last executing test programs: 4m50.828633847s ago: executing program 2 (id=897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80004001, 0x4) socket$inet6(0xa, 0x200000000003, 0x87) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ftruncate(r5, 0x12081ff) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) 4m49.949750261s ago: executing program 2 (id=901): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffdfc, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 4m49.93232966s ago: executing program 2 (id=902): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r1, 0x12) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x0, 0x7fffffff, 0x1ff, r1}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6163746976655f6c6f67733d322c6e6f71756f74612c6e6f71756f74612c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c6a71666d743d76667376302c696e6c696e655f78617474722c00a3d783e0bf6d79bc2fa16e7f"], 0x1, 0x551a, &(0x7f0000005a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x1b) 4m49.325145633s ago: executing program 2 (id=907): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000002380)={0x0, 0x0, 0xfffffe47}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x160, 0x4c, 0x1a, 0x0, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xd229f37a77d4c83b}}, @common=@unspec=@connlimit={{0x41}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1, @remote}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x28c, &(0x7f0000000f00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e0000001080002"], 0x38}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x603, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x3, 0x1c, {0x9, 0x21, 0x2, 0xfb, 0x1, {0x22, 0x98d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x80, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xc1, 0x8, 0x4, 0x40, 0x1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2807}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x76}}, {0xca, &(0x7f0000000680)=@string={0xca, 0x3, "f71600cb8f7c2179fd86edcdbf2c3bd81f0f334d183b6e22d800f78d12fc09b30ea2e9edb657b781966ddd9b1b81fcc08073b7b2b0493b9d1b4e705dacc5d6d7ad999eeec5d367cac9dedd20d97c9a2b9104d9718e68bc0fad3cef89f10a63677550fe4b7b966ebdf99a53c918b5de3243b7a2595b39608fa28427084f048294276fc44364c0170a3f111204683a53a73e3f60aa020ce0243f7e4897874ddbeba2fbeaccd5c10ae59623eb2594fecb9910bebd7cd28a4556734e8c05e9316a07bb2531f6178c547f"}}]}) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000341000/0x2000)=nil, &(0x7f0000508000/0x4000)=nil, 0x2000}) 4m45.527998089s ago: executing program 2 (id=926): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x10) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'pids'}]}, 0x6) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) unshare(0x40000400) 4m45.16779353s ago: executing program 2 (id=929): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x573, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0xec, 0x78, 0x10, 0x1410, 0x9022, 0x71a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x561, 0x2, 0x7, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x25, 0xf8, 0xd, 0xff, 0x0, 0x0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xfe}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x8000, 0x8e}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x2, 0x5, "0bf6d0"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x5, 0x4, 0x3, 0x3, 0xef}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xfc}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x2}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x0, "25ae3132ed82"}, @mixer_unit={0x5, 0x24, 0x4, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x673d, 0xbf, "20aa53f9"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x4, 0x6, 0xff}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x7, 0x2, 0x9, 0x17, 0x9, 0xa], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0xb, 0x9, 0x40, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x2d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x156}]}}, {{0x9, 0x5, 0x1a, 0x8, 0x10, 0x8, 0xfc, 0xf7, [@generic={0x68, 0x22, "83513e2178bb2d46fe1a469bf2df26c23d141bee12045e9661e3210f059b4d0d9f0a12999f5dd8a4fdeb1e1e1b8b5b64051d4fd8adf7ed7d38fb4eeae4e29f08480866d387d25ad76d43d926766e499123072b6e2e24dfa82ab1ea02cd2642fd9caff29b3cb8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xff, 0xfb, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x2, 0x9c}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0x69, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xd, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x6, 0xc6, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xfe, 0x6, 0x89, [@generic={0x71, 0x23, "b073a888b15f8315125b896fbb985dc6d260afd598645562b3e41db5157487d93ef6cb81ba7c401553f99f85aeeeab9ef0ecaa6878c2f170506e7f7bd0247ae5b5046f8d3d8eed126a42f8baf9abc34f9e1413ece00aa872e3ebdb35d106ac7d72f7afb3e891aab898363a943b1cbd"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xb9, 0x3, 0x7}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x4e, 0x9, 0x6, [@generic={0xe5, 0x6, "7e4ffb6e5bbb52110f101b66a2987f382ebbaa74ffc10d5a49ac5d984d5b5cd20a116afa43579d4b6dbc77249e7a24a9b087158b1c1f54e7f57a2cad2c1fe1c335a766614545e7183304c161d3b77a997c42f22389d68a6eeb2953f568aa39d4e47336562f4804a629236a3281388d63f69cfb6d9310854e54fa9d7f85aa3098131fc01eb3fe31d2eb43c6aa21e0f6d875513849e531e47e09afa4a83ecec18410a1aea440175466bd973dbe7e4203fddaf2980d568039b9a4ff3fb5c025d5e3ee7ea8681bb09afe6e69c83f7a4fe4d70c05fa3e2cf925f56cb02c639f49071a8e12ee"}]}}]}}, {{0x9, 0x4, 0x63, 0x3, 0xf, 0xe1, 0xf2, 0xd1, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x4, 0x7, 0x1, 0x8a, 0x9}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x4, 0x6, "94158f5fd0"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x2, 0x1}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x8, "1868"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0xc, 0x9, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0x4, 0xe6, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x6, 0xf8}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xe, 0x62}}, {{0x9, 0x5, 0xa, 0x12, 0x400, 0x7, 0xae, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc2, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x6, 0xaa, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x2, 0xb}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x1, 0x9, 0x20, [@generic={0x15, 0x6, "9fe1994eb0c5acf93b5ed0eb9ac105bc48bbda"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xe6b6}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x3, 0x2, 0x1, [@generic={0xa8, 0x7, "f4c667e257225d10d876243853c182a853bd47472fdf75196f7826cc89582f36693ced6b999121e6ffb94667bb928f009b848cc64c6745979b49ce5570f1f31a1eac78f82452a71b25b8cd2f40a4be17384b42d189a1d8b2ca8b5d5eeda22a5c3fe903d011db5a953c74bd3774d84b7ec92f90eba3de59fc70cb4b9b8b37d8b801250bf2b1399c3f598702c7bf1c7852f9cdbda6eb1916b1006beb86a0331cb4e1ea545d1c4d"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0xa, 0x8c, 0x1, [@generic={0xcc, 0x24, "86f363c033548e3d73e3642bb9cdd944e71968718cf08890784cd1dd10aefbaa8852fd6b3379f0df8c8af59957688095024db325cc859c6e08b1e44b428883f908acf8c69b9a7af9fca4c42a534782799bcf4e5dc2e9d585cb5cecc30a1513a4488b55470ad8e4b645d7025e70351ad1d64a42e61abc79008cb95189b5acb357ef0dd4e657fc480efbac903aed96b03cb0fbfde596286611cfde1123da8f92cf784d80ba1754d5cb5c8e43ccba86e7cb06e8e42faee0e7ff0001f5a65059bc7ddc7a4006f752b4371849"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x9, 0x3, 0x5, 0x20, 0x2}, 0x57, &(0x7f0000000680)={0x5, 0xf, 0x57, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e47a01e7f4bf3c1673d8cfbc3907f79a"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "8577f0f95c0c1f633f61188694195b65"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x3, 0x7, 0x49}, @ss_container_id={0x14, 0x10, 0x4, 0x8c, "fb6ddb8b4b1c67fd49a8429213e87307"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x8, 0x0, 0x1000, 0xc}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x418}}, {0x82, &(0x7f0000000700)=@string={0x82, 0x3, "759188beb43c4ca755704fe9548f34ff1d8214d53d5421a2fb05ac79fa19f9f775e136a9a981aab669ed825a1a5032e67606926ff2f79446db7d71d34e75c7d2bae697224fd1b93e4f2c638cf3392808a0e83d49a43ddfc7b76fddab469acc4fb74ec7aa44e808b6b1fb5ad61db48143967b6cd27b5f703228baba119624450b"}}]}) 4m30.372197339s ago: executing program 32 (id=929): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x573, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0xec, 0x78, 0x10, 0x1410, 0x9022, 0x71a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x561, 0x2, 0x7, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x25, 0xf8, 0xd, 0xff, 0x0, 0x0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xfe}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x8000, 0x8e}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x2, 0x5, "0bf6d0"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x5, 0x4, 0x3, 0x3, 0xef}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xfc}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x2}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x0, "25ae3132ed82"}, @mixer_unit={0x5, 0x24, 0x4, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x673d, 0xbf, "20aa53f9"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x4, 0x6, 0xff}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x7, 0x2, 0x9, 0x17, 0x9, 0xa], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0xb, 0x9, 0x40, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0xfa, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x2d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x156}]}}, {{0x9, 0x5, 0x1a, 0x8, 0x10, 0x8, 0xfc, 0xf7, [@generic={0x68, 0x22, "83513e2178bb2d46fe1a469bf2df26c23d141bee12045e9661e3210f059b4d0d9f0a12999f5dd8a4fdeb1e1e1b8b5b64051d4fd8adf7ed7d38fb4eeae4e29f08480866d387d25ad76d43d926766e499123072b6e2e24dfa82ab1ea02cd2642fd9caff29b3cb8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xff, 0xfb, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x2, 0x9c}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0x69, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xd, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x6, 0xc6, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xfe, 0x6, 0x89, [@generic={0x71, 0x23, "b073a888b15f8315125b896fbb985dc6d260afd598645562b3e41db5157487d93ef6cb81ba7c401553f99f85aeeeab9ef0ecaa6878c2f170506e7f7bd0247ae5b5046f8d3d8eed126a42f8baf9abc34f9e1413ece00aa872e3ebdb35d106ac7d72f7afb3e891aab898363a943b1cbd"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xb9, 0x3, 0x7}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x4e, 0x9, 0x6, [@generic={0xe5, 0x6, "7e4ffb6e5bbb52110f101b66a2987f382ebbaa74ffc10d5a49ac5d984d5b5cd20a116afa43579d4b6dbc77249e7a24a9b087158b1c1f54e7f57a2cad2c1fe1c335a766614545e7183304c161d3b77a997c42f22389d68a6eeb2953f568aa39d4e47336562f4804a629236a3281388d63f69cfb6d9310854e54fa9d7f85aa3098131fc01eb3fe31d2eb43c6aa21e0f6d875513849e531e47e09afa4a83ecec18410a1aea440175466bd973dbe7e4203fddaf2980d568039b9a4ff3fb5c025d5e3ee7ea8681bb09afe6e69c83f7a4fe4d70c05fa3e2cf925f56cb02c639f49071a8e12ee"}]}}]}}, {{0x9, 0x4, 0x63, 0x3, 0xf, 0xe1, 0xf2, 0xd1, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x4, 0x7, 0x1, 0x8a, 0x9}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x4, 0x6, "94158f5fd0"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x2, 0x1}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x8, "1868"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0xc, 0x9, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0x4, 0xe6, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x6, 0xf8}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xe, 0x62}}, {{0x9, 0x5, 0xa, 0x12, 0x400, 0x7, 0xae, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc2, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x6, 0xaa, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x2, 0xb}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x1, 0x9, 0x20, [@generic={0x15, 0x6, "9fe1994eb0c5acf93b5ed0eb9ac105bc48bbda"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xe6b6}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x3, 0x2, 0x1, [@generic={0xa8, 0x7, "f4c667e257225d10d876243853c182a853bd47472fdf75196f7826cc89582f36693ced6b999121e6ffb94667bb928f009b848cc64c6745979b49ce5570f1f31a1eac78f82452a71b25b8cd2f40a4be17384b42d189a1d8b2ca8b5d5eeda22a5c3fe903d011db5a953c74bd3774d84b7ec92f90eba3de59fc70cb4b9b8b37d8b801250bf2b1399c3f598702c7bf1c7852f9cdbda6eb1916b1006beb86a0331cb4e1ea545d1c4d"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0xa, 0x8c, 0x1, [@generic={0xcc, 0x24, "86f363c033548e3d73e3642bb9cdd944e71968718cf08890784cd1dd10aefbaa8852fd6b3379f0df8c8af59957688095024db325cc859c6e08b1e44b428883f908acf8c69b9a7af9fca4c42a534782799bcf4e5dc2e9d585cb5cecc30a1513a4488b55470ad8e4b645d7025e70351ad1d64a42e61abc79008cb95189b5acb357ef0dd4e657fc480efbac903aed96b03cb0fbfde596286611cfde1123da8f92cf784d80ba1754d5cb5c8e43ccba86e7cb06e8e42faee0e7ff0001f5a65059bc7ddc7a4006f752b4371849"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x9, 0x3, 0x5, 0x20, 0x2}, 0x57, &(0x7f0000000680)={0x5, 0xf, 0x57, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e47a01e7f4bf3c1673d8cfbc3907f79a"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "8577f0f95c0c1f633f61188694195b65"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x3, 0x7, 0x49}, @ss_container_id={0x14, 0x10, 0x4, 0x8c, "fb6ddb8b4b1c67fd49a8429213e87307"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x8, 0x0, 0x1000, 0xc}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x418}}, {0x82, &(0x7f0000000700)=@string={0x82, 0x3, "759188beb43c4ca755704fe9548f34ff1d8214d53d5421a2fb05ac79fa19f9f775e136a9a981aab669ed825a1a5032e67606926ff2f79446db7d71d34e75c7d2bae697224fd1b93e4f2c638cf3392808a0e83d49a43ddfc7b76fddab469acc4fb74ec7aa44e808b6b1fb5ad61db48143967b6cd27b5f703228baba119624450b"}}]}) 6.190068775s ago: executing program 4 (id=2405): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0xe0, r9, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 4.719575991s ago: executing program 4 (id=2412): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000041c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b942, 0x53) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001300290a000000a17b00000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x2c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in=@broadcast, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) sendmsg$nl_netfilter(r8, &(0x7f0000000340)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0x6, &(0x7f0000000280)={&(0x7f0000000500)={0x138, 0x7, 0x3, 0x5, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x7}}, 0x138}}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3d1a, &(0x7f0000000680)={0x0, 0x0, 0x80}, &(0x7f0000000300)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 4.518234762s ago: executing program 4 (id=2413): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d00000009000109022400010000000009040000010300000009"], 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00'], 0x28}, 0x10d0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xf, &(0x7f0000001140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000", @ANYBLOB="1800000000020000000000000000000018110000", @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x1, 0xf2, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x2, 0x1, 0x5, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "01b1ed"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x5, 0xff}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm_detail={0x70, 0x24, 0x13, 0x5, "068f5bd9847ca70dea9959cf4c7d277b3baf03d97237e3d6d0bb249e020a37eaadc5a3f04c7b5984ada244feae3e203a9c9f6005935e655e6d865f867de12c4a171c9eb23c6e425a5e17e8857ae60a0dabf4e96401a3817c867b0f8db8f0e169af00f5f2f1ca8e7ae72063a9"}, @mdlm_detail={0xb, 0x24, 0x13, 0x6, "7fb573b7df8e00"}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x16, 0x32, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x2, 0xff}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x6, 0x5, 0x8, 0x9}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}]}) capset(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001fc0)={{0x12, 0x1, 0x0, 0x31, 0x94, 0xb0, 0x8, 0x499, 0x1055, 0x1a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x9e, 0x40, 0x2c, 0x0, [@uac_as], [{{0x9, 0x5, 0x8d, 0x2}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) capget(&(0x7f0000000300)={0x20080522}, &(0x7f0000000540)={0x8, 0x8, 0x4, 0x4, 0x5, 0x5}) 3.809295005s ago: executing program 1 (id=2420): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) inotify_init() unlink(&(0x7f0000000440)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x248, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1000}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @alu={0x0, 0x1, 0xd, 0x8, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x80000001, 0x4e, &(0x7f00000003c0)=""/78, 0x41100, 0xf, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r1, r4, 0xffffffffffffffff, r4, r1, r1, r3, r3], &(0x7f0000000480)=[{0x4, 0x3, 0xe, 0xb}, {0x0, 0x2, 0xb, 0x9}, {0x1, 0x4, 0xe, 0xa}, {0x0, 0x3, 0xb, 0x9}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x1, 0x2, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}, 0x1c) fchmod(r5, 0x20) 3.776551295s ago: executing program 1 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0) 3.754927175s ago: executing program 1 (id=2422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@data_err_abort}, {@nodelalloc}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000000000000fb"]) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "c0f02b96"}]}}, 0x0}, 0x0) 3.026625498s ago: executing program 5 (id=2427): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0xe0, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.979138358s ago: executing program 3 (id=2428): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2, &(0x7f00000006c0), 0x2, 0x24e, &(0x7f0000001140)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoLN2SgcyBFEBBVORGyUO+FMsMta2VhorZLKJoid0VLSBBtFsIqaIjaCBguDhRYru5NITFbUzLojmc8HJjOTeW9+b3b3+3ab2Q3QWueTXEzSSTKfpJekONzg7mo5v7+7Ord5JRkOn/ipGLer9isH/c4lGSR5KMlGWeSlbrK8/szOL1uP3ffmUu/e99efnpvpRe7b3dl+fO+9y298dOnB5S+++uFykYvp/+m6pq+Y8L9ukdzyXxT7nyi6TY+Af2LxtQ+/HuX+1iT3jPPfS5nqyXvr+g0bvTzw7l/1ffvHL2+f5ViB6RsOe6P3wMEQaJ0yST9FuZCk2i7LhYXqM/w3nbPly9euvzr/4rWlqy80PVMB09JPth/95MzH547k//tOlX/g9Brl/8nFtW9H23udpkcDzMQd1WqU//nnVu6P/EPryD+0l/xDe8k/tJf8Q3vJP7SX/MMp1jvYGEw8LP/QXvIP7SX/0F6H8w8AtMvwTNN3IANNaXr+AQAAAAAAAAAAAAAAAAAAjlud27xysMyq5mfvJLuPJOlOqt8Z/x5xcuP479mfi1GzPxRVt1qevavmCWr6YAp3Xy+WJ+9703f169fx+Z3N1l+5mgxeT3Kh2z3++itS46Edu/lvjveer1ngXyqO7D/81GzrH/XbWrP1L20ln47mnwuT5p8yt43Xk+ef/uGvWD6hV36teQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABm5vcAAAD//xwUbh8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002080), 0x2cf4cedbf79fe5, 0x832b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) getitimer(0x1, &(0x7f0000000080)) creat(&(0x7f00000002c0)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x0, 0x3}}]}}}]}, 0x5c}}, 0x0) 2.742452159s ago: executing program 4 (id=2430): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106e000000000063013800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@RTM_NEWMDB={0x17, 0x54, 0xa01, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.722556189s ago: executing program 0 (id=2432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0) 2.696120829s ago: executing program 0 (id=2433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000006a0029030000000000000000020000000000000008000a0000000000e50432e1ca81c033a6e1858e05209b78c0f2ca4e639210980f3c507915bb5d920bc46df7851064410758dbf40762f9dbd6ac624393b4a8866a62d90f309686c9c263ad78552e57c5acf313d5cb31933eef74de7787129a1609bc03a30a7d6377dab1b6c786acd0b1f33513ddd9955e9a3a3ec4efbf1f21f0583e9afd19ded51ae7d97753d5bfaf13da73b3b9549bda042f9eb9e8d2028ae59513"], 0x20}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000380), 0x5, 0x40000) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000003c0)=""/107) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) connect$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_io_uring_setup(0x25be, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000001180)={0x1, 0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e"], 0x80}}, 0x0) 2.606589379s ago: executing program 0 (id=2434): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003b40)={&(0x7f0000003b00)=""/24, 0x18}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2}) 2.311023561s ago: executing program 1 (id=2435): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x2) getdents(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r4, 0x0, 0x49) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r6 = io_uring_setup(0x2740, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 2.171293121s ago: executing program 5 (id=2436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000300)=""/187, 0xbb}], 0x1, 0x2, 0x1) 2.162597001s ago: executing program 5 (id=2437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0) 2.148178501s ago: executing program 5 (id=2438): epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000060000000000fcff040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="793d02ceac42e979681f8acf997a8f4745d5e09bd292af41d472d0b199726c765a03262e60b846c479c6798e968c018e16f5734a61e116899f7d34934835175ef53725eb57551853f9cd797b39508c834b2dfb79033bd9eaf33c77c37b79f1754c25d528783168f8345a70903552dd88e577c2d4724c74cf", @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4088c000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1], 0x98}, 0x1, 0x0, 0x0, 0x404c810}, 0x40008c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000b00edffff62010c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./control\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 2.095173381s ago: executing program 3 (id=2439): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0xe0, r9, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.502441884s ago: executing program 4 (id=2440): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) keyctl$get_security(0x11, r2, 0x0, 0x0) kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80081, 0x1fb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getrlimit(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000"], 0x210}}], 0x1, 0x0) 952.298456ms ago: executing program 1 (id=2441): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 902.004046ms ago: executing program 0 (id=2442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230223010209050000001000"]) 724.248417ms ago: executing program 3 (id=2443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0) 647.122817ms ago: executing program 5 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 614.592257ms ago: executing program 0 (id=2445): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 385.218118ms ago: executing program 4 (id=2446): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000000)=0x80) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0xe0, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 368.091658ms ago: executing program 3 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000300)=""/187, 0xbb}], 0x1, 0x2, 0x1) 357.342488ms ago: executing program 3 (id=2448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x0) 356.882948ms ago: executing program 0 (id=2449): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x2, &(0x7f00000006c0), 0x2, 0x24e, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002080), 0x2cf4cedbf79fe5, 0x832b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) getitimer(0x1, &(0x7f0000000080)) creat(&(0x7f00000002c0)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x0, 0x3}}]}}}]}, 0x5c}}, 0x0) 331.647279ms ago: executing program 5 (id=2450): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061106e000000000063013800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@RTM_NEWMDB={0x17, 0x54, 0xa01, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 301.843099ms ago: executing program 3 (id=2451): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) capset(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) socketpair(0xf, 0x3, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (fail_nth: 11) 0s ago: executing program 1 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000240012800b0001006272696467650000"], 0x44}, 0x1, 0xba01, 0x0, 0x20004041}, 0x0) eventfd(0x1a8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) kernel console output (not intermixed with test programs): m="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 330.498547][ T28] audit: type=1326 audit(1732415976.555:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 330.568955][ T28] audit: type=1326 audit(1732415976.555:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 330.846193][ T28] audit: type=1326 audit(1732415976.555:13628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 330.916562][ T28] audit: type=1326 audit(1732415976.555:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 330.981834][ T28] audit: type=1326 audit(1732415976.555:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 331.039131][ T28] audit: type=1326 audit(1732415976.555:13631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 331.094148][ T28] audit: type=1326 audit(1732415976.585:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 331.136958][ T6415] loop5: detected capacity change from 0 to 40427 [ 331.143323][ T28] audit: type=1326 audit(1732415976.585:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 331.170649][ T6415] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 331.183459][ T6415] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 331.224903][ T6415] F2FS-fs (loop5): Found nat_bits in checkpoint [ 331.315208][ T6415] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 331.332299][ T6415] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 331.346467][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.353328][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.438224][ T6415] syz.5.1709: attempt to access beyond end of device [ 331.438224][ T6415] loop5: rw=2049, sector=77824, nr_sectors = 2080 limit=40427 [ 331.467731][ T6415] syz.5.1709: attempt to access beyond end of device [ 331.467731][ T6415] loop5: rw=2049, sector=79904, nr_sectors = 488 limit=40427 [ 331.752374][ T4005] syz-executor: attempt to access beyond end of device [ 331.752374][ T4005] loop5: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 331.766659][ T4005] syz-executor: attempt to access beyond end of device [ 331.766659][ T4005] loop5: rw=2051, sector=57344, nr_sectors = 4096 limit=40427 [ 331.781019][ T4005] F2FS-fs (loop5): Issue discard(6144, 6144, 512) failed, ret: -5 [ 331.781048][ T4005] F2FS-fs (loop5): Issue discard(7168, 7168, 512) failed, ret: -5 [ 332.098311][ T1589] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 333.615986][ T1589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.626916][ T1589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.636505][ T1589] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 333.645684][ T1589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.656843][ T1589] usb 1-1: config 0 descriptor?? [ 334.187900][ T6453] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1720'. [ 334.335942][ T1589] usbhid 1-1:0.0: can't add hid device: -71 [ 334.341757][ T1589] usbhid: probe of 1-1:0.0 failed with error -71 [ 334.348665][ T1589] usb 1-1: USB disconnect, device number 10 [ 334.565911][ T310] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 334.985920][ T310] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.998597][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 335.004942][ T310] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 335.013841][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.022131][ T310] usb 2-1: config 0 descriptor?? [ 335.105887][ T443] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.113324][ T1589] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 335.365937][ T443] usb 4-1: Using ep0 maxpacket: 32 [ 335.606049][ T1589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 335.617848][ T1589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 335.630850][ T1589] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.644555][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 335.644570][ T28] audit: type=1400 audit(1732415981.675:13690): avc: denied { setopt } for pid=6505 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.673460][ T1589] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.674632][ T28] audit: type=1400 audit(1732415981.685:13691): avc: denied { bind } for pid=6505 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.682675][ T1589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.710180][ T1589] usb 1-1: config 0 descriptor?? [ 335.715141][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.725962][ T6497] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 335.755991][ T443] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 335.765348][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.773174][ T443] usb 4-1: Product: syz [ 335.775933][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 335.777170][ T443] usb 4-1: Manufacturer: syz [ 335.782896][ T310] usbhid: probe of 2-1:0.0 failed with error -71 [ 335.787628][ T443] usb 4-1: SerialNumber: syz [ 335.794936][ T310] usb 2-1: USB disconnect, device number 12 [ 335.803541][ T443] usb 4-1: config 0 descriptor?? [ 335.971106][ T28] audit: type=1326 audit(1732415982.105:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f569ab7e41b code=0x7ffc0000 [ 335.994597][ T28] audit: type=1326 audit(1732415982.105:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f569ab7e41b code=0x7ffc0000 [ 336.018599][ T28] audit: type=1326 audit(1732415982.125:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f569abb0905 code=0x7ffc0000 [ 336.194677][ T28] audit: type=1326 audit(1732415982.325:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 336.206750][ T1589] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 336.220401][ T28] audit: type=1326 audit(1732415982.325:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 336.226777][ T1589] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 336.248619][ T28] audit: type=1326 audit(1732415982.325:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 336.257349][ T1589] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 336.279299][ T28] audit: type=1326 audit(1732415982.325:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 336.314716][ T28] audit: type=1326 audit(1732415982.325:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 336.325882][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 336.455924][ T310] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 336.506900][ T1589] usb 1-1: USB disconnect, device number 11 [ 336.575923][ T443] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:57:d7:25:aa:59 [ 336.585631][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 336.593020][ T443] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 336.600394][ T443] usb 4-1: USB disconnect, device number 12 [ 336.705929][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.716959][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.726847][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 336.735701][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.748113][ T24] usb 6-1: config 0 descriptor?? [ 336.825964][ T310] usb 2-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 336.836217][ T310] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 337.005989][ T310] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.015027][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.022818][ T310] usb 2-1: Product: syz [ 337.026832][ T310] usb 2-1: Manufacturer: syz [ 337.031185][ T310] usb 2-1: SerialNumber: syz [ 337.088585][ T6552] xt_TCPMSS: Only works on TCP SYN packets [ 337.094553][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.101427][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.109067][ T310] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 337.229429][ T24] lenovo 0003:17EF:60A3.000E: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 337.348203][ T310] usb 2-1: USB disconnect, device number 13 [ 337.585958][ T5337] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.096092][ T310] usb 6-1: USB disconnect, device number 9 [ 339.522152][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 340.667790][ T6647] loop5: detected capacity change from 0 to 1024 [ 340.697981][ T6647] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.773898][ T4005] EXT4-fs (loop5): unmounting filesystem. [ 341.628874][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 341.754306][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1777'. [ 341.765276][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 341.765310][ T28] audit: type=1326 audit(1732415987.895:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 341.808363][ T28] audit: type=1326 audit(1732415987.895:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 341.831888][ T28] audit: type=1326 audit(1732415987.895:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.421222][ T28] audit: type=1326 audit(1732415987.895:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.474852][ T28] audit: type=1326 audit(1732415987.895:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.498340][ T28] audit: type=1326 audit(1732415987.895:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.521718][ T28] audit: type=1326 audit(1732415987.895:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.545430][ T28] audit: type=1326 audit(1732415987.895:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.569311][ T28] audit: type=1326 audit(1732415987.895:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 342.593354][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1779'. [ 342.594866][ T28] audit: type=1326 audit(1732415987.895:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 343.226816][ T24] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.242035][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 343.248815][ T24] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 343.260438][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.293434][ T24] usb 1-1: config 0 descriptor?? [ 343.294054][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 343.696027][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 343.752848][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 343.767550][ T24] usb 1-1: USB disconnect, device number 12 [ 345.559353][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 345.879523][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 345.895382][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 348.424047][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 348.475919][ T310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 348.509112][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 348.509128][ T28] audit: type=1326 audit(1732415994.645:13782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f569ab7e41b code=0x7ffc0000 [ 348.539206][ T28] audit: type=1326 audit(1732415994.675:13783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f569ab7e41b code=0x7ffc0000 [ 349.477833][ T6783] FAULT_INJECTION: forcing a failure. [ 349.477833][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 349.646079][ T6783] CPU: 1 PID: 6783 Comm: syz.1.1813 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 349.655717][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.665621][ T6783] Call Trace: [ 349.668735][ T6783] [ 349.671512][ T6783] dump_stack_lvl+0x151/0x1b7 [ 349.676024][ T6783] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 349.681320][ T6783] dump_stack+0x15/0x1e [ 349.685309][ T6783] should_fail_ex+0x3d0/0x520 [ 349.689829][ T6783] __should_failslab+0xaf/0xf0 [ 349.694422][ T6783] ? key_alloc+0x34a/0xe70 [ 349.698677][ T6783] should_failslab+0x9/0x20 [ 349.703029][ T6783] __kmem_cache_alloc_node+0x3d/0x2a0 [ 349.708426][ T6783] ? slab_post_alloc_hook+0x72/0x2c0 [ 349.713541][ T6783] ? key_alloc+0x2f8/0xe70 [ 349.717801][ T6783] ? key_alloc+0x34a/0xe70 [ 349.722046][ T6783] __kmalloc_node_track_caller+0xa2/0x1e0 [ 349.727612][ T6783] kmemdup+0x29/0x60 [ 349.731333][ T6783] key_alloc+0x34a/0xe70 [ 349.735415][ T6783] keyring_alloc+0x45/0xb0 [ 349.739668][ T6783] lookup_user_key+0x4c1/0x15c0 [ 349.744357][ T6783] ? lookup_user_key_possessed+0x40/0x40 [ 349.749827][ T6783] ? search_process_keyrings_rcu+0x280/0x280 [ 349.755640][ T6783] ? refcount_dec_and_lock_irqsave+0x151/0x160 [ 349.761631][ T6783] ? copy_user_enhanced_fast_string+0xa/0x40 [ 349.767448][ T6783] __se_sys_add_key+0x2f6/0x480 [ 349.772131][ T6783] ? __this_cpu_preempt_check+0x13/0x20 [ 349.777518][ T6783] ? __x64_sys_add_key+0xd0/0xd0 [ 349.782284][ T6783] __x64_sys_add_key+0xbf/0xd0 [ 349.786884][ T6783] x64_sys_call+0x680/0x9a0 [ 349.791222][ T6783] do_syscall_64+0x3b/0xb0 [ 349.795475][ T6783] ? clear_bhb_loop+0x55/0xb0 [ 349.800147][ T6783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.805873][ T6783] RIP: 0033:0x7fde5977e819 [ 349.810122][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.829571][ T6783] RSP: 002b:00007fde595ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 349.837810][ T6783] RAX: ffffffffffffffda RBX: 00007fde59935fa0 RCX: 00007fde5977e819 [ 349.845619][ T6783] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 349.853434][ T6783] RBP: 00007fde595ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 349.861248][ T6783] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 349.869057][ T6783] R13: 0000000000000000 R14: 00007fde59935fa0 R15: 00007ffed6035b78 [ 349.876872][ T6783] [ 350.058743][ T28] audit: type=1326 audit(1732415996.185:13784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.210868][ T310] usb 1-1: device descriptor read/all, error -71 [ 350.217313][ T28] audit: type=1326 audit(1732415996.185:13785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.305724][ T28] audit: type=1326 audit(1732415996.185:13786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.529393][ T28] audit: type=1326 audit(1732415996.185:13787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.555702][ T28] audit: type=1326 audit(1732415996.185:13788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.579477][ T28] audit: type=1326 audit(1732415996.185:13789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.602874][ T28] audit: type=1326 audit(1732415996.185:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 350.653269][ T6810] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 350.660603][ T28] audit: type=1326 audit(1732415996.185:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 353.730157][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 353.730181][ T28] audit: type=1400 audit(1732415999.865:13818): avc: denied { unmount } for pid=4005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 355.644945][ T6886] loop5: detected capacity change from 0 to 512 [ 355.666699][ T6886] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1841: attempt to clear invalid blocks 1 len 1 [ 355.679993][ T6886] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1841: bg 0: block 343: padding at end of block bitmap is not set [ 355.694287][ T6886] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 355.819534][ T6886] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1841: invalid indirect mapped block 1819239214 (level 0) [ 355.849266][ T6886] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1841: invalid indirect mapped block 1819239214 (level 1) [ 355.864802][ T6886] EXT4-fs (loop5): 1 truncate cleaned up [ 356.174597][ T6886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 356.409288][ T28] audit: type=1400 audit(1732416002.535:13819): avc: denied { execute } for pid=6885 comm="syz.5.1841" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.458351][ T28] audit: type=1400 audit(1732416002.535:13820): avc: denied { read open } for pid=6885 comm="syz.5.1841" path="/183/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.685420][ T4005] EXT4-fs (loop5): unmounting filesystem. [ 356.705291][ T6904] 9pnet_fd: Insufficient options for proto=fd [ 356.716946][ T28] audit: type=1400 audit(1732416002.535:13821): avc: denied { execute_no_trans } for pid=6885 comm="syz.5.1841" path="/183/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.177175][ T310] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 357.209720][ T28] audit: type=1326 audit(1732416003.325:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.295663][ T28] audit: type=1326 audit(1732416003.325:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.346133][ T28] audit: type=1326 audit(1732416003.325:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.402282][ T28] audit: type=1326 audit(1732416003.325:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.430346][ T28] audit: type=1326 audit(1732416003.325:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.453717][ T28] audit: type=1326 audit(1732416003.335:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.3.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 357.715939][ T310] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.735777][ T310] usb 6-1: config 0 interface 0 has no altsetting 0 [ 357.749016][ T310] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 357.764524][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.780639][ T310] usb 6-1: config 0 descriptor?? [ 360.075502][ T310] uclogic 0003:5543:0005.000F: unknown main item tag 0x0 [ 360.084075][ T310] uclogic 0003:5543:0005.000F: unknown main item tag 0x0 [ 360.122273][ T310] uclogic 0003:5543:0005.000F: item fetching failed at offset 2/10 [ 360.132033][ T310] uclogic 0003:5543:0005.000F: parse failed [ 360.138003][ T310] uclogic: probe of 0003:5543:0005.000F failed with error -22 [ 360.146231][ T310] usb 6-1: USB disconnect, device number 10 [ 361.077705][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 361.078754][ T28] audit: type=1326 audit(1732416007.195:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.148253][ T28] audit: type=1326 audit(1732416007.195:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.172021][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 361.179806][ T28] audit: type=1326 audit(1732416007.205:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.209470][ T28] audit: type=1326 audit(1732416007.205:13842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.233169][ T28] audit: type=1326 audit(1732416007.205:13843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.270130][ T28] audit: type=1326 audit(1732416007.205:13844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.316056][ T28] audit: type=1326 audit(1732416007.205:13845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.339645][ T28] audit: type=1326 audit(1732416007.205:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.363093][ T28] audit: type=1326 audit(1732416007.205:13847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.386438][ T28] audit: type=1326 audit(1732416007.205:13848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 361.466005][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 361.635921][ T40] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 361.645937][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.766070][ T24] usb 1-1: config 12 has an invalid interface number: 155 but max is 0 [ 361.774671][ T24] usb 1-1: config 12 has no interface number 0 [ 361.782383][ T24] usb 1-1: config 12 interface 155 altsetting 98 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 361.795088][ T24] usb 1-1: config 12 interface 155 has no altsetting 0 [ 361.875891][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 361.956003][ T24] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=f3.13 [ 361.964889][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.972734][ T24] usb 1-1: Product: syz [ 361.976703][ T24] usb 1-1: Manufacturer: syz [ 361.981092][ T24] usb 1-1: SerialNumber: syz [ 361.995960][ T40] usb 5-1: config 0 has no interfaces? [ 362.155936][ T40] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.164833][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.172634][ T40] usb 5-1: Product: syz [ 362.176630][ T40] usb 5-1: Manufacturer: syz [ 362.181017][ T40] usb 5-1: SerialNumber: syz [ 362.186046][ T40] r8152-cfgselector 5-1: config 0 descriptor?? [ 362.308960][ T24] usb 1-1: USB disconnect, device number 15 [ 362.317551][ T6990] loop5: detected capacity change from 0 to 128 [ 362.325242][ T6990] EXT4-fs (loop5): Test dummy encryption mode enabled [ 362.332964][ T6990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 362.341386][ T6990] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038 (0x7fffffff) [ 362.566023][ T353] usb 5-1: config 0 descriptor?? [ 362.650498][ T24] usb 5-1: USB disconnect, device number 12 [ 362.665943][ T353] usb 5-1: can't set config #0, error -71 [ 363.679927][ T4005] EXT4-fs (loop5): unmounting filesystem. [ 364.667032][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 364.985885][ T40] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 365.055913][ T24] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.068602][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 365.074934][ T24] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 365.083854][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.092401][ T24] usb 6-1: config 0 descriptor?? [ 365.345915][ T40] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.358696][ T40] usb 4-1: config 0 interface 0 has no altsetting 0 [ 365.365102][ T40] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 365.374009][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.382457][ T40] usb 4-1: config 0 descriptor?? [ 365.635898][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 365.641728][ T24] usbhid: probe of 6-1:0.0 failed with error -71 [ 365.648847][ T24] usb 6-1: USB disconnect, device number 11 [ 365.672797][ T7039] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.924367][ T40] uclogic 0003:5543:0005.0010: unknown main item tag 0x0 [ 365.943750][ T40] uclogic 0003:5543:0005.0010: unknown main item tag 0x0 [ 365.976489][ T40] uclogic 0003:5543:0005.0010: item fetching failed at offset 2/10 [ 366.025752][ T40] uclogic 0003:5543:0005.0010: parse failed [ 366.058754][ T40] uclogic: probe of 0003:5543:0005.0010 failed with error -22 [ 366.132816][ T24] usb 4-1: USB disconnect, device number 13 [ 366.234307][ T7061] loop5: detected capacity change from 0 to 1024 [ 366.247164][ T7061] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 366.255509][ T7061] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038 (0x7fffffff) [ 366.320747][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1886'. [ 366.395921][ T40] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 366.595695][ T7068] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 366.936434][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 367.056338][ T40] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 367.112765][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.171839][ T40] usb 5-1: config 0 descriptor?? [ 367.188306][ T4005] EXT4-fs (loop5): unmounting filesystem. [ 367.225927][ T310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 367.475875][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 367.544057][ T7092] 9pnet_fd: Insufficient options for proto=fd [ 368.095914][ T310] usb 1-1: config 0 has no interfaces? [ 368.275890][ T310] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 368.284794][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.292837][ T310] usb 1-1: Product: syz [ 368.296965][ T310] usb 1-1: Manufacturer: syz [ 368.301400][ T310] usb 1-1: SerialNumber: syz [ 368.306631][ T7103] loop5: detected capacity change from 0 to 40427 [ 368.313322][ T7103] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 368.321086][ T7103] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 368.330520][ T310] r8152-cfgselector 1-1: config 0 descriptor?? [ 368.345742][ T7103] F2FS-fs (loop5): Found nat_bits in checkpoint [ 368.385723][ T7103] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 368.393309][ T7103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 368.433097][ T7111] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 368.489835][ T7103] syz.5.1904: attempt to access beyond end of device [ 368.489835][ T7103] loop5: rw=2049, sector=77824, nr_sectors = 2568 limit=40427 [ 368.910621][ T24] usb 1-1: USB disconnect, device number 16 [ 369.059818][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'. [ 369.273689][ T4005] syz-executor: attempt to access beyond end of device [ 369.273689][ T4005] loop5: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 369.287810][ T4005] syz-executor: attempt to access beyond end of device [ 369.287810][ T4005] loop5: rw=2051, sector=57344, nr_sectors = 4096 limit=40427 [ 369.303793][ T4005] F2FS-fs (loop5): Issue discard(6144, 6144, 512) failed, ret: -5 [ 369.303825][ T4005] F2FS-fs (loop5): Issue discard(7168, 7168, 512) failed, ret: -5 [ 369.356446][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 369.356460][ T28] audit: type=1400 audit(1732416015.495:13873): avc: denied { map } for pid=7123 comm="syz.3.1911" path="socket:[44161]" dev="sockfs" ino=44161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.395380][ T28] audit: type=1400 audit(1732416015.525:13874): avc: denied { read accept } for pid=7123 comm="syz.3.1911" path="socket:[44161]" dev="sockfs" ino=44161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.419534][ T28] audit: type=1400 audit(1732416015.525:13875): avc: denied { getopt } for pid=7123 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.448322][ T28] audit: type=1400 audit(1732416015.525:13876): avc: denied { bind } for pid=7123 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.494432][ T7130] loop5: detected capacity change from 0 to 1024 [ 369.566611][ T7130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 369.577716][ T7130] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038 (0x7fffffff) [ 370.306971][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 370.785902][ T40] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 370.795726][ T40] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 370.809228][ T40] asix: probe of 5-1:0.0 failed with error -71 [ 370.815881][ T4005] EXT4-fs (loop5): unmounting filesystem. [ 370.818409][ T40] usb 5-1: USB disconnect, device number 13 [ 371.687895][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1919'. [ 374.657014][ T7184] loop5: detected capacity change from 0 to 40427 [ 374.663807][ T7184] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 374.671649][ T7184] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 374.680643][ T7184] F2FS-fs (loop5): invalid crc value [ 374.707731][ T7184] F2FS-fs (loop5): Found nat_bits in checkpoint [ 374.774661][ T7184] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 374.783798][ T7184] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 375.003082][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1925'. [ 375.925881][ T28] audit: type=1400 audit(1732416021.895:13877): avc: denied { accept } for pid=7224 comm="syz.3.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 376.252629][ T310] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 376.573177][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.580064][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.595848][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 376.978878][ T7253] FAULT_INJECTION: forcing a failure. [ 376.978878][ T7253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.991876][ T7253] CPU: 1 PID: 7253 Comm: syz.3.1944 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 377.001490][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.011385][ T7253] Call Trace: [ 377.014510][ T7253] [ 377.017286][ T7253] dump_stack_lvl+0x151/0x1b7 [ 377.021804][ T7253] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 377.027096][ T7253] dump_stack+0x15/0x1e [ 377.031089][ T7253] should_fail_ex+0x3d0/0x520 [ 377.035600][ T7253] should_fail+0xb/0x10 [ 377.039593][ T7253] should_fail_usercopy+0x1a/0x20 [ 377.044455][ T7253] _copy_from_user+0x1e/0xc0 [ 377.048881][ T7253] __se_sys_mount+0x179/0x3b0 [ 377.053393][ T7253] ? __x64_sys_mount+0xd0/0xd0 [ 377.057994][ T7253] ? debug_smp_processor_id+0x17/0x20 [ 377.063289][ T7253] __x64_sys_mount+0xbf/0xd0 [ 377.067714][ T7253] x64_sys_call+0x49d/0x9a0 [ 377.072055][ T7253] do_syscall_64+0x3b/0xb0 [ 377.076307][ T7253] ? clear_bhb_loop+0x55/0xb0 [ 377.080822][ T7253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.085915][ T310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.086550][ T7253] RIP: 0033:0x7fbf33b7e819 [ 377.100698][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.120145][ T7253] RSP: 002b:00007fbf34a1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.128387][ T7253] RAX: ffffffffffffffda RBX: 00007fbf33d35fa0 RCX: 00007fbf33b7e819 [ 377.136195][ T7253] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 377.144007][ T7253] RBP: 00007fbf34a1a090 R08: 0000000020000140 R09: 0000000000000000 [ 377.151818][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.159629][ T7253] R13: 0000000000000000 R14: 00007fbf33d35fa0 R15: 00007ffcf6b1b788 [ 377.167445][ T7253] [ 377.206859][ T7256] FAULT_INJECTION: forcing a failure. [ 377.206859][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.219911][ T7256] CPU: 1 PID: 7256 Comm: syz.0.1946 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 377.229526][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.239419][ T7256] Call Trace: [ 377.242544][ T7256] [ 377.245321][ T7256] dump_stack_lvl+0x151/0x1b7 [ 377.249832][ T7256] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 377.255129][ T7256] dump_stack+0x15/0x1e [ 377.259119][ T7256] should_fail_ex+0x3d0/0x520 [ 377.263630][ T7256] should_fail+0xb/0x10 [ 377.267623][ T7256] should_fail_usercopy+0x1a/0x20 [ 377.272483][ T7256] _copy_from_user+0x1e/0xc0 [ 377.276915][ T7256] __se_sys_mount+0x179/0x3b0 [ 377.281421][ T7256] ? __this_cpu_preempt_check+0x13/0x20 [ 377.286805][ T7256] ? __x64_sys_mount+0xd0/0xd0 [ 377.291404][ T7256] ? debug_smp_processor_id+0x17/0x20 [ 377.296616][ T7256] __x64_sys_mount+0xbf/0xd0 [ 377.301040][ T7256] x64_sys_call+0x49d/0x9a0 [ 377.305378][ T7256] do_syscall_64+0x3b/0xb0 [ 377.309635][ T7256] ? clear_bhb_loop+0x55/0xb0 [ 377.314146][ T7256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.319875][ T7256] RIP: 0033:0x7f569ab7e819 [ 377.324129][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.343569][ T7256] RSP: 002b:00007f569b9ea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.351814][ T7256] RAX: ffffffffffffffda RBX: 00007f569ad35fa0 RCX: 00007f569ab7e819 [ 377.359626][ T7256] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 377.367441][ T7256] RBP: 00007f569b9ea090 R08: 0000000020000140 R09: 0000000000000000 [ 377.375250][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.383064][ T7256] R13: 0000000000000000 R14: 00007f569ad35fa0 R15: 00007fff4d9a0058 [ 377.390878][ T7256] [ 377.432210][ T28] audit: type=1400 audit(1732416023.535:13878): avc: denied { mount } for pid=7257 comm="syz.3.1945" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 377.458538][ T310] usb 6-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 377.459286][ T28] audit: type=1400 audit(1732416023.535:13879): avc: denied { write } for pid=7257 comm="syz.3.1945" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 377.474460][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.498190][ T310] usb 6-1: Product: syz [ 377.502220][ T310] usb 6-1: Manufacturer: syz [ 377.506650][ T310] usb 6-1: SerialNumber: syz [ 377.522690][ T310] usb 6-1: config 0 descriptor?? [ 379.224568][ T28] audit: type=1326 audit(1732416025.345:13880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 379.281968][ T310] usb 6-1: Found UVC 0.00 device syz (045e:0721) [ 379.288772][ T28] audit: type=1326 audit(1732416025.345:13881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 379.351758][ T310] usb 6-1: No valid video chain found. [ 379.363349][ T310] usb 6-1: USB disconnect, device number 12 [ 380.375904][ T28] audit: type=1326 audit(1732416025.345:13882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.409577][ T28] audit: type=1326 audit(1732416025.345:13883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.435953][ T28] audit: type=1326 audit(1732416025.345:13884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.536690][ T28] audit: type=1326 audit(1732416025.345:13885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.751145][ T28] audit: type=1326 audit(1732416025.345:13886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.783980][ T28] audit: type=1326 audit(1732416025.345:13887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf33b7d1b0 code=0x7ffc0000 [ 380.807568][ T28] audit: type=1326 audit(1732416025.345:13888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf33b80047 code=0x7ffc0000 [ 380.835877][ T956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 380.858157][ T28] audit: type=1326 audit(1732416025.345:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 380.958486][ T28] audit: type=1326 audit(1732416025.345:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf33b80047 code=0x7ffc0000 [ 380.988591][ T28] audit: type=1326 audit(1732416025.345:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf33b7d4aa code=0x7ffc0000 [ 381.294139][ T28] audit: type=1326 audit(1732416025.345:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 381.321592][ T28] audit: type=1326 audit(1732416025.345:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 381.968175][ T28] audit: type=1326 audit(1732416025.345:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 381.995699][ T956] usb 1-1: Using ep0 maxpacket: 8 [ 382.037806][ T28] audit: type=1326 audit(1732416025.345:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 382.092506][ T28] audit: type=1326 audit(1732416025.345:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 382.245889][ T956] usb 1-1: unable to read config index 0 descriptor/all [ 382.262854][ T956] usb 1-1: can't read configurations, error -71 [ 382.310194][ T7324] FAULT_INJECTION: forcing a failure. [ 382.310194][ T7324] name failslab, interval 1, probability 0, space 0, times 0 [ 382.335884][ T7324] CPU: 1 PID: 7324 Comm: syz.3.1965 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 382.345515][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.355411][ T7324] Call Trace: [ 382.358534][ T7324] [ 382.361311][ T7324] dump_stack_lvl+0x151/0x1b7 [ 382.365827][ T7324] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 382.371120][ T7324] ? dump_stack+0x9/0x1e [ 382.375202][ T7324] dump_stack+0x15/0x1e [ 382.379191][ T7324] should_fail_ex+0x3d0/0x520 [ 382.383708][ T7324] ? security_inode_alloc+0x29/0x120 [ 382.388831][ T7324] __should_failslab+0xaf/0xf0 [ 382.393426][ T7324] should_failslab+0x9/0x20 [ 382.397768][ T7324] kmem_cache_alloc+0x3b/0x320 [ 382.402369][ T7324] security_inode_alloc+0x29/0x120 [ 382.407316][ T7324] inode_init_always+0x720/0x970 [ 382.412088][ T7324] ? shmem_match+0x180/0x180 [ 382.416516][ T7324] new_inode_pseudo+0x98/0x1d0 [ 382.421115][ T7324] new_inode+0x28/0x1c0 [ 382.425106][ T7324] shmem_get_inode+0x32d/0xc20 [ 382.429710][ T7324] __shmem_file_setup+0x111/0x2a0 [ 382.434569][ T7324] shmem_file_setup+0x2f/0x40 [ 382.439080][ T7324] __se_sys_memfd_create+0x1e1/0x3e0 [ 382.444201][ T7324] __x64_sys_memfd_create+0x5b/0x70 [ 382.449236][ T7324] x64_sys_call+0x871/0x9a0 [ 382.453573][ T7324] do_syscall_64+0x3b/0xb0 [ 382.457828][ T7324] ? clear_bhb_loop+0x55/0xb0 [ 382.462343][ T7324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.468069][ T7324] RIP: 0033:0x7fbf33b7e819 [ 382.472326][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.491769][ T7324] RSP: 002b:00007fbf34a19e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 382.500021][ T7324] RAX: ffffffffffffffda RBX: 0000000000005511 RCX: 00007fbf33b7e819 [ 382.507822][ T7324] RDX: 00007fbf34a19ef0 RSI: 0000000000000000 RDI: 00007fbf33bf1fca [ 382.515639][ T7324] RBP: 0000000020000680 R08: 00007fbf34a19bb7 R09: 00007fbf34a19e40 [ 382.523444][ T7324] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 382.531255][ T7324] R13: 00007fbf34a19ef0 R14: 00007fbf34a19eb0 R15: 00000000200004c0 [ 382.539074][ T7324] [ 384.064469][ T7353] FAULT_INJECTION: forcing a failure. [ 384.064469][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 384.092934][ T7353] CPU: 0 PID: 7353 Comm: syz.5.1974 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 384.102558][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.112465][ T7353] Call Trace: [ 384.115574][ T7353] [ 384.118360][ T7353] dump_stack_lvl+0x151/0x1b7 [ 384.122872][ T7353] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 384.128167][ T7353] dump_stack+0x15/0x1e [ 384.132155][ T7353] should_fail_ex+0x3d0/0x520 [ 384.136668][ T7353] __should_failslab+0xaf/0xf0 [ 384.141273][ T7353] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 384.146831][ T7353] should_failslab+0x9/0x20 [ 384.151161][ T7353] __kmem_cache_alloc_node+0x3d/0x2a0 [ 384.156375][ T7353] ? __kasan_slab_alloc+0x6c/0x80 [ 384.161232][ T7353] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 384.166783][ T7353] kmalloc_trace+0x2a/0xa0 [ 384.171036][ T7353] selinux_sk_alloc_security+0x7d/0x1a0 [ 384.176418][ T7353] security_sk_alloc+0x72/0xb0 [ 384.181022][ T7353] sk_prot_alloc+0x114/0x330 [ 384.185443][ T7353] sk_alloc+0x38/0x440 [ 384.189347][ T7353] ? security_inode_alloc+0x29/0x120 [ 384.194961][ T7353] tipc_sk_create+0x103/0x1ac0 [ 384.199581][ T7353] ? __kasan_check_write+0x14/0x20 [ 384.204510][ T7353] ? _raw_spin_lock+0xa4/0x1b0 [ 384.209108][ T7353] ? _raw_spin_trylock_bh+0x190/0x190 [ 384.214316][ T7353] ? inode_init_always+0x737/0x970 [ 384.219265][ T7353] ? try_module_get+0x12a/0x290 [ 384.223965][ T7353] __sock_create+0x3a6/0x760 [ 384.228381][ T7353] __sys_socket+0x136/0x3a0 [ 384.232715][ T7353] ? __sys_socket_file+0x1d0/0x1d0 [ 384.237754][ T7353] ? debug_smp_processor_id+0x17/0x20 [ 384.242959][ T7353] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 384.248865][ T7353] __x64_sys_socket+0x7a/0x90 [ 384.253374][ T7353] x64_sys_call+0x147/0x9a0 [ 384.257721][ T7353] do_syscall_64+0x3b/0xb0 [ 384.261965][ T7353] ? clear_bhb_loop+0x55/0xb0 [ 384.266480][ T7353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.272208][ T7353] RIP: 0033:0x7f3e4f37e819 [ 384.276469][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.295902][ T7353] RSP: 002b:00007f3e500e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 384.304147][ T7353] RAX: ffffffffffffffda RBX: 00007f3e4f535fa0 RCX: 00007f3e4f37e819 [ 384.311959][ T7353] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 000000000000001e [ 384.319771][ T7353] RBP: 00007f3e500e7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.327584][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.335392][ T7353] R13: 0000000000000001 R14: 00007f3e4f535fa0 R15: 00007ffd363ac318 [ 384.343208][ T7353] [ 384.725710][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 384.920876][ T7357] FAULT_INJECTION: forcing a failure. [ 384.920876][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 384.958415][ T7357] CPU: 0 PID: 7357 Comm: syz.3.1975 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 384.968140][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.978050][ T7357] Call Trace: [ 384.981164][ T7357] [ 384.983942][ T7357] dump_stack_lvl+0x151/0x1b7 [ 384.988455][ T7357] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 384.993747][ T7357] dump_stack+0x15/0x1e [ 384.997739][ T7357] should_fail_ex+0x3d0/0x520 [ 385.002253][ T7357] ? __kvm_mmu_topup_memory_cache+0x1a5/0x4a0 [ 385.008148][ T7357] __should_failslab+0xaf/0xf0 [ 385.012757][ T7357] should_failslab+0x9/0x20 [ 385.017088][ T7357] kmem_cache_alloc+0x3b/0x320 [ 385.021689][ T7357] ? __kvm_mmu_topup_memory_cache+0x1a5/0x4a0 [ 385.027592][ T7357] __kvm_mmu_topup_memory_cache+0x1a5/0x4a0 [ 385.033322][ T7357] kvm_mmu_topup_memory_cache+0x22/0x30 [ 385.038701][ T7357] kvm_mmu_load+0x111/0x2970 [ 385.043127][ T7357] ? __kasan_check_write+0x14/0x20 [ 385.048072][ T7357] ? mutex_unlock+0xb2/0x260 [ 385.052503][ T7357] ? kvm_mmu_unload+0x120/0x120 [ 385.057188][ T7357] ? xa_find+0x2e0/0x2e0 [ 385.061268][ T7357] ? memset+0x35/0x40 [ 385.065089][ T7357] ? vmx_flush_tlb_all+0xc2/0x380 [ 385.069951][ T7357] ? vmx_get_if_flag+0x40/0x40 [ 385.074546][ T7357] ? queue_delayed_work_on+0x13f/0x180 [ 385.079841][ T7357] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 385.085224][ T7357] ? kvm_hv_activate_synic+0x100/0x100 [ 385.090517][ T7357] ? vmx_nmi_blocked+0x108/0x280 [ 385.095297][ T7357] vcpu_enter_guest+0x6c7d/0x9490 [ 385.100152][ T7357] ? __kasan_check_write+0x14/0x20 [ 385.105099][ T7357] ? do_get_msr_feature+0x320/0x320 [ 385.110132][ T7357] ? vmx_sched_in+0x68/0x310 [ 385.114558][ T7357] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 385.119944][ T7357] ? kvm_sched_in+0x86/0xc0 [ 385.124280][ T7357] ? finish_task_switch+0x6a8/0x7b0 [ 385.129315][ T7357] ? __schedule+0xcbd/0x1560 [ 385.133747][ T7357] ? __sched_text_start+0x8/0x8 [ 385.138429][ T7357] ? vmx_sched_in+0x68/0x310 [ 385.142856][ T7357] ? __kasan_check_read+0x11/0x20 [ 385.147716][ T7357] ? preempt_schedule_irq+0xe7/0x140 [ 385.152836][ T7357] ? preempt_schedule_notrace+0x140/0x140 [ 385.158393][ T7357] ? finish_task_switch+0x6a8/0x7b0 [ 385.163426][ T7357] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 385.169326][ T7357] ? irqentry_exit+0x30/0x40 [ 385.173754][ T7357] ? sysvec_reschedule_ipi+0x80/0x160 [ 385.178961][ T7357] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 385.184428][ T7357] ? preempt_schedule+0xd9/0xe0 [ 385.189116][ T7357] ? preempt_schedule_common+0xbe/0xf0 [ 385.194410][ T7357] ? kasan_check_range+0x1/0x2a0 [ 385.199184][ T7357] ? preempt_schedule+0xd9/0xe0 [ 385.203873][ T7357] ? __kasan_check_read+0x11/0x20 [ 385.208732][ T7357] ? __this_cpu_preempt_check+0x13/0x20 [ 385.214113][ T7357] ? xfd_validate_state+0x6f/0x170 [ 385.219062][ T7357] ? __local_bh_enable_ip+0x58/0x80 [ 385.224094][ T7357] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 385.229301][ T7357] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 385.234424][ T7357] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 385.239896][ T7357] ? __kvm_request_immediate_exit+0x70/0x70 [ 385.245625][ T7357] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 385.250134][ T7357] ? xa_release+0x40/0x40 [ 385.254300][ T7357] ? selinux_file_ioctl+0x3cc/0x540 [ 385.259333][ T7357] ? selinux_file_alloc_security+0x120/0x120 [ 385.265148][ T7357] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 385.271049][ T7357] ? irqentry_exit+0x30/0x40 [ 385.275476][ T7357] ? sysvec_reschedule_ipi+0x80/0x160 [ 385.280684][ T7357] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 385.286153][ T7357] ? xa_release+0x40/0x40 [ 385.290318][ T7357] ? do_vfs_ioctl+0x121/0x29a0 [ 385.294920][ T7357] ? xa_release+0x40/0x40 [ 385.299086][ T7357] __se_sys_ioctl+0x114/0x190 [ 385.303600][ T7357] __x64_sys_ioctl+0x7b/0x90 [ 385.308053][ T7357] x64_sys_call+0x98/0x9a0 [ 385.312278][ T7357] do_syscall_64+0x3b/0xb0 [ 385.316531][ T7357] ? clear_bhb_loop+0x55/0xb0 [ 385.321044][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.326773][ T7357] RIP: 0033:0x7fbf33b7e819 [ 385.331025][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.350468][ T7357] RSP: 002b:00007fbf349f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.358714][ T7357] RAX: ffffffffffffffda RBX: 00007fbf33d36080 RCX: 00007fbf33b7e819 [ 385.366525][ T7357] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 385.374334][ T7357] RBP: 00007fbf349f9090 R08: 0000000000000000 R09: 0000000000000000 [ 385.382151][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.389958][ T7357] R13: 0000000000000000 R14: 00007fbf33d36080 R15: 00007ffcf6b1b788 [ 385.397776][ T7357] [ 385.408101][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 385.995857][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 386.255961][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 387.776099][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 387.792568][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 387.792581][ T28] audit: type=1400 audit(1732416033.925:13917): avc: denied { create } for pid=7417 comm="syz.4.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.818710][ T24] usb 1-1: config 0 has no interfaces? [ 387.819050][ T28] audit: type=1400 audit(1732416033.935:13918): avc: denied { setopt } for pid=7417 comm="syz.4.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 388.915079][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 388.924262][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.935933][ T24] usb 1-1: Product: syz [ 388.940036][ T24] usb 1-1: Manufacturer: syz [ 388.944645][ T24] usb 1-1: SerialNumber: syz [ 389.027247][ T7447] FAULT_INJECTION: forcing a failure. [ 389.027247][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 389.039721][ T7447] CPU: 0 PID: 7447 Comm: syz.5.1997 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 389.049299][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.059196][ T7447] Call Trace: [ 389.062408][ T7447] [ 389.065184][ T7447] dump_stack_lvl+0x151/0x1b7 [ 389.069696][ T7447] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 389.074994][ T7447] dump_stack+0x15/0x1e [ 389.078982][ T7447] should_fail_ex+0x3d0/0x520 [ 389.083497][ T7447] ? security_file_alloc+0x29/0x120 [ 389.088539][ T7447] __should_failslab+0xaf/0xf0 [ 389.093130][ T7447] should_failslab+0x9/0x20 [ 389.097471][ T7447] kmem_cache_alloc+0x3b/0x320 [ 389.102069][ T7447] ? __alloc_file+0x29/0x2a0 [ 389.106500][ T7447] security_file_alloc+0x29/0x120 [ 389.111358][ T7447] __alloc_file+0xb2/0x2a0 [ 389.115611][ T7447] alloc_empty_file+0x95/0x180 [ 389.120212][ T7447] path_openat+0xec/0x2d60 [ 389.124465][ T7447] ? __schedule+0xcbd/0x1560 [ 389.128891][ T7447] ? kasan_set_track+0x60/0x70 [ 389.133490][ T7447] ? kasan_set_track+0x4b/0x70 [ 389.138092][ T7447] ? __sched_text_start+0x8/0x8 [ 389.142781][ T7447] ? preempt_schedule_irq+0xe7/0x140 [ 389.147898][ T7447] ? do_filp_open+0x480/0x480 [ 389.152413][ T7447] do_filp_open+0x230/0x480 [ 389.156752][ T7447] ? vfs_tmpfile+0x480/0x480 [ 389.161181][ T7447] ? alloc_fd+0x4fe/0x5a0 [ 389.165347][ T7447] do_sys_openat2+0x151/0x870 [ 389.169859][ T7447] ? __schedule+0xcbd/0x1560 [ 389.174283][ T7447] ? do_sys_open+0x220/0x220 [ 389.178711][ T7447] ? __sched_text_start+0x8/0x8 [ 389.183396][ T7447] ? ksys_write+0x260/0x2c0 [ 389.187736][ T7447] __x64_sys_openat+0x243/0x290 [ 389.192424][ T7447] ? __ia32_sys_open+0x270/0x270 [ 389.197198][ T7447] ? switch_fpu_return+0xe/0x10 [ 389.201884][ T7447] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 389.207354][ T7447] x64_sys_call+0x6bf/0x9a0 [ 389.211692][ T7447] do_syscall_64+0x3b/0xb0 [ 389.215946][ T7447] ? clear_bhb_loop+0x55/0xb0 [ 389.220460][ T7447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.226188][ T7447] RIP: 0033:0x7f3e4f37e819 [ 389.230441][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.249884][ T7447] RSP: 002b:00007f3e500a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.258127][ T7447] RAX: ffffffffffffffda RBX: 00007f3e4f536160 RCX: 00007f3e4f37e819 [ 389.265938][ T7447] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000009 [ 389.273751][ T7447] RBP: 00007f3e500a5090 R08: 0000000000000000 R09: 0000000000000000 [ 389.281562][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.289375][ T7447] R13: 0000000000000000 R14: 00007f3e4f536160 R15: 00007ffd363ac318 [ 389.297192][ T7447] [ 389.820893][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 391.010240][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 391.018204][ T24] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 393.005168][ T7485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'. [ 393.018108][ T28] audit: type=1326 audit(1732416039.145:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.033350][ T28] audit: type=1326 audit(1732416039.145:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.057099][ T28] audit: type=1326 audit(1732416039.155:13921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.081003][ T28] audit: type=1326 audit(1732416039.155:13922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.111160][ T28] audit: type=1326 audit(1732416039.155:13923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.148097][ T28] audit: type=1326 audit(1732416039.155:13924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 394.861619][ T28] audit: type=1326 audit(1732416039.155:13925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 395.189695][ T28] audit: type=1326 audit(1732416039.155:13926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 395.213060][ T28] audit: type=1326 audit(1732416039.155:13927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 395.249372][ T28] audit: type=1326 audit(1732416039.155:13928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ae77e819 code=0x7ffc0000 [ 395.911363][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2010'. [ 396.493169][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2022'. [ 396.575878][ T40] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 396.815863][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 396.935960][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.946755][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.956411][ T40] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 396.965269][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.976420][ T40] usb 2-1: config 0 descriptor?? [ 397.434253][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 398.283410][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 398.537991][ T7570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2032'. [ 398.756032][ T40] usbhid 2-1:0.0: can't add hid device: -71 [ 398.761824][ T40] usbhid: probe of 2-1:0.0 failed with error -71 [ 398.768681][ T40] usb 2-1: USB disconnect, device number 14 [ 399.737406][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2037'. [ 399.759898][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 399.761961][ T28] audit: type=1326 audit(1732416045.885:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.793573][ T28] audit: type=1326 audit(1732416045.885:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.817683][ T28] audit: type=1326 audit(1732416045.885:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.841883][ T28] audit: type=1326 audit(1732416045.885:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.865424][ T28] audit: type=1326 audit(1732416045.885:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.888917][ T28] audit: type=1326 audit(1732416045.885:13957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.912353][ T28] audit: type=1326 audit(1732416045.885:13958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.935903][ T28] audit: type=1326 audit(1732416045.885:13959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.959286][ T28] audit: type=1326 audit(1732416045.885:13960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 399.982590][ T28] audit: type=1326 audit(1732416045.885:13961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7588 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5977e819 code=0x7ffc0000 [ 400.565293][ T310] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 400.790175][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 401.117512][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 401.646826][ T310] usb 5-1: config 0 has no interfaces? [ 401.996125][ T310] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 402.004992][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.012854][ T310] usb 5-1: Product: syz [ 402.017298][ T310] usb 5-1: Manufacturer: syz [ 402.021709][ T310] usb 5-1: SerialNumber: syz [ 402.026920][ T310] r8152-cfgselector 5-1: config 0 descriptor?? [ 403.353267][ T310] r8152-cfgselector 5-1: Unknown version 0x0000 [ 403.359929][ T310] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 403.529795][ T1421] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 404.045851][ T1421] usb 4-1: Using ep0 maxpacket: 16 [ 404.215895][ T1421] usb 4-1: config 0 has no interfaces? [ 404.982898][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 404.993256][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2054'. [ 405.299532][ T7670] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2059'. [ 405.310126][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 405.310138][ T28] audit: type=1400 audit(1732416051.445:13969): avc: denied { connect } for pid=7669 comm="syz.0.2059" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.415859][ T1421] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 405.432726][ T1421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.054347][ T1421] r8152-cfgselector 4-1: config 0 descriptor?? [ 406.057557][ T7678] 9pnet_fd: Insufficient options for proto=fd [ 406.099518][ T310] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 406.110037][ T1421] r8152-cfgselector 4-1: can't set config #0, error -71 [ 406.335886][ T1421] r8152-cfgselector 4-1: Unknown version 0x0000 [ 406.374609][ T1421] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 406.836642][ T956] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 407.252477][ T310] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.265201][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.273257][ T310] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 407.282353][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.294324][ T310] usb 2-1: config 0 descriptor?? [ 407.787141][ T310] uclogic 0003:5543:0005.0011: unknown main item tag 0x0 [ 407.795892][ T310] uclogic 0003:5543:0005.0011: unknown main item tag 0x0 [ 407.802754][ T310] uclogic 0003:5543:0005.0011: item fetching failed at offset 2/10 [ 407.810718][ T310] uclogic 0003:5543:0005.0011: parse failed [ 407.816549][ T310] uclogic: probe of 0003:5543:0005.0011 failed with error -22 [ 407.827413][ T956] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.835279][ T1421] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 407.843020][ T956] usb 6-1: config 0 has no interface number 0 [ 407.848999][ T956] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.859617][ T956] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.869162][ T956] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 407.878204][ T956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.886445][ T956] usb 6-1: config 0 descriptor?? [ 407.989458][ T40] usb 2-1: USB disconnect, device number 15 [ 408.085849][ T1421] usb 5-1: Using ep0 maxpacket: 16 [ 408.151532][ T28] audit: type=1400 audit(1732416054.285:13970): avc: denied { create } for pid=7685 comm="syz.5.2064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 408.225923][ T1421] usb 5-1: config 0 has no interfaces? [ 408.396055][ T956] hid (null): global environment stack underflow [ 408.402297][ T1421] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 408.412034][ T956] uclogic 0003:5543:0522.0012: global environment stack underflow [ 408.419704][ T1421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.427509][ T956] uclogic 0003:5543:0522.0012: item 0 1 1 11 parsing failed [ 408.434691][ T956] uclogic 0003:5543:0522.0012: parse failed [ 408.440362][ T1421] usb 5-1: Product: syz [ 408.444312][ T1421] usb 5-1: Manufacturer: syz [ 408.448755][ T1421] usb 5-1: SerialNumber: syz [ 408.453402][ T956] uclogic: probe of 0003:5543:0522.0012 failed with error -22 [ 408.460894][ T1421] r8152-cfgselector 5-1: config 0 descriptor?? [ 408.513841][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.520745][ T7715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.599274][ T40] usb 6-1: USB disconnect, device number 13 [ 408.755940][ T1421] r8152-cfgselector 5-1: Unknown version 0x0000 [ 408.770409][ T1421] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 410.102448][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.109348][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.183089][ T7745] fuse: Unknown parameter 'e.|w윽Ñ_‘Âð3•·Ñ¹éµ`í×]ªË¤¤`c§‹¡¿Ÿ^' [ 410.211160][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2083'. [ 410.334705][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2079'. [ 410.719273][ T28] audit: type=1326 audit(1732416056.505:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 410.794106][ T28] audit: type=1326 audit(1732416056.505:13972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 410.838539][ T28] audit: type=1326 audit(1732416056.565:13973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 410.862627][ T28] audit: type=1326 audit(1732416056.565:13974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 410.888615][ T28] audit: type=1326 audit(1732416056.565:13975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 410.912337][ T28] audit: type=1326 audit(1732416056.585:13976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 411.006546][ T28] audit: type=1326 audit(1732416056.585:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 411.030350][ T28] audit: type=1326 audit(1732416056.585:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 411.055885][ T28] audit: type=1326 audit(1732416056.605:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 411.158789][ T28] audit: type=1326 audit(1732416056.605:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 412.088944][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2089'. [ 412.128763][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 412.194669][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 412.697752][ T1421] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 413.005869][ T1421] usb 1-1: Using ep0 maxpacket: 16 [ 413.165875][ T1421] usb 1-1: config 0 has no interfaces? [ 413.366384][ T1421] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 413.376242][ T1421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.384048][ T1421] usb 1-1: Product: syz [ 413.388553][ T1421] usb 1-1: Manufacturer: syz [ 413.394558][ T1421] usb 1-1: SerialNumber: syz [ 413.399955][ T1421] r8152-cfgselector 1-1: config 0 descriptor?? [ 413.406428][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 414.430280][ T1421] r8152-cfgselector 1-1: Unknown version 0x0000 [ 414.438273][ T1421] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 415.064536][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2107'. [ 415.120063][ T956] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 415.476802][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 415.863980][ T956] usb 5-1: Using ep0 maxpacket: 8 [ 416.846135][ T956] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 416.855385][ T956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.863879][ T956] usb 5-1: config 0 descriptor?? [ 416.883233][ T7886] FAULT_INJECTION: forcing a failure. [ 416.883233][ T7886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.896209][ T7886] CPU: 0 PID: 7886 Comm: syz.3.2120 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 416.905823][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.915716][ T7886] Call Trace: [ 416.918843][ T7886] [ 416.921619][ T7886] dump_stack_lvl+0x151/0x1b7 [ 416.926135][ T7886] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 416.931425][ T7886] ? vfs_write+0x952/0xed0 [ 416.935679][ T7886] ? __kasan_slab_free+0x11/0x20 [ 416.940452][ T7886] dump_stack+0x15/0x1e [ 416.944444][ T7886] should_fail_ex+0x3d0/0x520 [ 416.948960][ T7886] should_fail+0xb/0x10 [ 416.952949][ T7886] should_fail_usercopy+0x1a/0x20 [ 416.957814][ T7886] _copy_from_user+0x1e/0xc0 [ 416.962240][ T7886] __x64_sys_clock_adjtime+0xd7/0x290 [ 416.967446][ T7886] ? do_clock_adjtime+0x120/0x120 [ 416.972304][ T7886] ? __bpf_trace_sys_enter+0x62/0x70 [ 416.977424][ T7886] x64_sys_call+0x80f/0x9a0 [ 416.981763][ T7886] do_syscall_64+0x3b/0xb0 [ 416.986015][ T7886] ? clear_bhb_loop+0x55/0xb0 [ 416.990630][ T7886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.996358][ T7886] RIP: 0033:0x7fbf33b7e819 [ 417.000616][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.020053][ T7886] RSP: 002b:00007fbf34a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 417.028303][ T7886] RAX: ffffffffffffffda RBX: 00007fbf33d35fa0 RCX: 00007fbf33b7e819 [ 417.036112][ T7886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffd3 [ 417.043923][ T7886] RBP: 00007fbf34a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 417.051735][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.059546][ T7886] R13: 0000000000000000 R14: 00007fbf33d35fa0 R15: 00007ffcf6b1b788 [ 417.067362][ T7886] [ 418.055930][ T956] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 418.079625][ T956] asix: probe of 5-1:0.0 failed with error -71 [ 418.097891][ T956] usb 5-1: USB disconnect, device number 16 [ 418.555858][ T319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 418.677469][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2123'. [ 418.893997][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 418.990446][ T1421] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 419.486667][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 419.665598][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2128'. [ 419.982324][ T1421] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.994972][ T319] usb 2-1: config 0 has no interfaces? [ 420.000276][ T1421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.006694][ T1421] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 420.015900][ T1421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.025203][ T1421] usb 4-1: config 0 descriptor?? [ 420.175911][ T319] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 420.193957][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.208964][ T319] usb 2-1: Product: syz [ 420.215990][ T319] usb 2-1: Manufacturer: syz [ 420.220444][ T319] usb 2-1: SerialNumber: syz [ 420.230730][ T319] r8152-cfgselector 2-1: config 0 descriptor?? [ 420.485865][ T319] r8152-cfgselector 2-1: Unknown version 0x0000 [ 420.496375][ T319] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 420.627491][ T1421] uclogic 0003:5543:0005.0013: unknown main item tag 0x0 [ 420.638532][ T1421] uclogic 0003:5543:0005.0013: unknown main item tag 0x0 [ 420.652776][ T1421] uclogic 0003:5543:0005.0013: item fetching failed at offset 2/10 [ 420.668936][ T1421] uclogic 0003:5543:0005.0013: parse failed [ 420.681860][ T1421] uclogic: probe of 0003:5543:0005.0013 failed with error -22 [ 420.852575][ T319] usb 4-1: USB disconnect, device number 15 [ 421.061885][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2136'. [ 421.625272][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 422.593461][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2142'. [ 422.643707][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 422.643722][ T28] audit: type=1400 audit(1732416068.775:13989): avc: denied { read } for pid=7981 comm="syz.4.2146" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.714590][ T28] audit: type=1400 audit(1732416068.815:13990): avc: denied { open } for pid=7981 comm="syz.4.2146" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.767679][ T28] audit: type=1400 audit(1732416068.815:13991): avc: denied { ioctl } for pid=7981 comm="syz.4.2146" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.955863][ T319] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.975958][ T1421] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 423.278370][ T1421] usb 1-1: Using ep0 maxpacket: 16 [ 423.415899][ T319] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 423.427093][ T319] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 423.438352][ T319] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 423.447363][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.456092][ T1421] usb 1-1: config 0 has no interfaces? [ 423.475862][ T7982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.615890][ T1421] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 423.624895][ T1421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.632798][ T1421] usb 1-1: Product: syz [ 423.636812][ T1421] usb 1-1: Manufacturer: syz [ 423.641250][ T1421] usb 1-1: SerialNumber: syz [ 423.649650][ T1421] r8152-cfgselector 1-1: config 0 descriptor?? [ 423.725894][ T319] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 423.739530][ T319] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input108 [ 423.758879][ T319] usb 5-1: USB disconnect, device number 17 [ 423.765814][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 423.921201][ T1421] r8152-cfgselector 1-1: Unknown version 0x0000 [ 423.955635][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2153'. [ 424.207983][ T1421] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 428.659737][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2162'. [ 429.584214][ T28] audit: type=1326 audit(1732416074.975:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.635155][ T28] audit: type=1326 audit(1732416074.985:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.677841][ T28] audit: type=1326 audit(1732416075.095:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.703086][ T28] audit: type=1326 audit(1732416075.095:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.732897][ T28] audit: type=1326 audit(1732416075.095:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.756723][ T28] audit: type=1326 audit(1732416075.115:13997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 429.780323][ T28] audit: type=1326 audit(1732416075.115:13998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 430.450182][ T40] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 430.643033][ T28] audit: type=1326 audit(1732416075.115:13999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 430.806681][ T28] audit: type=1326 audit(1732416075.125:14000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 430.806716][ T28] audit: type=1326 audit(1732416075.125:14001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.5.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 430.933164][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2170'. [ 433.645986][ T40] usb 4-1: device not accepting address 16, error -71 [ 434.087760][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 434.395840][ T319] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 440.665027][ T319] usb 1-1: device not accepting address 22, error -71 [ 440.671778][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 440.671793][ T28] audit: type=1400 audit(1732416084.425:14007): avc: denied { nlmsg_write } for pid=8170 comm="syz.0.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 441.285877][ T956] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 443.260158][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 443.435855][ T956] usb 4-1: Using ep0 maxpacket: 16 [ 444.655899][ T956] usb 4-1: unable to read config index 0 descriptor/all [ 444.705674][ T956] usb 4-1: can't read configurations, error -71 [ 445.306448][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 447.994053][ T8297] FAULT_INJECTION: forcing a failure. [ 447.994053][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.006971][ T8297] CPU: 0 PID: 8297 Comm: syz.5.2229 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 448.016502][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.026405][ T8297] Call Trace: [ 448.029520][ T8297] [ 448.032300][ T8297] dump_stack_lvl+0x151/0x1b7 [ 448.036814][ T8297] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 448.042106][ T8297] ? random_recv_done+0x1d0/0x1d0 [ 448.046973][ T8297] dump_stack+0x15/0x1e [ 448.050958][ T8297] should_fail_ex+0x3d0/0x520 [ 448.055479][ T8297] should_fail+0xb/0x10 [ 448.059467][ T8297] should_fail_usercopy+0x1a/0x20 [ 448.064327][ T8297] _copy_to_user+0x1e/0x90 [ 448.068579][ T8297] rng_dev_read+0x445/0x830 [ 448.072926][ T8297] ? hwrng_yield+0x30/0x30 [ 448.077172][ T8297] ? security_file_permission+0x86/0xb0 [ 448.082553][ T8297] do_iter_read+0x500/0xc80 [ 448.086983][ T8297] ? vfs_iter_read+0xa0/0xa0 [ 448.091407][ T8297] ? import_iovec+0xe5/0x120 [ 448.095832][ T8297] do_preadv+0x20e/0x350 [ 448.099915][ T8297] ? vfs_writev+0x590/0x590 [ 448.104252][ T8297] ? fput+0x15b/0x1b0 [ 448.108072][ T8297] ? ksys_write+0x260/0x2c0 [ 448.112412][ T8297] ? debug_smp_processor_id+0x17/0x20 [ 448.117617][ T8297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 448.123521][ T8297] __x64_sys_preadv+0x9e/0xb0 [ 448.128036][ T8297] x64_sys_call+0x7c9/0x9a0 [ 448.132380][ T8297] do_syscall_64+0x3b/0xb0 [ 448.136623][ T8297] ? clear_bhb_loop+0x55/0xb0 [ 448.141140][ T8297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.146865][ T8297] RIP: 0033:0x7f3e4f37e819 [ 448.151120][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.170562][ T8297] RSP: 002b:00007f3e500e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 448.178807][ T8297] RAX: ffffffffffffffda RBX: 00007f3e4f535fa0 RCX: 00007f3e4f37e819 [ 448.186617][ T8297] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000007 [ 448.194430][ T8297] RBP: 00007f3e500e7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.202241][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.210055][ T8297] R13: 0000000000000000 R14: 00007f3e4f535fa0 R15: 00007ffd363ac318 [ 448.217868][ T8297] [ 449.056165][ T28] audit: type=1326 audit(1732416095.195:14008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.095869][ T28] audit: type=1326 audit(1732416095.195:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.126708][ T28] audit: type=1326 audit(1732416095.195:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.237024][ T28] audit: type=1326 audit(1732416095.195:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.270523][ T28] audit: type=1326 audit(1732416095.195:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.294154][ T956] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 449.453654][ T28] audit: type=1326 audit(1732416095.195:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.552872][ T28] audit: type=1400 audit(1732416095.235:14014): avc: denied { read } for pid=8302 comm="syz.1.2231" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 449.575502][ T28] audit: type=1400 audit(1732416095.235:14015): avc: denied { open } for pid=8302 comm="syz.1.2231" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 449.601094][ T28] audit: type=1326 audit(1732416095.235:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.624429][ T319] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 449.649188][ T28] audit: type=1326 audit(1732416095.235:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8306 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 449.795825][ T956] usb 4-1: Using ep0 maxpacket: 16 [ 449.915882][ T956] usb 4-1: config 0 has no interfaces? [ 450.006076][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.022033][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.044108][ T319] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 450.060963][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.096001][ T956] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.104864][ T956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.121434][ T319] usb 1-1: config 0 descriptor?? [ 450.135213][ T956] usb 4-1: Product: syz [ 450.141637][ T956] usb 4-1: Manufacturer: syz [ 450.146979][ T956] usb 4-1: SerialNumber: syz [ 450.156397][ T956] r8152-cfgselector 4-1: config 0 descriptor?? [ 450.435898][ T956] r8152-cfgselector 4-1: Unknown version 0x0000 [ 450.445345][ T956] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 450.697845][ T319] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 451.154063][ T8345] FAULT_INJECTION: forcing a failure. [ 451.154063][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 451.166563][ T8345] CPU: 1 PID: 8345 Comm: syz.3.2244 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 451.176099][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.185994][ T8345] Call Trace: [ 451.189120][ T8345] [ 451.191897][ T8345] dump_stack_lvl+0x151/0x1b7 [ 451.196409][ T8345] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 451.201707][ T8345] dump_stack+0x15/0x1e [ 451.205702][ T8345] should_fail_ex+0x3d0/0x520 [ 451.210221][ T8345] __should_failslab+0xaf/0xf0 [ 451.214811][ T8345] ? sk_prot_alloc+0xf9/0x330 [ 451.219324][ T8345] should_failslab+0x9/0x20 [ 451.223664][ T8345] __kmem_cache_alloc_node+0x3d/0x2a0 [ 451.228876][ T8345] ? sk_prot_alloc+0xf9/0x330 [ 451.233383][ T8345] __kmalloc+0xa3/0x1e0 [ 451.237378][ T8345] sk_prot_alloc+0xf9/0x330 [ 451.241717][ T8345] sk_alloc+0x38/0x440 [ 451.245621][ T8345] ? bpf_test_init+0x169/0x190 [ 451.250241][ T8345] bpf_prog_test_run_skb+0x384/0x13a0 [ 451.255434][ T8345] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 451.261161][ T8345] ? __kasan_check_write+0x14/0x20 [ 451.266106][ T8345] ? fput+0x15b/0x1b0 [ 451.269928][ T8345] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 451.275653][ T8345] bpf_prog_test_run+0x3b0/0x630 [ 451.280431][ T8345] ? bpf_prog_query+0x260/0x260 [ 451.285117][ T8345] ? selinux_bpf+0xd2/0x100 [ 451.289456][ T8345] ? security_bpf+0x82/0xb0 [ 451.293795][ T8345] __sys_bpf+0x59f/0x7f0 [ 451.297878][ T8345] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 451.303083][ T8345] ? __ia32_sys_read+0x90/0x90 [ 451.307681][ T8345] ? debug_smp_processor_id+0x17/0x20 [ 451.312893][ T8345] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 451.318792][ T8345] __x64_sys_bpf+0x7c/0x90 [ 451.323046][ T8345] x64_sys_call+0x87f/0x9a0 [ 451.327389][ T8345] do_syscall_64+0x3b/0xb0 [ 451.331637][ T8345] ? clear_bhb_loop+0x55/0xb0 [ 451.336152][ T8345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.341880][ T8345] RIP: 0033:0x7fbf33b7e819 [ 451.346131][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.365576][ T8345] RSP: 002b:00007fbf34a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.373821][ T8345] RAX: ffffffffffffffda RBX: 00007fbf33d35fa0 RCX: 00007fbf33b7e819 [ 451.381631][ T8345] RDX: 0000000000000028 RSI: 00000000200000c0 RDI: 000000000000000a [ 451.389443][ T8345] RBP: 00007fbf34a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 451.397255][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.405062][ T8345] R13: 0000000000000000 R14: 00007fbf33d35fa0 R15: 00007ffcf6b1b788 [ 451.412884][ T8345] [ 451.435868][ T319] hid-led: probe of 0003:0FC5:B080.0014 failed with error -71 [ 451.450908][ T319] usb 1-1: USB disconnect, device number 24 [ 451.802010][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2248'. [ 452.216932][ T8368] xt_nat: multiple ranges no longer supported [ 454.062959][ T8399] block device autoloading is deprecated and will be removed. [ 454.076627][ T8399] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 454.730511][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 454.730531][ T28] audit: type=1326 audit(1732416100.835:14118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.760247][ T28] audit: type=1326 audit(1732416100.835:14119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.783989][ T28] audit: type=1326 audit(1732416100.835:14120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.807616][ T28] audit: type=1326 audit(1732416100.835:14121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.831382][ T28] audit: type=1326 audit(1732416100.835:14122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.855006][ T28] audit: type=1326 audit(1732416100.835:14123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.891326][ T28] audit: type=1326 audit(1732416100.835:14124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 454.925210][ T28] audit: type=1326 audit(1732416100.835:14125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 455.113379][ T28] audit: type=1326 audit(1732416100.835:14126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e4f37e819 code=0x7ffc0000 [ 455.124347][ T8432] loop0: detected capacity change from 0 to 1024 [ 455.138931][ T28] audit: type=1326 audit(1732416100.925:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.5.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e4f31a1a9 code=0x7ffc0000 [ 455.187246][ T8432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 455.207665][ T290] EXT4-fs (loop0): unmounting filesystem. [ 455.459096][ T319] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 455.577315][ T310] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 455.885970][ T956] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 455.935905][ T319] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.948631][ T319] usb 5-1: config 0 interface 0 has no altsetting 0 [ 455.955050][ T319] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 455.963919][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.972483][ T319] usb 5-1: config 0 descriptor?? [ 455.985877][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.165840][ T956] usb 6-1: Using ep0 maxpacket: 16 [ 456.185886][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.194881][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.203571][ T310] usb 1-1: Product: syz [ 456.208011][ T310] usb 1-1: Manufacturer: syz [ 456.212448][ T310] usb 1-1: SerialNumber: syz [ 456.295873][ T956] usb 6-1: config 0 has no interfaces? [ 456.460265][ T319] uclogic 0003:5543:0005.0015: unknown main item tag 0x0 [ 456.467246][ T319] uclogic 0003:5543:0005.0015: unknown main item tag 0x0 [ 456.474123][ T319] uclogic 0003:5543:0005.0015: item fetching failed at offset 2/10 [ 456.482175][ T956] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 456.491320][ T319] uclogic 0003:5543:0005.0015: parse failed [ 456.497343][ T956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.505185][ T319] uclogic: probe of 0003:5543:0005.0015 failed with error -22 [ 456.512952][ T956] usb 6-1: Product: syz [ 456.521143][ T956] usb 6-1: Manufacturer: syz [ 456.525589][ T956] usb 6-1: SerialNumber: syz [ 456.534086][ T956] r8152-cfgselector 6-1: config 0 descriptor?? [ 456.660033][ T319] usb 5-1: USB disconnect, device number 18 [ 456.941789][ T956] r8152-cfgselector 6-1: Unknown version 0x0000 [ 456.950736][ T956] r8152-cfgselector 6-1: USB disconnect, device number 14 [ 457.685951][ T310] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 457.692225][ T310] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 457.707162][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 457.717300][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 457.758369][ T310] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 457.771394][ T310] usb 1-1: USB disconnect, device number 25 [ 458.246867][ T310] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 460.197600][ T8571] loop0: detected capacity change from 0 to 128 [ 460.244708][ T8571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 460.253418][ T8571] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038 (0x7fffffff) [ 460.468261][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 462.412090][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 462.412105][ T28] audit: type=1326 audit(1732416108.545:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.209969][ T28] audit: type=1326 audit(1732416108.585:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.588445][ T28] audit: type=1326 audit(1732416108.585:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.611904][ T28] audit: type=1326 audit(1732416108.585:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.663526][ T28] audit: type=1326 audit(1732416108.585:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.744263][ T28] audit: type=1326 audit(1732416108.585:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.768355][ T28] audit: type=1326 audit(1732416109.725:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf33b1a1a9 code=0x7ffc0000 [ 463.792086][ T28] audit: type=1326 audit(1732416109.725:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.816376][ T28] audit: type=1326 audit(1732416109.725:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.840451][ T28] audit: type=1326 audit(1732416109.835:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf33b7e819 code=0x7ffc0000 [ 463.916988][ T290] EXT4-fs (loop0): unmounting filesystem. [ 463.976727][ T8638] loop0: detected capacity change from 0 to 1024 [ 463.997475][ T8638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 464.018289][ T290] EXT4-fs (loop0): unmounting filesystem. [ 465.257802][ T8665] loop0: detected capacity change from 0 to 512 [ 465.348416][ T8665] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.2331: casefold flag without casefold feature [ 465.394147][ T8665] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2331: couldn't read orphan inode 15 (err -117) [ 465.462817][ T8665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 465.471201][ T8665] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038 (0x7fffffff) [ 466.389796][ T290] EXT4-fs (loop0): unmounting filesystem. [ 468.490086][ T8730] loop0: detected capacity change from 0 to 1024 [ 468.517534][ T8730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 468.525959][ T8730] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038 (0x7fffffff) [ 469.285562][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 469.285578][ T28] audit: type=1400 audit(1732416115.415:14184): avc: denied { mounton } for pid=8733 comm="syz.4.2350" path="/425/file0" dev="incremental-fs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.373963][ T290] EXT4-fs (loop0): unmounting filesystem. [ 469.395796][ T28] audit: type=1400 audit(1732416115.415:14185): avc: denied { getattr } for pid=8733 comm="syz.4.2350" name="/" dev="incremental-fs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 469.439452][ T28] audit: type=1400 audit(1732416115.415:14186): avc: denied { read } for pid=8733 comm="syz.4.2350" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.439482][ T28] audit: type=1400 audit(1732416115.415:14187): avc: denied { read } for pid=8733 comm="syz.4.2350" name=".pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.439502][ T28] audit: type=1400 audit(1732416115.415:14188): avc: denied { open } for pid=8733 comm="syz.4.2350" path="/425/file0/.pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.439524][ T28] audit: type=1400 audit(1732416115.415:14189): avc: denied { open } for pid=8733 comm="syz.4.2350" path="/425/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 469.439548][ T28] audit: type=1326 audit(1732416115.565:14190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 469.439569][ T28] audit: type=1326 audit(1732416115.565:14191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 469.439589][ T28] audit: type=1326 audit(1732416115.565:14192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 469.439609][ T28] audit: type=1326 audit(1732416115.565:14193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.0.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 470.617824][ T8778] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2361'. [ 476.305870][ T1589] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 476.526974][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 476.527021][ T28] audit: type=1400 audit(1732416122.665:14231): avc: denied { ioctl } for pid=8868 comm="syz.5.2386" path="socket:[50410]" dev="sockfs" ino=50410 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.558207][ T40] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 476.735865][ T1589] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.755689][ T1589] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.768390][ T1589] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 476.786507][ T1589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.806915][ T1589] usb 1-1: config 0 descriptor?? [ 476.966037][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.005296][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.146068][ T40] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 477.155104][ T40] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 477.163172][ T40] usb 5-1: Product: syz [ 477.171494][ T40] usb 5-1: config 0 descriptor?? [ 477.217372][ T40] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 477.342208][ T1589] uclogic 0003:5543:0005.0016: unknown main item tag 0x0 [ 477.367431][ T1589] uclogic 0003:5543:0005.0016: unknown main item tag 0x0 [ 477.374310][ T1589] uclogic 0003:5543:0005.0016: item fetching failed at offset 2/10 [ 477.382489][ T1589] uclogic 0003:5543:0005.0016: parse failed [ 477.388546][ T1589] uclogic: probe of 0003:5543:0005.0016 failed with error -22 [ 477.649860][ T1589] usb 1-1: USB disconnect, device number 26 [ 477.712475][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.728032][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.750940][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.764515][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.965521][ T28] audit: type=1400 audit(1732416124.095:14232): avc: denied { setopt } for pid=8889 comm="syz.1.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 478.365267][ T8902] loop0: detected capacity change from 0 to 128 [ 478.374877][ T8902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 478.383915][ T8902] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038 (0x7fffffff) [ 479.095320][ T290] EXT4-fs (loop0): unmounting filesystem. [ 479.224774][ T8921] loop0: detected capacity change from 0 to 1024 [ 479.231335][ T8921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.247195][ T8921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 479.263400][ T28] audit: type=1400 audit(1732416125.395:14233): avc: denied { remount } for pid=8920 comm="syz.0.2401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 479.285314][ T8921] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 479.292482][ T319] usb 5-1: USB disconnect, device number 19 [ 479.304928][ T8926] fuse: Bad value for 'fd' [ 479.307133][ T28] audit: type=1400 audit(1732416125.435:14234): avc: denied { mounton } for pid=8920 comm="syz.0.2401" path="/470/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.332398][ T28] audit: type=1400 audit(1732416125.445:14235): avc: denied { setopt } for pid=8920 comm="syz.0.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.825159][ T8921] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2401'. [ 479.910312][ T290] EXT4-fs (loop0): unmounting filesystem. [ 480.928254][ T28] audit: type=1326 audit(1732416127.045:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 480.955543][ T28] audit: type=1326 audit(1732416127.045:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 481.002698][ T28] audit: type=1326 audit(1732416127.045:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 481.314470][ T28] audit: type=1326 audit(1732416127.045:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 481.345795][ T28] audit: type=1326 audit(1732416127.045:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 481.372488][ T8959] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 481.435818][ T40] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 481.757662][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.795857][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.815829][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.904318][ T8972] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 481.915046][ T40] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 481.927896][ T40] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 481.943784][ T40] usb 5-1: Product: syz [ 482.012131][ T40] usb 5-1: config 0 descriptor?? [ 482.056392][ T40] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 482.287094][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.300584][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.319483][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.332624][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.334903][ T310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 482.341517][ T40] usb 5-1: USB disconnect, device number 20 [ 482.638721][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 482.775823][ T310] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.796810][ T310] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.816660][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 482.829249][ T310] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 482.841418][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.850031][ T310] usb 2-1: config 0 descriptor?? [ 482.969624][ T9015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2433'. [ 483.016197][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 483.016213][ T28] audit: type=1326 audit(1732416129.155:14256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.046899][ T9008] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 483.080511][ T28] audit: type=1326 audit(1732416129.185:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.126435][ T28] audit: type=1326 audit(1732416129.185:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.180443][ T28] audit: type=1326 audit(1732416129.185:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.215947][ T28] audit: type=1326 audit(1732416129.185:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.240258][ T28] audit: type=1326 audit(1732416129.185:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.263483][ T28] audit: type=1326 audit(1732416129.305:14262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.286863][ T28] audit: type=1326 audit(1732416129.345:14263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.312602][ T28] audit: type=1326 audit(1732416129.345:14264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.336784][ T28] audit: type=1326 audit(1732416129.345:14265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569ab7e819 code=0x7ffc0000 [ 483.405824][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 483.411736][ T310] usbhid: probe of 2-1:0.0 failed with error -71 [ 483.426903][ T310] usb 2-1: USB disconnect, device number 17 [ 485.305072][ T9069] loop0: detected capacity change from 0 to 128 [ 485.329025][ T9073] FAULT_INJECTION: forcing a failure. [ 485.329025][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 485.360315][ T9073] CPU: 0 PID: 9073 Comm: syz.3.2451 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 485.369948][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.379848][ T9073] Call Trace: [ 485.382966][ T9073] [ 485.385746][ T9073] dump_stack_lvl+0x151/0x1b7 [ 485.390258][ T9073] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 485.395552][ T9073] ? can_vma_merge_before+0x9b/0x2f0 [ 485.400672][ T9073] dump_stack+0x15/0x1e [ 485.404667][ T9073] should_fail_ex+0x3d0/0x520 [ 485.409185][ T9073] ? vm_area_dup+0x65/0x290 [ 485.413520][ T9073] __should_failslab+0xaf/0xf0 [ 485.418119][ T9073] should_failslab+0x9/0x20 [ 485.422458][ T9073] kmem_cache_alloc+0x3b/0x320 [ 485.427061][ T9073] vm_area_dup+0x65/0x290 [ 485.431223][ T9073] copy_vma+0x417/0x7f0 [ 485.435214][ T9073] ? vma_link+0x4a0/0x4a0 [ 485.439499][ T9073] ? __vm_enough_memory+0x119/0x390 [ 485.444525][ T9073] ? security_vm_enough_memory_mm+0x94/0xa0 [ 485.450261][ T9073] move_vma+0x597/0x1260 [ 485.454335][ T9073] ? cap_mmap_addr+0x169/0x2e0 [ 485.458934][ T9073] ? vma_to_resize+0x370/0x370 [ 485.463535][ T9073] ? selinux_mmap_addr+0xbe/0xe0 [ 485.468307][ T9073] ? security_mmap_addr+0x72/0x90 [ 485.473167][ T9073] ? get_unmapped_area+0x31d/0x380 [ 485.478115][ T9073] __se_sys_mremap+0xc61/0x16b0 [ 485.482808][ T9073] ? __x64_sys_mremap+0xd0/0xd0 [ 485.487491][ T9073] ? fput+0x15b/0x1b0 [ 485.491312][ T9073] ? __this_cpu_preempt_check+0x13/0x20 [ 485.496691][ T9073] ? __ia32_sys_read+0x90/0x90 [ 485.501289][ T9073] ? debug_smp_processor_id+0x17/0x20 [ 485.506496][ T9073] __x64_sys_mremap+0xbf/0xd0 [ 485.511010][ T9073] x64_sys_call+0xd7/0x9a0 [ 485.515263][ T9073] do_syscall_64+0x3b/0xb0 [ 485.519514][ T9073] ? clear_bhb_loop+0x55/0xb0 [ 485.524028][ T9073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.529756][ T9073] RIP: 0033:0x7fbf33b7e819 [ 485.534012][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.553459][ T9073] RSP: 002b:00007fbf34a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 485.561704][ T9073] RAX: ffffffffffffffda RBX: 00007fbf33d35fa0 RCX: 00007fbf33b7e819 [ 485.569511][ T9073] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000000020000000 [ 485.577320][ T9073] RBP: 00007fbf34a1a090 R08: 0000000020a00000 R09: 0000000000000000 [ 485.585262][ T9073] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 485.593153][ T9073] R13: 0000000000000000 R14: 00007fbf33d35fa0 R15: 00007ffcf6b1b788 [ 485.600975][ T9073] [ 485.609417][ T9069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 485.619292][ T9069] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 485.630838][ T9069] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 485.639074][ T9069] CPU: 0 PID: 9069 Comm: syz.0.2449 Not tainted 6.1.112-syzkaller-00034-g226e9f92a06c #0 [ 485.648710][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.658605][ T9069] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 485.665284][ T9069] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9e ef cf ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 81 ef cf ff 4c 8b 23 4d 85 e4 4c [ 485.684726][ T9069] RSP: 0018:ffffc900025cf6e0 EFLAGS: 00010202 [ 485.690629][ T9069] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000080000 [ 485.698441][ T9069] RDX: ffffc9000167a000 RSI: 00000000000036a2 RDI: 00000000000036a3 [ 485.706250][ T9069] RBP: ffffc900025cf7b0 R08: ffff888131f570a8 R09: 0000000000000001 [ 485.714069][ T9069] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 485.721874][ T9069] R13: dffffc0000000000 R14: ffff888131f570a8 R15: 0000000000000001 [ 485.729689][ T9069] FS: 00007f569b9ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 485.738451][ T9069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.744875][ T9069] CR2: 0000000020b63fe4 CR3: 0000000138dc9000 CR4: 00000000003506b0 [ 485.752700][ T9069] Call Trace: [ 485.755814][ T9069] [ 485.758595][ T9069] ? __die_body+0x62/0xb0 [ 485.762752][ T9069] ? die_addr+0x9f/0xd0 [ 485.766750][ T9069] ? exc_general_protection+0x317/0x4c0 [ 485.772136][ T9069] ? asm_exc_general_protection+0x27/0x30 [ 485.777686][ T9069] ? __ext4_journal_get_write_access+0xb0/0x690 [ 485.783761][ T9069] ? __ext4_journal_ensure_credits+0x470/0x470 [ 485.789749][ T9069] ? __kasan_check_read+0x11/0x20 [ 485.794611][ T9069] ext4_update_superblocks_fn+0x2dc/0x1300 [ 485.800261][ T9069] ? ext4_update_superblocks_fn+0x1300/0x1300 [ 485.806296][ T9069] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 485.811931][ T9069] ? ext4_update_overhead+0x170/0x170 [ 485.817151][ T9069] ext4_update_overhead+0x143/0x170 [ 485.822172][ T9069] ext4_fill_super+0x309b/0x8460 [ 485.826952][ T9069] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 485.833022][ T9069] ? snprintf+0xd6/0x120 [ 485.837104][ T9069] ? sb_set_blocksize+0xa8/0xf0 [ 485.841789][ T9069] get_tree_bdev+0x440/0x680 [ 485.846212][ T9069] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 485.852289][ T9069] ext4_get_tree+0x1c/0x20 [ 485.856541][ T9069] vfs_get_tree+0x88/0x290 [ 485.860797][ T9069] do_new_mount+0x2ba/0xb30 [ 485.865135][ T9069] ? do_move_mount_old+0x160/0x160 [ 485.870080][ T9069] ? security_capable+0x87/0xb0 [ 485.874769][ T9069] ? ns_capable+0x89/0xe0 [ 485.878937][ T9069] path_mount+0x671/0x1070 [ 485.883188][ T9069] ? user_path_at_empty+0x14e/0x1a0 [ 485.888222][ T9069] __se_sys_mount+0x2c4/0x3b0 [ 485.892739][ T9069] ? __x64_sys_mount+0xd0/0xd0 [ 485.897333][ T9069] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 485.903238][ T9069] __x64_sys_mount+0xbf/0xd0 [ 485.907664][ T9069] x64_sys_call+0x49d/0x9a0 [ 485.912001][ T9069] do_syscall_64+0x3b/0xb0 [ 485.916255][ T9069] ? clear_bhb_loop+0x55/0xb0 [ 485.920770][ T9069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.926497][ T9069] RIP: 0033:0x7f569ab7ffba [ 485.930752][ T9069] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.950199][ T9069] RSP: 002b:00007f569b9e9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 485.958562][ T9069] RAX: ffffffffffffffda RBX: 00007f569b9e9ef0 RCX: 00007f569ab7ffba [ 485.966371][ T9069] RDX: 0000000020000200 RSI: 0000000020000740 RDI: 00007f569b9e9eb0 [ 485.974175][ T9069] RBP: 0000000020000200 R08: 00007f569b9e9ef0 R09: 0000000000000002 [ 485.981985][ T9069] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000020000740 [ 485.989800][ T9069] R13: 00007f569b9e9eb0 R14: 000000000000024e R15: 00000000200006c0 [ 485.997618][ T9069] [ 486.000476][ T9069] Modules linked in: [ 486.010765][ T9069] ---[ end trace 0000000000000000 ]--- [ 486.017748][ T9069] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 486.025867][ T9069] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9e ef cf ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 81 ef cf ff 4c 8b 23 4d 85 e4 4c [ 486.045687][ T9069] RSP: 0018:ffffc900025cf6e0 EFLAGS: 00010202 [ 486.051686][ T9069] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000080000 [ 486.059570][ T9069] RDX: ffffc9000167a000 RSI: 00000000000036a2 RDI: 00000000000036a3 [ 486.067446][ T9069] RBP: ffffc900025cf7b0 R08: ffff888131f570a8 R09: 0000000000000001 [ 486.075280][ T9069] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 486.083155][ T9069] R13: dffffc0000000000 R14: ffff888131f570a8 R15: 0000000000000001 [ 486.091248][ T9069] FS: 00007f569b9ea6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 486.100060][ T9069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.106482][ T9069] CR2: 0000001b2e01dff8 CR3: 0000000138dc9000 CR4: 00000000003506b0 [ 486.114263][ T9069] Kernel panic - not syncing: Fatal exception [ 486.120367][ T9069] Kernel Offset: disabled [ 486.124489][ T9069] Rebooting in 86400 seconds..