:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 100.184759][ T24] audit: type=1326 audit(1732028208.451:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 100.224625][ T24] audit: type=1326 audit(1732028208.451:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 100.248369][ T24] audit: type=1326 audit(1732028208.451:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 100.271467][ T310] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 100.346902][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 100.617014][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 100.624434][ T1458] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.656306][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.675885][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.684590][ T310] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.862675][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 100.941228][ T310] usb 6-1: string descriptor 0 read error: -22 [ 100.947373][ T310] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.956478][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.990487][ T1458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.002946][ T310] cdc_ncm 6-1:1.0: bind() failure [ 101.008572][ T1458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.018468][ T1458] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.031209][ T1458] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.039996][ T1458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.048345][ T1458] usb 5-1: config 0 descriptor?? [ 101.167651][ T5] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 101.176683][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.184532][ T5] usb 4-1: Product: syz [ 101.188512][ T5] usb 4-1: Manufacturer: syz [ 101.192892][ T5] usb 4-1: SerialNumber: syz [ 101.204175][ T5] usb 4-1: config 0 descriptor?? [ 101.246950][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 101.258684][ T5] usb 4-1: Detected FT232H [ 101.553323][ T1458] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 101.570377][ T1458] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 101.607056][ T1458] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 101.929006][ T311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.960907][ T1458] usb 5-1: USB disconnect, device number 14 [ 102.170977][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 102.377815][ T311] usb 2-1: config 1 interface 0 has no altsetting 0 [ 102.436950][ T1458] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.458873][ T310] usb 6-1: USB disconnect, device number 4 [ 102.535557][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=0033, bcdDevice= 0.40 [ 102.544627][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.573098][ T311] usb 2-1: Product: ꭟ绦Β䣹ᡄꑑå˜â¬±â»‘髺äˆäƒ¦í™™ã¹”æ³å®°ì´‘㚶éŠâª¬æ®‚鰔⥂佽曌倶ꨓ輔㎅౛廅햰籣ⷑ颜皹ᇊá³ï»¼ï«‘脞踓᤭稹㎽뾠⽡撗䌩æ²ê眯ヒ㕳ຯê“낳肖译ꤤä¼î‡¿î°’⻲凶 [ 102.604277][ T311] usb 2-1: Manufacturer: ÐŽ [ 102.609534][ T311] usb 2-1: SerialNumber: 㾆䓥䪺僽껴ⲳ뾱뵗斛歋鿧쌺î²è¼žç€›è„觅划䭘僂柶æ‡é€£ê¢éš–对硙ھ挨नራꫀï¿ä´à­¯ïš•Øšì±žî“åµä€” [ 102.683067][ T1458] usb 5-1: Using ep0 maxpacket: 8 [ 103.566854][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 103.573627][ T1458] usb 5-1: config 1 interface 0 has no altsetting 0 [ 103.580037][ T310] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 103.600099][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 103.619469][ T5] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 103.626436][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.635365][ T5] usb 4-1: USB disconnect, device number 15 [ 103.642511][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 103.652002][ T5] ftdi_sio 4-1:0.0: device disconnected [ 103.737647][ T1458] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 103.746658][ T1458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.754424][ T1458] usb 5-1: Product: syz [ 103.758490][ T1458] usb 5-1: Manufacturer: syz [ 103.762794][ T1458] usb 5-1: SerialNumber: syz [ 103.934897][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.945777][ T310] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.954639][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.963234][ T310] usb 6-1: config 0 descriptor?? [ 104.013717][ T5] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 104.220984][ T1458] usbhid 5-1:1.0: can't add hid device: -71 [ 104.226966][ T1458] usbhid: probe of 5-1:1.0 failed with error -71 [ 104.239889][ T1458] usb 5-1: USB disconnect, device number 15 [ 104.250475][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 104.368970][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.379802][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.389670][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.399401][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 104.409231][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 104.438567][ T310] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 104.456801][ T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input10 [ 104.506998][ T311] usbhid 2-1:1.0: can't add hid device: -71 [ 104.507080][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.512845][ T311] usbhid: probe of 2-1:1.0 failed with error -71 [ 104.540881][ T311] usb 2-1: USB disconnect, device number 16 [ 104.554420][ T310] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 104.568933][ T2150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.515'. [ 104.570943][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.587257][ T5] usb 4-1: SerialNumber: syz [ 104.597055][ T2150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.515'. [ 104.605859][ T2138] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.626190][ T5] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 104.634280][ T5] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 104.644401][ T2150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.515'. [ 104.760761][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 104.760776][ T24] audit: type=1400 audit(1732028213.876:1972): avc: denied { map } for pid=2160 comm="syz.1.518" path="socket:[23647]" dev="sockfs" ino=23647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.828065][ T310] usb 4-1: USB disconnect, device number 16 [ 104.859745][ T24] audit: type=1400 audit(1732028213.876:1973): avc: denied { ioctl } for pid=2160 comm="syz.1.518" path="socket:[23650]" dev="sockfs" ino=23650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.059600][ T5] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 105.127883][ T2168] device wireguard0 entered promiscuous mode [ 105.523663][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.537781][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.552846][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 105.567289][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.575187][ T24] audit: type=1326 audit(1732028214.696:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.599035][ T24] audit: type=1326 audit(1732028214.696:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.622541][ T5] usb 5-1: config 0 descriptor?? [ 105.657576][ T24] audit: type=1326 audit(1732028214.696:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.680996][ T24] audit: type=1326 audit(1732028214.696:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.704448][ T24] audit: type=1326 audit(1732028214.696:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.727841][ T24] audit: type=1326 audit(1732028214.696:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.751875][ T24] audit: type=1326 audit(1732028214.696:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.776957][ T24] audit: type=1326 audit(1732028214.696:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 105.803802][ T2185] mmap: syz.1.524 (2185) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.918621][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 106.097610][ T5] logitech-hidpp-device 0003:046D:C086.0015: unknown main item tag 0x2 [ 106.106691][ T5] logitech-hidpp-device 0003:046D:C086.0015: hidraw1: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 106.155753][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 106.274590][ T310] usb 4-1: config 0 has no interfaces? [ 106.295188][ T742] usb 5-1: USB disconnect, device number 16 [ 106.432511][ T310] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 106.441497][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.449560][ T310] usb 4-1: Product: syz [ 106.453738][ T310] usb 4-1: Manufacturer: syz [ 106.458238][ T310] usb 4-1: SerialNumber: syz [ 106.485568][ T310] usb 4-1: config 0 descriptor?? [ 106.511790][ T5] usb 6-1: USB disconnect, device number 5 [ 106.784312][ T5] usb 4-1: USB disconnect, device number 17 [ 107.632224][ T2242] device wireguard0 entered promiscuous mode [ 107.757235][ T2241] device wireguard0 entered promiscuous mode [ 108.321287][ T742] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 108.677515][ T742] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.698476][ T742] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 108.787629][ T742] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 108.796875][ T742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.105539][ T2269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 109.301303][ T742] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 109.316779][ T742] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input11 [ 109.326702][ T742] input: failed to attach handler kbd to device input11, error: -5 [ 109.391091][ T742] usb 1-1: USB disconnect, device number 13 [ 109.718823][ T24] kauditd_printk_skb: 121 callbacks suppressed [ 109.718837][ T24] audit: type=1400 audit(1732028218.902:2103): avc: denied { mounton } for pid=2286 comm="syz.3.556" path="/94/bus" dev="incremental-fs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.826080][ T5] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 109.845917][ T24] audit: type=1326 audit(1732028219.033:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 109.882411][ T24] audit: type=1326 audit(1732028219.064:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.084064][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 110.097882][ T24] audit: type=1400 audit(1732028219.276:2106): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.145582][ T24] audit: type=1326 audit(1732028219.296:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.158792][ T2299] syz.5.560[2299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.170213][ T24] audit: type=1326 audit(1732028219.316:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.208106][ T2299] syz.5.560[2299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.208451][ T24] audit: type=1326 audit(1732028219.356:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.246929][ T24] audit: type=1326 audit(1732028219.387:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.270972][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.270988][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.271012][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 110.271025][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.271906][ T5] usb 5-1: config 0 descriptor?? [ 110.273449][ T24] audit: type=1326 audit(1732028219.427:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 110.273470][ T24] audit: type=1326 audit(1732028219.447:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd6214735b code=0x7ffc0000 [ 111.759025][ T2322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'. [ 111.791270][ T2327] udc-core: couldn't find an available UDC or it's busy [ 111.808227][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 111.814026][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.828764][ T5] usb 5-1: USB disconnect, device number 17 [ 111.832126][ T2327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.845287][ T2323] kvm: pic: non byte write [ 112.341216][ T290] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 112.581798][ T290] usb 6-1: Using ep0 maxpacket: 32 [ 112.700931][ T290] usb 6-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.721459][ T290] usb 6-1: config 1 interface 0 has no altsetting 0 [ 112.879509][ T290] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.40 [ 112.888362][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.897132][ T290] usb 6-1: Product: syz [ 112.901279][ T290] usb 6-1: Manufacturer: Ð¥ [ 112.905764][ T290] usb 6-1: SerialNumber: syz [ 113.074796][ T2357] device wireguard0 entered promiscuous mode [ 113.908356][ T2371] tipc: Started in network mode [ 113.913431][ T2371] tipc: Own node identity ac14140f, cluster identity 4711 [ 113.921071][ T2371] tipc: New replicast peer: 255.255.255.255 [ 113.927423][ T2371] tipc: Enabled bearer , priority 10 [ 114.546996][ T610] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.557964][ T1458] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 114.568892][ T2379] 9pnet: Insufficient options for proto=fd [ 114.575898][ T2379] fuse: Unknown parameter 'ÿ0x0000000000000009' [ 114.854884][ T1458] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 114.881562][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 114.881586][ T24] audit: type=1326 audit(1732028224.105:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 114.913171][ T24] audit: type=1326 audit(1732028224.135:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 114.937437][ T290] usbhid 6-1:1.0: can't add hid device: -71 [ 114.943696][ T290] usbhid: probe of 6-1:1.0 failed with error -71 [ 114.953347][ T290] usb 6-1: USB disconnect, device number 6 [ 114.959207][ T24] audit: type=1326 audit(1732028224.175:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 114.964171][ T1458] usb 5-1: config 0 has no interfaces? [ 114.988641][ T24] audit: type=1326 audit(1732028224.175:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.013913][ T24] audit: type=1326 audit(1732028224.175:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.043506][ T25] tipc: 32-bit node address hash set to f1414ac [ 115.070933][ T24] audit: type=1326 audit(1732028224.175:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.098025][ T24] audit: type=1326 audit(1732028224.175:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.098045][ T24] audit: type=1326 audit(1732028224.215:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.098063][ T24] audit: type=1326 audit(1732028224.235:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.098082][ T24] audit: type=1326 audit(1732028224.246:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2390 comm="syz.3.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 115.133080][ T1458] usb 5-1: config 0 has no interfaces? [ 115.162823][ T610] usb 2-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 115.210381][ T2395] syz.3.589[2395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.210474][ T2395] syz.3.589[2395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.221804][ T610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.240634][ T610] usb 2-1: Product: syz [ 115.244699][ T610] usb 2-1: Manufacturer: syz [ 115.249065][ T610] usb 2-1: SerialNumber: syz [ 115.260665][ T610] usb 2-1: config 0 descriptor?? [ 115.281958][ T1458] usb 5-1: config 0 has no interfaces? [ 115.302598][ T610] smsc75xx v1.0.0 [ 115.306155][ T610] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.316015][ T610] smsc75xx: probe of 2-1:0.0 failed with error -22 [ 115.351492][ T290] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.371353][ T1458] usb 5-1: config 0 has no interfaces? [ 115.450907][ T1458] usb 5-1: config 0 has no interfaces? [ 115.505382][ T2377] udc-core: couldn't find an available UDC or it's busy [ 115.512247][ T2377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.519898][ T610] usb 2-1: USB disconnect, device number 17 [ 115.550164][ T1458] usb 5-1: config 0 has no interfaces? [ 115.639551][ T1458] usb 5-1: config 0 has no interfaces? [ 115.709136][ T290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.720147][ T290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.729741][ T290] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.738546][ T290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.738850][ T1458] usb 5-1: config 0 has no interfaces? [ 115.751987][ T1458] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 115.758920][ T290] usb 6-1: config 0 descriptor?? [ 115.761115][ T1458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.778826][ T1458] usb 5-1: config 0 descriptor?? [ 115.909443][ T2404] tipc: Started in network mode [ 115.914668][ T2404] tipc: Own node identity ac14140f, cluster identity 4711 [ 115.922502][ T2404] tipc: New replicast peer: 255.255.255.255 [ 115.928508][ T2404] tipc: Enabled bearer , priority 10 [ 116.028773][ T610] usb 5-1: USB disconnect, device number 18 [ 116.569853][ T2387] syz.5.587[2387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.570986][ T2387] syz.5.587[2387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.702803][ T290] usb 6-1: string descriptor 0 read error: -71 [ 116.922164][ T290] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 116.930768][ T290] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 118.970405][ T2429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 119.047928][ T290] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 119.170136][ T290] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 119.177491][ T290] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 119.190173][ T290] usb 6-1: USB disconnect, device number 7 [ 119.221472][ T311] tipc: 32-bit node address hash set to f1414ac [ 119.659130][ T2447] tipc: Enabling of bearer rejected, already enabled [ 119.821040][ T2445] mmap: syz.4.604 (2445): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 119.876059][ T24] kauditd_printk_skb: 100 callbacks suppressed [ 119.876074][ T24] audit: type=1326 audit(1732028229.134:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 119.944616][ T24] audit: type=1326 audit(1732028229.134:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 119.997950][ T24] audit: type=1326 audit(1732028229.164:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 120.072166][ T24] audit: type=1326 audit(1732028229.164:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 120.363006][ T24] audit: type=1326 audit(1732028229.164:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 120.705877][ T24] audit: type=1326 audit(1732028229.164:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 120.883916][ T24] audit: type=1326 audit(1732028229.164:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 121.007805][ T24] audit: type=1326 audit(1732028229.164:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 121.105562][ T24] audit: type=1326 audit(1732028229.164:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 121.128767][ T24] audit: type=1326 audit(1732028229.164:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 122.406799][ T2496] device wireguard0 entered promiscuous mode [ 123.896429][ T2520] FAULT_INJECTION: forcing a failure. [ 123.896429][ T2520] name failslab, interval 1, probability 0, space 0, times 0 [ 123.937128][ T2520] CPU: 1 PID: 2520 Comm: syz.0.625 Tainted: G W 5.10.226-syzkaller-00001-g6a01908517df #0 [ 123.948147][ T2520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.958153][ T2520] Call Trace: [ 123.961303][ T2520] dump_stack_lvl+0x1e2/0x24b [ 123.965887][ T2520] ? panic+0x812/0x812 [ 123.969790][ T2520] ? bfq_pos_tree_add_move+0x43b/0x43b [ 123.975083][ T2520] dump_stack+0x15/0x17 [ 123.979075][ T2520] should_fail+0x3c6/0x510 [ 123.983331][ T2520] ? fuse_dev_alloc_install+0x56/0x2f0 [ 123.988630][ T2520] __should_failslab+0xa4/0xe0 [ 123.993222][ T2520] should_failslab+0x9/0x20 [ 123.997561][ T2520] kmem_cache_alloc_trace+0x3a/0x2e0 [ 124.002687][ T2520] fuse_dev_alloc_install+0x56/0x2f0 [ 124.007806][ T2520] fuse_fill_super_common+0x43b/0x1200 [ 124.013101][ T2520] ? fuse_fill_super_submount+0xd40/0xd40 [ 124.018657][ T2520] ? __kasan_check_write+0x14/0x20 [ 124.023676][ T2520] ? fuse_conn_init+0x73f/0x920 [ 124.028288][ T2520] fuse_fill_super+0x219/0x550 [ 124.032887][ T2520] get_tree_nodev+0xb2/0x160 [ 124.037309][ T2520] ? fuse_reconfigure+0xb0/0xb0 [ 124.041999][ T2520] fuse_get_tree+0x8f/0xd0 [ 124.046255][ T2520] vfs_get_tree+0x88/0x290 [ 124.050504][ T2520] do_new_mount+0x2ba/0xb30 [ 124.054850][ T2520] ? do_move_mount_old+0x160/0x160 [ 124.059789][ T2520] ? security_capable+0x87/0xb0 [ 124.064476][ T2520] ? ns_capable+0x89/0xe0 [ 124.068646][ T2520] path_mount+0x56f/0xcb0 [ 124.072813][ T2520] __se_sys_mount+0x2c4/0x3b0 [ 124.077326][ T2520] ? __x64_sys_mount+0xd0/0xd0 [ 124.081925][ T2520] __x64_sys_mount+0xbf/0xd0 [ 124.086350][ T2520] do_syscall_64+0x34/0x70 [ 124.090610][ T2520] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.096330][ T2520] RIP: 0033:0x7f21510a0759 [ 124.100598][ T2520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.120036][ T2520] RSP: 002b:00007f214fd19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.128270][ T2520] RAX: ffffffffffffffda RBX: 00007f2151257f80 RCX: 00007f21510a0759 [ 124.136078][ T2520] RDX: 0000000020000140 RSI: 0000000020002540 RDI: 0000000000000000 [ 124.143893][ T2520] RBP: 00007f214fd19090 R08: 0000000020002380 R09: 0000000000000000 [ 124.151706][ T2520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.159513][ T2520] R13: 0000000000000000 R14: 00007f2151257f80 R15: 00007ffd27da5cd8 [ 124.667242][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.681566][ T2549] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.696585][ T2549] device bridge_slave_0 entered promiscuous mode [ 124.713498][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.720873][ T2549] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.728628][ T2549] device bridge_slave_1 entered promiscuous mode [ 124.793052][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.799962][ T2549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.807041][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.813809][ T2549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.839551][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.849553][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.882500][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.913670][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.926080][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.932961][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.950759][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.964001][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.970884][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.002295][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.017540][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.040039][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.077369][ T2549] device veth0_vlan entered promiscuous mode [ 125.086953][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.098975][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.111752][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.138021][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.152610][ T2549] device veth1_macvtap entered promiscuous mode [ 125.172460][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.190848][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.603421][ T49] device bridge_slave_1 left promiscuous mode [ 125.632957][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.723082][ T49] device bridge_slave_0 left promiscuous mode [ 125.793857][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.897842][ T49] device veth1_macvtap left promiscuous mode [ 126.290431][ T2570] FAULT_INJECTION: forcing a failure. [ 126.290431][ T2570] name failslab, interval 1, probability 0, space 0, times 0 [ 126.333213][ T2570] CPU: 1 PID: 2570 Comm: syz.0.641 Tainted: G W 5.10.226-syzkaller-00001-g6a01908517df #0 [ 126.344230][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.354120][ T2570] Call Trace: [ 126.357251][ T2570] dump_stack_lvl+0x1e2/0x24b [ 126.361760][ T2570] ? panic+0x812/0x812 [ 126.365663][ T2570] ? bfq_pos_tree_add_move+0x43b/0x43b [ 126.370965][ T2570] dump_stack+0x15/0x17 [ 126.374959][ T2570] should_fail+0x3c6/0x510 [ 126.379210][ T2570] ? fuse_dev_alloc_install+0x9f/0x2f0 [ 126.384501][ T2570] __should_failslab+0xa4/0xe0 [ 126.389114][ T2570] should_failslab+0x9/0x20 [ 126.393447][ T2570] kmem_cache_alloc_trace+0x3a/0x2e0 [ 126.398754][ T2570] ? fuse_dev_alloc_install+0x56/0x2f0 [ 126.404035][ T2570] fuse_dev_alloc_install+0x9f/0x2f0 [ 126.409249][ T2570] fuse_fill_super_common+0x43b/0x1200 [ 126.414545][ T2570] ? fuse_fill_super_submount+0xd40/0xd40 [ 126.420094][ T2570] ? __kasan_check_write+0x14/0x20 [ 126.425049][ T2570] ? fuse_conn_init+0x73f/0x920 [ 126.429726][ T2570] fuse_fill_super+0x219/0x550 [ 126.434329][ T2570] get_tree_nodev+0xb2/0x160 [ 126.438752][ T2570] ? fuse_reconfigure+0xb0/0xb0 [ 126.443438][ T2570] fuse_get_tree+0x8f/0xd0 [ 126.447690][ T2570] vfs_get_tree+0x88/0x290 [ 126.451942][ T2570] do_new_mount+0x2ba/0xb30 [ 126.456284][ T2570] ? do_move_mount_old+0x160/0x160 [ 126.461228][ T2570] ? security_capable+0x87/0xb0 [ 126.465913][ T2570] ? ns_capable+0x89/0xe0 [ 126.470091][ T2570] path_mount+0x56f/0xcb0 [ 126.474249][ T2570] __se_sys_mount+0x2c4/0x3b0 [ 126.478763][ T2570] ? __x64_sys_mount+0xd0/0xd0 [ 126.483360][ T2570] __x64_sys_mount+0xbf/0xd0 [ 126.487785][ T2570] do_syscall_64+0x34/0x70 [ 126.492042][ T2570] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 126.497764][ T2570] RIP: 0033:0x7f21510a0759 [ 126.502015][ T2570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.521462][ T2570] RSP: 002b:00007f214fd19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.529706][ T2570] RAX: ffffffffffffffda RBX: 00007f2151257f80 RCX: 00007f21510a0759 [ 126.537519][ T2570] RDX: 0000000020000140 RSI: 0000000020002540 RDI: 0000000000000000 [ 126.545334][ T2570] RBP: 00007f214fd19090 R08: 0000000020002380 R09: 0000000000000000 [ 126.553145][ T2570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.560952][ T2570] R13: 0000000000000000 R14: 00007f2151257f80 R15: 00007ffd27da5cd8 [ 126.642799][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 126.642814][ T24] audit: type=1326 audit(1732028235.922:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 126.683455][ T24] audit: type=1326 audit(1732028235.952:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 126.725943][ T24] audit: type=1326 audit(1732028235.952:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 126.749680][ T24] audit: type=1326 audit(1732028235.952:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 126.774671][ T24] audit: type=1326 audit(1732028235.952:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 127.067264][ T24] audit: type=1326 audit(1732028235.952:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 127.095694][ T24] audit: type=1326 audit(1732028235.952:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 127.119069][ T24] audit: type=1326 audit(1732028235.952:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 127.142873][ T24] audit: type=1326 audit(1732028235.952:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 127.314371][ T24] audit: type=1326 audit(1732028236.594:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 127.363520][ T2595] xt_hashlimit: size too large, truncated to 1048576 [ 127.683832][ T15] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 127.713700][ T20] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 127.956680][ T2609] FAULT_INJECTION: forcing a failure. [ 127.956680][ T2609] name failslab, interval 1, probability 0, space 0, times 0 [ 127.982933][ T2609] CPU: 1 PID: 2609 Comm: syz.1.654 Tainted: G W 5.10.226-syzkaller-00001-g6a01908517df #0 [ 127.993951][ T2609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.003847][ T2609] Call Trace: [ 128.006974][ T2609] dump_stack_lvl+0x1e2/0x24b [ 128.011484][ T2609] ? panic+0x812/0x812 [ 128.015390][ T2609] ? bfq_pos_tree_add_move+0x43b/0x43b [ 128.020687][ T2609] dump_stack+0x15/0x17 [ 128.024674][ T2609] should_fail+0x3c6/0x510 [ 128.028931][ T2609] ? fuse_dev_alloc_install+0x9f/0x2f0 [ 128.034228][ T2609] __should_failslab+0xa4/0xe0 [ 128.038912][ T2609] should_failslab+0x9/0x20 [ 128.043253][ T2609] kmem_cache_alloc_trace+0x3a/0x2e0 [ 128.048372][ T2609] ? fuse_dev_alloc_install+0x56/0x2f0 [ 128.053671][ T2609] fuse_dev_alloc_install+0x9f/0x2f0 [ 128.058962][ T2609] fuse_fill_super_common+0x43b/0x1200 [ 128.064264][ T2609] ? fuse_fill_super_submount+0xd40/0xd40 [ 128.069808][ T2609] ? __kasan_check_write+0x14/0x20 [ 128.074763][ T2609] ? fuse_conn_init+0x73f/0x920 [ 128.079443][ T2609] fuse_fill_super+0x219/0x550 [ 128.084040][ T2609] get_tree_nodev+0xb2/0x160 [ 128.088470][ T2609] ? fuse_reconfigure+0xb0/0xb0 [ 128.093151][ T2609] fuse_get_tree+0x8f/0xd0 [ 128.097409][ T2609] vfs_get_tree+0x88/0x290 [ 128.101659][ T2609] do_new_mount+0x2ba/0xb30 [ 128.105996][ T2609] ? do_move_mount_old+0x160/0x160 [ 128.110944][ T2609] ? security_capable+0x87/0xb0 [ 128.115629][ T2609] ? ns_capable+0x89/0xe0 [ 128.119807][ T2609] path_mount+0x56f/0xcb0 [ 128.123965][ T2609] __se_sys_mount+0x2c4/0x3b0 [ 128.128478][ T2609] ? __x64_sys_mount+0xd0/0xd0 [ 128.133081][ T2609] __x64_sys_mount+0xbf/0xd0 [ 128.137504][ T2609] do_syscall_64+0x34/0x70 [ 128.141757][ T2609] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 128.147490][ T2609] RIP: 0033:0x7f35b658a759 [ 128.151732][ T2609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.171194][ T2609] RSP: 002b:00007f35b5203038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.179416][ T2609] RAX: ffffffffffffffda RBX: 00007f35b6741f80 RCX: 00007f35b658a759 [ 128.187225][ T2609] RDX: 0000000020000140 RSI: 0000000020002540 RDI: 0000000000000000 [ 128.195039][ T2609] RBP: 00007f35b5203090 R08: 0000000020002380 R09: 0000000000000000 [ 128.202846][ T2609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.210658][ T2609] R13: 0000000000000000 R14: 00007f35b6741f80 R15: 00007fff8f2cb7c8 [ 128.252517][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.272027][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.291745][ T15] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.292042][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.310889][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.324920][ T15] usb 4-1: config 0 descriptor?? [ 128.328290][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.339426][ T20] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 128.339440][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.343224][ T20] usb 6-1: config 0 descriptor?? [ 128.898836][ T2620] tipc: Enabling of bearer rejected, already enabled [ 129.045376][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.052558][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.059307][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.067652][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.074705][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.113238][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.120345][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.127501][ T20] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 129.135057][ T20] sony 0003:054C:024B.0017: report_id 0 is invalid [ 129.148748][ T20] sony 0003:054C:024B.0017: item 0 1 1 8 parsing failed [ 129.158020][ T20] sony 0003:054C:024B.0017: parse failed [ 129.164677][ T20] sony: probe of 0003:054C:024B.0017 failed with error -22 [ 129.217995][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 129.224450][ T530] Bluetooth: hci0: sending frame failed (-49) [ 129.263392][ T20] usb 6-1: USB disconnect, device number 8 [ 129.299339][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 129.305181][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.312271][ T15] usb 4-1: USB disconnect, device number 18 [ 129.747947][ T20] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 129.964602][ T2643] device wireguard0 entered promiscuous mode [ 130.336328][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.402613][ T2654] device wireguard0 entered promiscuous mode [ 130.506559][ T20] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 130.518438][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.526545][ T20] usb 2-1: Product: syz [ 130.530553][ T20] usb 2-1: Manufacturer: syz [ 130.534970][ T20] usb 2-1: SerialNumber: syz [ 130.544417][ T20] usb 2-1: config 0 descriptor?? [ 130.688208][ T2659] device pim6reg1 entered promiscuous mode [ 130.749695][ T2661] netlink: 'syz.0.669': attribute type 12 has an invalid length. [ 130.761794][ T2661] IPv6: sit1: Disabled Multicast RS [ 130.815031][ T2502] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 130.900448][ T2665] device wireguard0 entered promiscuous mode [ 131.174483][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.192869][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.216696][ T2502] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.247885][ T2502] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 131.269838][ T2502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.283838][ T714] Bluetooth: hci0: command 0x1001 tx timeout [ 131.288512][ T2502] usb 4-1: config 0 descriptor?? [ 131.292827][ T530] Bluetooth: hci0: sending frame failed (-49) [ 131.343852][ T20] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 131.352276][ T20] usb 2-1: USB disconnect, device number 18 [ 131.753810][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 131.753825][ T24] audit: type=1326 audit(1732028241.047:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.783599][ T24] audit: type=1400 audit(1732028241.047:2377): avc: denied { setattr } for pid=2656 comm="syz.3.667" name="pfkey" dev="proc" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 131.807301][ T24] audit: type=1326 audit(1732028241.077:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.830782][ T24] audit: type=1326 audit(1732028241.097:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.861365][ T24] audit: type=1326 audit(1732028241.097:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.884671][ T24] audit: type=1326 audit(1732028241.097:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.907910][ T24] audit: type=1326 audit(1732028241.097:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.933593][ T24] audit: type=1326 audit(1732028241.097:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.956898][ T24] audit: type=1326 audit(1732028241.097:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 131.986024][ T24] audit: type=1326 audit(1732028241.107:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 132.149223][ T2691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.678'. [ 132.171779][ T2502] usbhid 4-1:0.0: can't add hid device: -71 [ 132.177599][ T2502] usbhid: probe of 4-1:0.0 failed with error -71 [ 132.184822][ T2502] usb 4-1: USB disconnect, device number 19 [ 132.214526][ T2696] device ip6gre1 entered promiscuous mode [ 134.144524][ T714] Bluetooth: hci0: command 0x1009 tx timeout [ 135.201808][ T2742] input: syz0 as /devices/virtual/input/input12 [ 135.211373][ T15] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 135.453951][ T15] usb 6-1: Using ep0 maxpacket: 8 [ 135.609404][ T15] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 10 [ 135.620700][ T15] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024 [ 135.631785][ T15] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 135.640596][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.050638][ T2751] netlink: 'syz.3.693': attribute type 3 has an invalid length. [ 136.058291][ T2752] netlink: 'syz.3.693': attribute type 3 has an invalid length. [ 136.066560][ T15] usb 6-1: string descriptor 0 read error: -71 [ 136.072820][ T15] hub 6-1:32.0: USB hub found [ 136.144349][ T15] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 136.193275][ T15] usb 6-1: USB disconnect, device number 9 [ 136.401273][ T2764] futex_wake_op: syz.5.697 tries to shift op by -1; fix this program [ 136.698549][ T2502] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 136.950625][ T2502] usb 6-1: Using ep0 maxpacket: 32 [ 137.069884][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 137.069901][ T24] audit: type=1326 audit(1732028246.472:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.113276][ T24] audit: type=1326 audit(1732028246.472:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.136616][ T24] audit: type=1326 audit(1732028246.472:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.160690][ T24] audit: type=1326 audit(1732028246.472:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.183846][ T2502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 137.195604][ T24] audit: type=1326 audit(1732028246.472:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.219104][ T24] audit: type=1326 audit(1732028246.472:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.242798][ T24] audit: type=1326 audit(1732028246.472:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.266252][ T24] audit: type=1326 audit(1732028246.472:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.290688][ T24] audit: type=1326 audit(1732028246.472:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.314003][ T24] audit: type=1326 audit(1732028246.472:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2768 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 137.314307][ T2502] usb 6-1: config 151 has an invalid interface number: 193 but max is 0 [ 137.350441][ T2502] usb 6-1: config 151 has no interface number 0 [ 137.356561][ T2502] usb 6-1: config 151 interface 193 has no altsetting 0 [ 138.299633][ T2502] usb 6-1: New USB device found, idVendor=0499, idProduct=101c, bcdDevice=7c.77 [ 138.308499][ T2502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.328654][ T2502] usb 6-1: Product: syz [ 138.332835][ T2502] usb 6-1: Manufacturer: syz [ 138.337257][ T2502] usb 6-1: SerialNumber: syz [ 139.111181][ T2766] udc-core: couldn't find an available UDC or it's busy [ 139.267524][ T2766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.408729][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.428848][ T2502] snd-usb-audio: probe of 6-1:151.193 failed with error -2 [ 139.447044][ T2502] usb 6-1: USB disconnect, device number 10 [ 139.641975][ T5] usb 7-1: Using ep0 maxpacket: 8 [ 139.797840][ T5] usb 7-1: unable to get BOS descriptor or descriptor too short [ 139.875629][ T5] usb 7-1: config 0 has an invalid interface number: 128 but max is 1 [ 139.883700][ T5] usb 7-1: config 0 has an invalid interface number: 96 but max is 1 [ 139.891590][ T5] usb 7-1: config 0 has no interface number 0 [ 139.897466][ T5] usb 7-1: config 0 has no interface number 1 [ 139.903320][ T5] usb 7-1: config 0 interface 128 has no altsetting 0 [ 139.910175][ T5] usb 7-1: config 0 interface 96 has no altsetting 0 [ 139.989321][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.265388][ T5] usb 7-1: New USB device found, idVendor=d4e0, idProduct=2e46, bcdDevice=c2.ab [ 140.274375][ T5] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.282487][ T5] usb 7-1: Product: syz [ 140.286734][ T5] usb 7-1: SerialNumber: syz [ 140.291866][ T5] usb 7-1: config 0 descriptor?? [ 141.032705][ T5] usb-storage 7-1:0.128: USB Mass Storage device detected [ 141.125777][ T5] usb 7-1: USB disconnect, device number 2 [ 141.422808][ T2846] device syzkaller0 entered promiscuous mode [ 141.445435][ T2844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 141.543261][ T2854] 9pnet: Insufficient options for proto=fd [ 141.939011][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.185931][ T24] kauditd_printk_skb: 157 callbacks suppressed [ 142.185946][ T24] audit: type=1326 audit(1732028251.732:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.217559][ T24] audit: type=1326 audit(1732028251.732:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.241054][ T24] audit: type=1326 audit(1732028251.742:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.264933][ T24] audit: type=1326 audit(1732028251.742:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.288413][ T24] audit: type=1326 audit(1732028251.742:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.316821][ T24] audit: type=1326 audit(1732028251.742:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.350458][ T24] audit: type=1326 audit(1732028251.742:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.358231][ T2878] netlink: 296 bytes leftover after parsing attributes in process `syz.0.730'. [ 142.383042][ T1037] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 142.383482][ T24] audit: type=1326 audit(1732028251.742:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.414927][ T24] audit: type=1326 audit(1732028251.742:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.441453][ T24] audit: type=1326 audit(1732028251.742:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 142.721690][ T1037] usb 7-1: Using ep0 maxpacket: 32 [ 142.867646][ T1037] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.878439][ T1037] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.955088][ T15] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 143.013601][ T1037] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.022534][ T1037] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.030665][ T1037] usb 7-1: Product: syz [ 143.034657][ T1037] usb 7-1: Manufacturer: syz [ 143.072573][ T1037] hub 7-1:4.0: USB hub found [ 143.285995][ T1037] hub 7-1:4.0: 2 ports detected [ 143.305377][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.316600][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.326593][ T15] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 143.335717][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.347745][ T15] usb 4-1: config 0 descriptor?? [ 143.375774][ T1377] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.446495][ T2907] fuse: Bad value for 'fd' [ 143.512126][ T2922] netlink: 296 bytes leftover after parsing attributes in process `syz.0.742'. [ 143.703518][ T1037] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 143.709773][ T1037] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 144.193077][ T1037] usb 7-1: USB disconnect, device number 3 [ 144.399047][ T15] hid-steam 0003:28DE:1142.0018: item fetching failed at offset 4/5 [ 144.407137][ T15] hid-steam 0003:28DE:1142.0018: steam_probe:parse of hid interface failed [ 144.416518][ T15] hid-steam: probe of 0003:28DE:1142.0018 failed with error -22 [ 144.516648][ T2950] fuse: Bad value for 'fd' [ 144.538210][ T2955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2955 comm=syz.5.751 [ 144.569176][ T1377] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.577180][ T742] usb 4-1: USB disconnect, device number 20 [ 144.699327][ T2502] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 145.167546][ T2502] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.178539][ T2502] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 145.191686][ T2502] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 145.489781][ T2502] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.498711][ T2502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.506522][ T2502] usb 1-1: Product: syz [ 145.513960][ T2502] usb 1-1: Manufacturer: syz [ 145.518625][ T2502] usb 1-1: SerialNumber: syz [ 145.626976][ T2981] ip6t_rpfilter: unknown options [ 145.634054][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 145.774098][ T2943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.780945][ T2943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.931014][ T2984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.165004][ T2991] fuse: Bad value for 'fd' [ 146.594728][ T310] Bluetooth: hci0: command 0x1003 tx timeout [ 146.600589][ T2685] Bluetooth: hci0: sending frame failed (-49) [ 146.762873][ T2943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.769663][ T2943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.854502][ T3002] tipc: Enabling of bearer rejected, already enabled [ 147.093751][ T2502] cdc_ncm 1-1:1.0: bind() failure [ 147.123163][ T2502] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 147.142712][ T2502] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 147.154776][ T2502] usb 1-1: USB disconnect, device number 14 [ 147.557527][ T24] kauditd_printk_skb: 120 callbacks suppressed [ 147.557541][ T24] audit: type=1326 audit(1732028257.245:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.587807][ T24] audit: type=1326 audit(1732028257.245:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.611691][ T24] audit: type=1326 audit(1732028257.245:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.635006][ T1037] Bluetooth: hci1: command 0x1003 tx timeout [ 147.640965][ T2685] Bluetooth: hci1: sending frame failed (-49) [ 147.647254][ T24] audit: type=1326 audit(1732028257.245:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.670846][ T24] audit: type=1326 audit(1732028257.245:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.694565][ T24] audit: type=1326 audit(1732028257.245:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.726715][ T24] audit: type=1326 audit(1732028257.266:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.791324][ T24] audit: type=1326 audit(1732028257.276:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.839681][ T24] audit: type=1326 audit(1732028257.276:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 147.892873][ T24] audit: type=1326 audit(1732028257.276:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3012 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 148.387216][ T15] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 148.396944][ T2502] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.632688][ T1037] Bluetooth: hci0: command 0x1001 tx timeout [ 148.638656][ T2685] Bluetooth: hci0: sending frame failed (-49) [ 148.652522][ T15] usb 2-1: device descriptor read/64, error -71 [ 148.809097][ T2502] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 148.819449][ T2502] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.897596][ T2502] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.906464][ T2502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.914561][ T2502] usb 1-1: SerialNumber: syz [ 149.064310][ T15] usb 2-1: device descriptor read/64, error -71 [ 149.202338][ T2502] usb 1-1: 0:2 : does not exist [ 149.207048][ T2502] usb 1-1: unit 5 not found! [ 149.224747][ T2502] usb 1-1: USB disconnect, device number 15 [ 149.307134][ T3033] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 149.349005][ T15] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 149.584742][ T1037] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.623890][ T15] usb 2-1: device descriptor read/64, error -71 [ 149.653492][ T2502] Bluetooth: hci1: command 0x1001 tx timeout [ 149.659356][ T2685] Bluetooth: hci1: sending frame failed (-49) [ 149.708720][ T3039] tipc: Enabling of bearer rejected, already enabled [ 150.046548][ T1037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.056979][ T1037] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.069421][ T1037] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.080270][ T1037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.087452][ T1037] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 150.097262][ T1037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.145115][ T1037] usb 4-1: config 0 descriptor?? [ 150.331272][ T15] usb 2-1: device descriptor read/64, error -71 [ 150.459322][ T15] usb usb2-port1: attempt power cycle [ 150.478790][ T1037] usbhid 4-1:0.0: can't add hid device: -71 [ 150.484657][ T1037] usbhid: probe of 4-1:0.0 failed with error -71 [ 150.491745][ T1037] usb 4-1: USB disconnect, device number 21 [ 150.666624][ T3051] netlink: 96 bytes leftover after parsing attributes in process `syz.0.780'. [ 150.675456][ T324] Bluetooth: hci0: command 0x1009 tx timeout [ 150.862405][ T15] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.970452][ T15] usb 2-1: device descriptor read/8, error -71 [ 151.403312][ T15] usb 2-1: device descriptor read/8, error -71 [ 151.700187][ T310] Bluetooth: hci1: command 0x1009 tx timeout [ 152.111555][ T3074] sock: sock_set_timeout: `syz.3.786' (pid 3074) tries to set negative timeout [ 152.377967][ T310] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 152.732911][ T310] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 152.744024][ T310] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 152.755069][ T310] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 152.763932][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.791851][ T3074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.882818][ T3077] tipc: Started in network mode [ 152.887523][ T3077] tipc: Own node identity ac14140f, cluster identity 4711 [ 152.894590][ T3077] tipc: New replicast peer: 255.255.255.255 [ 152.900701][ T3077] tipc: Enabled bearer , priority 10 [ 152.919371][ T3079] overlayfs: failed to resolve './file0': -2 [ 153.067769][ T310] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 153.075924][ T310] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input13 [ 153.086313][ T310] usb 4-1: USB disconnect, device number 22 [ 153.225366][ T1037] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 153.531160][ T1037] usb 2-1: device descriptor read/64, error -71 [ 153.639582][ T310] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 153.742151][ T24] kauditd_printk_skb: 127 callbacks suppressed [ 153.742165][ T24] audit: type=1400 audit(1732028263.531:2949): avc: denied { read } for pid=3085 comm="syz.0.790" name="usbmon9" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.771539][ T24] audit: type=1400 audit(1732028263.531:2950): avc: denied { open } for pid=3085 comm="syz.0.790" path="/dev/usbmon9" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.795432][ T24] audit: type=1400 audit(1732028263.561:2951): avc: denied { ioctl } for pid=3085 comm="syz.0.790" path="/dev/usbmon9" dev="devtmpfs" ino=177 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.935537][ T1037] usb 2-1: device descriptor read/64, error -71 [ 154.024297][ T1458] tipc: 32-bit node address hash set to f1414ac [ 154.063719][ T310] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 154.074772][ T310] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 154.085798][ T310] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 154.094629][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.132764][ T3083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.201697][ T1037] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 154.211674][ T310] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 154.219954][ T310] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 154.468182][ T1037] usb 2-1: device descriptor read/64, error -71 [ 154.635044][ T24] audit: type=1326 audit(1732028264.433:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.664057][ T24] audit: type=1326 audit(1732028264.433:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.692937][ T24] audit: type=1326 audit(1732028264.433:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.716414][ T24] audit: type=1326 audit(1732028264.433:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.741420][ T24] audit: type=1326 audit(1732028264.433:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.765121][ T24] audit: type=1326 audit(1732028264.433:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.788346][ T24] audit: type=1326 audit(1732028264.433:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3093 comm="syz.6.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 154.897364][ T1037] usb 2-1: device descriptor read/64, error -71 [ 155.031184][ T1037] usb usb2-port1: attempt power cycle [ 155.138301][ T310] usb 4-1: USB disconnect, device number 23 [ 155.144109][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 155.158894][ T3105] fuse: Bad value for 'user_id' [ 155.475180][ T1037] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 155.554299][ T310] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 155.663049][ T1037] usb 2-1: device descriptor read/8, error -71 [ 155.820905][ T310] usb 4-1: device descriptor read/64, error -71 [ 155.929548][ T1037] usb 2-1: device descriptor read/8, error -71 [ 156.027625][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.205579][ T310] usb 4-1: device descriptor read/64, error -71 [ 156.467497][ T310] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 156.748618][ T310] usb 4-1: device descriptor read/64, error -71 [ 157.126545][ T310] usb 4-1: device descriptor read/64, error -71 [ 157.243051][ T310] usb usb4-port1: attempt power cycle [ 157.660388][ T324] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 157.660540][ T310] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 157.845087][ T310] usb 4-1: device descriptor read/8, error -71 [ 157.893693][ T324] usb 7-1: Using ep0 maxpacket: 16 [ 157.990734][ T1458] Bluetooth: hci0: command 0x1003 tx timeout [ 157.996685][ T530] Bluetooth: hci0: sending frame failed (-49) [ 158.126613][ T310] usb 4-1: device descriptor read/8, error -71 [ 158.165485][ T324] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 158.174396][ T324] usb 7-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 158.182384][ T324] usb 7-1: Product: syz [ 158.186360][ T324] usb 7-1: Manufacturer: syz [ 158.190728][ T324] usb 7-1: SerialNumber: syz [ 158.195839][ T324] usb 7-1: config 0 descriptor?? [ 158.234354][ T324] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 158.241924][ T324] usb 7-1: Detected FT-X [ 158.437830][ T324] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 158.690815][ T324] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 158.698443][ T324] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 158.707838][ T324] usb 7-1: USB disconnect, device number 4 [ 158.714222][ T324] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.723536][ T324] ftdi_sio 7-1:0.0: device disconnected [ 159.245442][ T3158] overlayfs: missing 'lowerdir' [ 159.311102][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 159.311118][ T24] audit: type=1326 audit(1732028269.225:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.364732][ T24] audit: type=1326 audit(1732028269.225:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.397248][ T24] audit: type=1326 audit(1732028269.225:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.421041][ T24] audit: type=1326 audit(1732028269.225:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.444431][ T24] audit: type=1326 audit(1732028269.225:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.467924][ T24] audit: type=1326 audit(1732028269.225:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.497804][ T24] audit: type=1326 audit(1732028269.225:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.526942][ T24] audit: type=1326 audit(1732028269.225:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.550374][ T24] audit: type=1326 audit(1732028269.225:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.573723][ T24] audit: type=1326 audit(1732028269.225:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3170 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 159.638554][ T3174] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'. [ 159.927679][ T310] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 160.005712][ T15] Bluetooth: hci0: command 0x1001 tx timeout [ 160.011618][ T530] Bluetooth: hci0: sending frame failed (-49) [ 160.143640][ T3194] device wireguard0 entered promiscuous mode [ 160.278992][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 160.302963][ T310] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 160.327204][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.354391][ T310] usb 4-1: config 0 descriptor?? [ 160.717925][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 160.723741][ T310] usbhid: probe of 4-1:0.0 failed with error -71 [ 160.730985][ T310] usb 4-1: USB disconnect, device number 28 [ 160.852172][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'. [ 161.434909][ T3218] futex_wake_op: syz.6.827 tries to shift op by -1; fix this program [ 161.587518][ T714] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 161.794203][ T3225] overlayfs: failed to resolve './file0': -2 [ 162.027292][ T714] usb 1-1: device descriptor read/64, error -71 [ 162.037195][ T310] Bluetooth: hci0: command 0x1009 tx timeout [ 162.066227][ T15] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 162.301152][ T15] usb 7-1: Using ep0 maxpacket: 16 [ 162.408857][ T714] usb 1-1: device descriptor read/64, error -71 [ 162.418791][ T15] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.428737][ T15] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.590265][ T15] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.599160][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.607094][ T15] usb 7-1: Product: syz [ 162.611061][ T15] usb 7-1: Manufacturer: syz [ 162.615534][ T15] usb 7-1: SerialNumber: syz [ 162.674221][ T714] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 162.966688][ T714] usb 1-1: device descriptor read/64, error -71 [ 163.123499][ T1037] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 163.126542][ T15] usb 7-1: USB disconnect, device number 5 [ 163.139409][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.348850][ T714] usb 1-1: device descriptor read/64, error -71 [ 163.466546][ T714] usb usb1-port1: attempt power cycle [ 163.486163][ T1037] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.496953][ T1037] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.505815][ T1037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.514665][ T1037] usb 2-1: config 0 descriptor?? [ 163.644170][ T3245] device syzkaller0 entered promiscuous mode [ 163.848669][ T15] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 163.868286][ T714] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 163.976667][ T1037] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 163.986336][ T1037] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0019/input/input15 [ 164.035011][ T714] usb 1-1: device descriptor read/8, error -71 [ 164.071404][ T1037] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 164.084068][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 164.201855][ T15] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 164.209802][ T15] usb 4-1: config 0 has no interface number 0 [ 164.215714][ T15] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.225310][ T15] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 164.280266][ T714] usb 1-1: device descriptor read/8, error -71 [ 164.449838][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 164.654651][ T15] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 164.663763][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.671559][ T15] usb 4-1: Product: syz [ 164.675594][ T15] usb 4-1: Manufacturer: syz [ 164.679978][ T15] usb 4-1: SerialNumber: syz [ 164.688825][ T15] usb 4-1: config 0 descriptor?? [ 164.816731][ T3255] ªªªªªª: renamed from vlan0 [ 164.975496][ T15] usb 4-1: USB disconnect, device number 29 [ 165.128495][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 165.128510][ T24] audit: type=1400 audit(1732028275.175:3078): avc: denied { read write } for pid=3258 comm="syz.0.837" name="uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.135548][ T1037] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 165.165923][ T24] audit: type=1400 audit(1732028275.175:3079): avc: denied { open } for pid=3258 comm="syz.0.837" path="/dev/uhid" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.166407][ T1037] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 165.196573][ T1037] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 165.204650][ T1037] hid-generic 0000:3000000:0000.001A: hidraw1: HID v0.00 Device [sy] on syz0 [ 165.492687][ T24] audit: type=1326 audit(1732028275.541:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.528732][ T24] audit: type=1326 audit(1732028275.541:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.552394][ T24] audit: type=1326 audit(1732028275.541:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.586267][ T24] audit: type=1326 audit(1732028275.541:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.633975][ T24] audit: type=1326 audit(1732028275.572:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.657927][ T24] audit: type=1326 audit(1732028275.572:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.681504][ T24] audit: type=1326 audit(1732028275.572:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 165.704824][ T24] audit: type=1326 audit(1732028275.572:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3266 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a28811759 code=0x7ffc0000 [ 166.078939][ T310] usb 2-1: USB disconnect, device number 27 [ 167.600012][ T3297] binder: 3296:3297 ioctl c0306201 0 returned -14 [ 167.621993][ T714] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 167.799626][ T2502] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 167.916859][ T3304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 168.272034][ T2502] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.282791][ T2502] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.292291][ T2502] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 168.301140][ T2502] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.310013][ T2502] usb 7-1: config 0 descriptor?? [ 168.508476][ T714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.519205][ T714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.528746][ T714] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 168.537589][ T714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.549089][ T714] usb 1-1: config 0 descriptor?? [ 168.785617][ T2502] logitech-hidpp-device 0003:046D:C086.001B: unknown main item tag 0x2 [ 168.799167][ T2502] logitech-hidpp-device 0003:046D:C086.001B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.6-1/input0 [ 168.944604][ T3329] xt_TCPMSS: Only works on TCP SYN packets [ 169.067528][ T3330] device wireguard0 entered promiscuous mode [ 169.079265][ T2502] usb 7-1: USB disconnect, device number 6 [ 169.840344][ T714] apple 0003:05AC:0262.001C: unbalanced collection at end of report description [ 169.922059][ T714] apple 0003:05AC:0262.001C: parse failed [ 169.960454][ T714] apple: probe of 0003:05AC:0262.001C failed with error -22 [ 170.261638][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 170.530341][ T2502] Bluetooth: hci0: command 0x1003 tx timeout [ 170.536694][ T530] Bluetooth: hci0: sending frame failed (-49) [ 170.994310][ T714] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 171.149354][ T310] usb 1-1: USB disconnect, device number 20 [ 171.297095][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 171.297119][ T24] audit: type=1326 audit(1732028281.429:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.312147][ T3374] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 171.326826][ T24] audit: type=1326 audit(1732028281.439:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.359844][ T24] audit: type=1326 audit(1732028281.449:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.383240][ T24] audit: type=1326 audit(1732028281.449:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.407124][ T24] audit: type=1326 audit(1732028281.449:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.430509][ T24] audit: type=1326 audit(1732028281.449:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.453782][ T714] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.458658][ T24] audit: type=1326 audit(1732028281.449:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.462532][ T714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 33653, setting to 1024 [ 171.487088][ T24] audit: type=1326 audit(1732028281.449:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.496394][ T714] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 171.519505][ T24] audit: type=1326 audit(1732028281.449:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.553349][ T24] audit: type=1326 audit(1732028281.449:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3373 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 171.685881][ T714] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.694792][ T714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.702580][ T714] usb 4-1: Product: syz [ 171.706551][ T714] usb 4-1: Manufacturer: syz [ 171.710936][ T714] usb 4-1: SerialNumber: syz [ 171.863621][ T310] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 172.120725][ T714] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 172.130433][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 172.585170][ T2502] Bluetooth: hci0: command 0x1001 tx timeout [ 172.591294][ T530] Bluetooth: hci0: sending frame failed (-49) [ 172.937236][ T714] usb 4-1: USB disconnect, device number 30 [ 172.980756][ T310] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 172.990972][ T310] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 173.150524][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'. [ 173.896659][ T310] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 173.906042][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.914937][ T310] usb 1-1: Product: syz [ 173.918933][ T310] usb 1-1: Manufacturer: syz [ 173.924629][ T310] usb 1-1: SerialNumber: syz [ 174.097874][ T3420] device wireguard0 entered promiscuous mode [ 174.730291][ T2502] Bluetooth: hci0: command 0x1009 tx timeout [ 174.752825][ T3436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'. [ 174.821717][ T3439] binder: BINDER_SET_CONTEXT_MGR already set [ 174.827530][ T3439] binder: 3437:3439 ioctl 4018620d 200001c0 returned -16 [ 174.847588][ T3439] udc-core: couldn't find an available UDC or it's busy [ 174.854393][ T3439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.095820][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.890'. [ 175.167976][ T2502] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 175.260673][ T311] usb 1-1: USB disconnect, device number 21 [ 176.338837][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 176.338853][ T24] audit: type=1326 audit(1732028286.421:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21510a0759 code=0x7ffc0000 [ 176.401898][ T3457] input: syz0 as /devices/virtual/input/input16 [ 176.906126][ T3470] device wireguard0 entered promiscuous mode [ 176.951320][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.962521][ T2502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.972524][ T2502] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 176.981425][ T2502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.990016][ T2502] usb 4-1: config 0 descriptor?? [ 177.328071][ T2502] usbhid 4-1:0.0: can't add hid device: -71 [ 177.333879][ T2502] usbhid: probe of 4-1:0.0 failed with error -71 [ 177.341058][ T2502] usb 4-1: USB disconnect, device number 31 [ 177.646839][ T3479] device syzkaller0 entered promiscuous mode [ 177.786428][ T24] audit: type=1326 audit(1732028287.995:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.811387][ T24] audit: type=1326 audit(1732028287.995:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.834894][ T24] audit: type=1326 audit(1732028287.995:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.858165][ T24] audit: type=1326 audit(1732028287.995:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.881569][ T24] audit: type=1326 audit(1732028287.995:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.905520][ T24] audit: type=1326 audit(1732028287.995:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.929022][ T24] audit: type=1326 audit(1732028288.129:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.952240][ T24] audit: type=1326 audit(1732028288.139:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 177.975346][ T24] audit: type=1326 audit(1732028288.139:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b658a759 code=0x7ffc0000 [ 178.337228][ T311] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 178.715194][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 178.861016][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 133, using maximum allowed: 30 [ 178.940363][ T311] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 179.100177][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.180347][ T311] usb 2-1: New USB device found, idVendor=04fc, idProduct=e3d8, bcdDevice=3f.ff [ 179.289530][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.432481][ T311] usb 2-1: config 0 descriptor?? [ 179.712573][ T3509] overlayfs: failed to resolve './file0': -2 [ 179.732901][ T3531] ªªªªªª: renamed from vlan0 [ 179.961097][ T3540] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.087334][ T3551] xt_hashlimit: size too large, truncated to 1048576 [ 180.450222][ T311] hid-generic 0003:04FC:E3D8.001D: unknown main item tag 0x0 [ 180.483799][ T311] hid-generic 0003:04FC:E3D8.001D: unknown main item tag 0x0 [ 180.497211][ T311] hid-generic 0003:04FC:E3D8.001D: unknown main item tag 0x0 [ 180.510744][ T311] hid-generic 0003:04FC:E3D8.001D: unknown main item tag 0x0 [ 180.523120][ T311] hid-generic 0003:04FC:E3D8.001D: unknown main item tag 0x0 [ 180.542154][ T311] hid-generic 0003:04FC:E3D8.001D: hidraw0: USB HID v0.04 Device [HID 04fc:e3d8] on usb-dummy_hcd.1-1/input0 [ 180.613050][ T311] usb 2-1: USB disconnect, device number 28 [ 181.730770][ T1458] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 181.964969][ T1458] usb 6-1: Using ep0 maxpacket: 8 [ 181.979362][ T3586] device pim6reg1 entered promiscuous mode [ 181.987933][ T3586] device dummy0 entered promiscuous mode [ 182.082183][ T1458] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 182.170136][ T1458] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.179227][ T1458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.187472][ T1458] usb 6-1: SerialNumber: syz [ 182.258246][ T1458] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 182.455527][ T1458] usb 6-1: USB disconnect, device number 11 [ 182.482312][ T714] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 182.716959][ T714] usb 2-1: Using ep0 maxpacket: 8 [ 182.833864][ T714] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 10 [ 182.845109][ T714] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024 [ 182.862991][ T714] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 182.876346][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.021470][ T3606] tipc: Enabled bearer , priority 0 [ 183.051139][ T3605] tipc: Resetting bearer [ 183.077277][ T3605] tipc: Disabling bearer [ 183.248625][ T3633] incfs_lookup_dentry err:-5 [ 183.253232][ T3633] incfs: Can't find or create .index dir in ./file0 [ 183.259944][ T3633] incfs: mount failed -5 [ 183.293215][ T714] usb 2-1: string descriptor 0 read error: -71 [ 183.300827][ T714] hub 2-1:32.0: USB hub found [ 183.387804][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 183.712899][ T24] audit: type=1400 audit(1732028293.717:3208): avc: denied { ioctl } for pid=3628 comm="syz.0.947" path="socket:[30975]" dev="sockfs" ino=30975 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 183.904224][ T714] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 184.072592][ T24] audit: type=1400 audit(1732028294.443:3209): avc: denied { write } for pid=3655 comm="syz.5.955" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 184.134703][ T714] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 184.163852][ T24] audit: type=1326 audit(1732028294.525:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.187049][ T714] usb 2-1: device reset changed ep0 maxpacket size! [ 184.194959][ T714] usb 2-1: USB disconnect, device number 29 [ 184.223452][ T24] audit: type=1326 audit(1732028294.525:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.273092][ T24] audit: type=1326 audit(1732028294.525:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.280466][ T3661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.957'. [ 184.319057][ T24] audit: type=1326 audit(1732028294.535:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.335598][ T3661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.957'. [ 184.355797][ T24] audit: type=1326 audit(1732028294.535:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.395319][ T24] audit: type=1326 audit(1732028294.535:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.418944][ T24] audit: type=1326 audit(1732028294.535:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.447757][ T24] audit: type=1326 audit(1732028294.535:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd27b5759 code=0x7ffc0000 [ 184.555402][ T714] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 184.918042][ T714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41407, setting to 64 [ 184.968029][ T3675] netlink: 48 bytes leftover after parsing attributes in process `syz.5.961'. [ 185.085115][ T714] usb 2-1: New USB device found, idVendor=ffac, idProduct=85ff, bcdDevice=16.64 [ 185.093960][ T714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.105875][ T714] usb 2-1: Product: syz [ 185.109898][ T714] usb 2-1: Manufacturer: syz [ 185.115674][ T714] usb 2-1: SerialNumber: syz [ 185.133701][ T714] usb 2-1: config 0 descriptor?? [ 185.223896][ T3694] netlink: 72 bytes leftover after parsing attributes in process `syz.5.967'. [ 185.383328][ T3646] udc-core: couldn't find an available UDC or it's busy [ 185.428300][ T3646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.710393][ T610] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 185.771270][ T714] uvcvideo: Found UVC 0.00 device syz (ffac:85ff) [ 185.777506][ T714] uvcvideo: No valid video chain found. [ 185.784275][ T714] usb 2-1: USB disconnect, device number 30 [ 185.809968][ T3700] device pim6reg1 entered promiscuous mode [ 186.040859][ T3725] syz.0.975[3725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.040919][ T3725] syz.0.975[3725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.059434][ T610] usb 6-1: not running at top speed; connect to a high speed hub [ 186.142740][ T3725] device syzkaller0 entered promiscuous mode [ 186.175812][ T610] usb 6-1: config 5 has an invalid interface number: 148 but max is 0 [ 186.188333][ T610] usb 6-1: config 5 has no interface number 0 [ 186.205740][ T610] usb 6-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4 [ 186.217028][ T610] usb 6-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 186.233872][ T610] usb 6-1: config 5 interface 148 has no altsetting 0 [ 186.480073][ T610] usb 6-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 186.489551][ T610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.063683][ T3744] sched: RT throttling activated [ 188.063740][ T1458] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 190.989357][ T610] usb 6-1: Product: syz [ 190.993352][ T610] usb 6-1: Manufacturer: syz [ 190.997767][ T610] usb 6-1: SerialNumber: syz [ 196.862750][ T1458] usb 2-1: device descriptor read/64, error -110 [ 199.817134][ T610] usb 6-1: can't set config #5, error -110 [ 205.740090][ T1458] usb 2-1: device descriptor read/64, error -32 [ 208.714910][ T1458] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 217.663896][ T1458] usb 2-1: device descriptor read/64, error -32