last executing test programs: 3m5.471023831s ago: executing program 1 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000140)=[@exit_looper, @clear_death={0x400c630f, 0x1}], 0xc0, 0x0, &(0x7f00000001c0)="cea92a98976f3f8965326b8cc3f115725b9956e354c041586b83161dc1cbf3edc8100b664f6c56f893abf21df36b9a56c9437b6d2dacf6d4767d35a0bf3696637ac9445016a18e563bc9bcf7740da49f1229614a0ed7fcf6af43d2cbda73309ac2d623611f67cce2a61c5c4467812e1ee3d2516a9e6db3bfd570eece3da262bac46d8b1166c8eacc6a43ef4859ea9c8550646ba340c0d28fa9a3660abe2dd90bca2916d196a7e75b917b466389b2cb2005c3646f98093b1d25083a7819780103"}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x401, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000003c0)=0x1e) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) getdents(r6, &(0x7f0000001400)=""/4091, 0xffb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685557f46c3f86dd", 0x6e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3m5.395037998s ago: executing program 1 (id=699): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000010) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3m3.689889993s ago: executing program 1 (id=709): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) (async) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xb}}], 0x30}}], 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) (async) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) utimes(&(0x7f0000000300)='./file1/file0\x00', 0x0) 3m3.585791721s ago: executing program 1 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe37) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/19, 0x13}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) 3m2.731097359s ago: executing program 1 (id=715): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x2000c058) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r8 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x7fff, 0x28001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(r9, 0x1277, &(0x7f00000000c0)=0x2b60000) 3m2.607570169s ago: executing program 1 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x400000000}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r7 = dup3(0xffffffffffffffff, r6, 0x0) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x2, 0x1, 0xfffffffe, 0x8a, 0x81, "af789f80c4c7d41c3e4f53b7aceb4b4a270aee", 0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) 3m2.512517486s ago: executing program 32 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x400000000}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r7 = dup3(0xffffffffffffffff, r6, 0x0) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x2, 0x1, 0xfffffffe, 0x8a, 0x81, "af789f80c4c7d41c3e4f53b7aceb4b4a270aee", 0x3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) 1m32.668147751s ago: executing program 2 (id=1096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) ioprio_get$pid(0x1, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x178, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_MARK={0x10, 0xa, {0xffff, 0x6}}, @TCA_U32_SEL={0x124, 0x5, {0x1, 0xc5, 0xe, 0x4, 0x401, 0x3, 0x9, 0x5, [{0x9, 0x4, 0x200}, {0xd, 0x4, 0x3ff, 0xc}, {0x6c86, 0xfffffff7, 0x0, 0xc9}, {0x2, 0xffffff00, 0x1, 0xe5b}, {0xf5, 0xdb, 0xfffffffb, 0x1}, {0x14, 0x9, 0x3, 0x3ff}, {0x9, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x9, 0xfffffff8}, {0xfffffffa, 0x6, 0x10, 0x6}, {0x2, 0xffff, 0x0, 0x1}, {0x8, 0x0, 0xf33, 0x6}, {0x6, 0x3, 0x4, 0x10}, {0x888, 0x9, 0x12a, 0x6066}, {0xfffffff1, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x8, 0x1}, {0x8001, 0x3, 0x3, 0xa}, {0x0, 0x4, 0xa, 0x8}]}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x14, r1, 0x62c21a4ade68aba1, 0x70bd25, 0x0, {{0x32}, {@val={0x8, 0x117, 0x1005c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4853}, 0x20000010) 1m31.122319634s ago: executing program 2 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000700bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=iso8859-15,umask=00000000000000000000003,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000253,discard,fmask=0000\x00\x0000000000000000010,utdiocharset=macinuit,allow_utime=00000000000147070,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) 1m30.299887999s ago: executing program 2 (id=1103): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x3]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x407}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4044880) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x3]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x407}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4044880) (async) 1m29.847558135s ago: executing program 2 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe37) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/19, 0x13}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@index_on}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) 1m28.556946167s ago: executing program 2 (id=1107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) ioprio_get$pid(0x1, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x178, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_MARK={0x10, 0xa, {0xffff, 0x6}}, @TCA_U32_SEL={0x124, 0x5, {0x1, 0xc5, 0xe, 0x4, 0x401, 0x3, 0x9, 0x5, [{0x9, 0x4, 0x200}, {0xd, 0x4, 0x3ff, 0xc}, {0x6c86, 0xfffffff7, 0x0, 0xc9}, {0x2, 0xffffff00, 0x1, 0xe5b}, {0xf5, 0xdb, 0xfffffffb, 0x1}, {0x14, 0x9, 0x3, 0x3ff}, {0x9, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x9, 0xfffffff8}, {0xfffffffa, 0x6, 0x10, 0x6}, {0x2, 0xffff, 0x0, 0x1}, {0x8, 0x0, 0xf33, 0x6}, {0x6, 0x3, 0x4, 0x10}, {0x888, 0x9, 0x12a, 0x6066}, {0xfffffff1, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x8, 0x1}, {0x8001, 0x3, 0x3, 0xa}, {0x0, 0x4, 0xa, 0x8}]}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x14, r1, 0x62c21a4ade68aba1, 0x70bd25, 0x0, {{0x32}, {@val={0x8, 0x117, 0x1005c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4853}, 0x20000010) 1m28.178777178s ago: executing program 2 (id=1113): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x2000c058) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0x2b60000) 1m27.582513215s ago: executing program 33 (id=1113): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x2000c058) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0x2b60000) 1m8.613959031s ago: executing program 6 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x25, 0x3, {0x3, 0xdba03bf3172d1dfa, "fb"}}, 0x0}, 0x0) 1m6.899228097s ago: executing program 6 (id=1192): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = signalfd(r0, &(0x7f0000000180)={[0x4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0), 0x4) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r7, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/188, 0xbc}}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) open$dir(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x14000, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x49, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1m6.836737063s ago: executing program 6 (id=1193): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf000000, 0x1) 1m6.804000905s ago: executing program 6 (id=1194): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2214001, &(0x7f0000000440)={[{@numtail}, {@nonumtail}, {@utf8no}, {@shortname_win95}, {@shortname_winnt}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlateno}, {@uni_xlate}]}, 0x23, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004940)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 1m6.802401865s ago: executing program 6 (id=1195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x104, 0x2, 0x0, 0x1}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb9"], 0xfdef) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0xffffff15, 0x787, 0x8001, 0x2, 0x401, 0x1c45, 0x7, 0x40, 0xffffffff, 0x8, 0x400009}) sched_setscheduler(0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.733877821s ago: executing program 6 (id=1197): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x2000c058) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0x2b60000) 1m6.73310716s ago: executing program 34 (id=1197): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x2000c058) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000000c0)=0x2b60000) 13.72869135s ago: executing program 7 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)) 13.665917985s ago: executing program 7 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x25, 0x3, {0x3, 0xdba03bf3172d1dfa, "fb"}}, 0x0}, 0x0) 12.898086136s ago: executing program 0 (id=1458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba0000000066ba2100ec0f300fc79d53bf0000c4b9e16dc301012202", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x200000000000000, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="b01db18ab592bbe7bedc0940a8fc781fe96ff5d819dd7ecb24c3d74df60d476cafcd2530f83ec2db3ce38f9f52bd4f835c028dcc7ce8d264179a90aebe044dec7656c3f25fdf5b1eceb43a16855d36d34cbb13fe5ce22e2ada7d9820bbc0ff4b82e99f183af45b2e8f4884c18287fd70547f7160c5a96f7c0e03d65b328eb7461e77287f7a7dcb330bbb7310a5ed6cd939dd14e7042783bfab91748048ebc7c33e7078d34858769f7c3006a2f63c32daaef9efcb", @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000640)='ext4_ext_convert_to_initialized_fastpath\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000020000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000040000000f001e370392272b94e58be1", @ANYRES32=r7, @ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xd9, 0xe5, 0xcb, 0x8, 0x5ac, 0x8514, 0x96c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0x27, 0x7, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc6, 0x40, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x23e4, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x9, 0x2, 0x3, 0x8, 0x1, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x0, 0xff}, @as_header={0x7, 0x24, 0x1, 0x8, 0x87, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xfb, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x440, 0xb, 0x0, 0x6, {0x7, 0x25, 0x1, 0x3, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x8c, 0x2, "", "9a6eab"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x3, 'W', "fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2a, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x7, 0x101}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 11.472328389s ago: executing program 0 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 10.534357503s ago: executing program 0 (id=1473): io_setup(0x197, &(0x7f0000000440)=0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x1, 0x378, &(0x7f0000000b40)="$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") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_lock', 0x8402, 0x37) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) 10.523764964s ago: executing program 7 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f7ba4f24880ddb7740cdddff6354566e5ed1f550674c04ef119b42574a04bd5f3163f54c53ca5154f25bdef802498fe7e97a240808b7c4f776303b59f9", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getrlimit(0xa, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x772b, 0x0, 0x40000}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$packet(r6, &(0x7f0000000280)="0f30", 0x2, 0x0, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 7.496697065s ago: executing program 7 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)) 7.495672955s ago: executing program 4 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) sigaltstack(0x0, 0x0) 7.495361345s ago: executing program 7 (id=1478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba0000000066ba2100ec0f300fc79d53bf0000c4b9e16dc301012202", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x200000000000000, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="b01db18ab592bbe7bedc0940a8fc781fe96ff5d819dd7ecb24c3d74df60d476cafcd2530f83ec2db3ce38f9f52bd4f835c028dcc7ce8d264179a90aebe044dec7656c3f25fdf5b1eceb43a16855d36d34cbb13fe5ce22e2ada7d9820bbc0ff4b82e99f183af45b2e8f4884c18287fd70547f7160c5a96f7c0e03d65b328eb7461e77287f7a7dcb330bbb7310a5ed6cd939dd14e7042783bfab91748048ebc7c33e7078d34858769f7c3006a2f63c32daaef9efcb", @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000640)='ext4_ext_convert_to_initialized_fastpath\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000002000000deff0000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000040000000f001e370392272b94e58be1", @ANYRES32=r7, @ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xd9, 0xe5, 0xcb, 0x8, 0x5ac, 0x8514, 0x96c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0x27, 0x7, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc6, 0x40, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x23e4, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x9, 0x2, 0x3, 0x8, 0x1, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x0, 0xff}, @as_header={0x7, 0x24, 0x1, 0x8, 0x87, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xfb, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x440, 0xb, 0x0, 0x6, {0x7, 0x25, 0x1, 0x3, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x8c, 0x2, "", "9a6eab"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x3, 'W', "fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2a, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x7, 0x101}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 7.495268165s ago: executing program 4 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 7.494834285s ago: executing program 4 (id=1481): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000500000002000000020000000500000005a908e37c1374678819f945a0605e6a237d37f44d6e647f00b7a9817e7d7399a2cd646c235dc0efb5cb8ca3be3151bb4973e1d4d49fe13aedff3127859f83666eb87f699010abcb3c32d34a9523b16e8f5a61c01d05f6c13ca339a72bd4b86582f38a09855210ed0be09a11dbef199f04e4a2c687cce0270de9f831e66362ba43ecf8b22a1af5030035649ccce12f40fdcff4d47af0d8c64a830baa44e9c7ec0681eef6b541dba936946206121096f05e90bb6c40e56c8a3a0d5889a34170127961e64ba84e188607c10c055ecfe5ec40ec1c893ce5a500", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x1000, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x0, 0x0, 0x0, 0xb7, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) 7.332301507s ago: executing program 0 (id=1485): openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x27}, 0x94) futex(&(0x7f0000001400)=0x1, 0x80, 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x2) close_range(r0, r0, 0x0) 7.076283578s ago: executing program 4 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) flock(r4, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r7, 0x25, 0x0, @val=@tracing={0x0, 0x20000000}}, 0x20) 5.867061784s ago: executing program 0 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r6, 0x25, 0x0, @val=@tracing={0x0, 0x20000000}}, 0x20) 5.820489878s ago: executing program 4 (id=1488): r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 2.684124197s ago: executing program 4 (id=1493): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x108f}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) close(0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r6}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8919, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.683639367s ago: executing program 0 (id=1494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x222a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xb, 0x7, 0x1, {0x22, 0xf04}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x9, 0x50}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7, 0x8, 0x6, 0x8}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "1e0a9873c2e5ca0d99a34d4414007931"}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x807}}, {0x48, &(0x7f0000000180)=@string={0x48, 0x3, "76f7e429cdba899a6300bdf350ae61a90495496d3d1e4d7b858882de87a71104bbb6aa9caa2670fda41896b4e88b184ac56963e2c7fdc28798d91a3df4122d006ec12148c53c"}}, {0x61, &(0x7f0000000780)=ANY=[@ANYBLOB="6103f9ce5b299029faf14b657a9b3486a98b2d4b7dfac3117eddb9830ca4683cc4c9ab6ca35d824cd6137c2556f1c72b3c8fdbe2fb14fc6a321ac25565794350841e1d9e95d1b111b147592c493c2934319ed1bdad30b2a4d1a67c5341b5e216d77e000000ff9f3e182d1da8eadfa016a4a523005a5fe99389f54bc923ec8d8014f1b531cd68c23d99b6bccd099b3ab3cf06178f7af8e5f9ce4783f6b52d70170edd8600be7ff1c75875c501c019d8210962ca566e6bd06bd91bf0ec44b1acdc78108d2597577bf4645d953c2d553156f2f711d6e88554b118830db05f9689438f96e9ab34fa78c076fc5bc6b3ed003fadf9b2cac8c6ae"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40d}}, {0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="050317eb19a40f64f708fafb65e9a073551f069b424a96c293b001897dbfe79e89fe3b904e9e6b07e8a2edf4bd940d2d043c45371016aebc51802c06360f04a0d8beddf60000000000004994eacc2b56f22601000000bfb422ea0956f08eaf9df046762380e376b1a042f05c7fffffffffffffffe241968a581b6eb8ad2ba1a2214e9ea90100f480d5b96d6ad810225bb79d499d8048befc2e59150a98a5a2691c56cc25cccb8e18a17793b7016646b2e1cfa3ccfac554c94552c75d0742b025c2ff44b21c79930a"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x438}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1ffffffffffffd60, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000009c0)=""/171, 0xab}, {&(0x7f0000000880)=""/68, 0x44}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f0000000a80)=""/32, 0x20}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/111, 0x6f}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/91, 0x5b}, {&(0x7f0000001c80)=""/127, 0x7f}], 0xa, &(0x7f0000001dc0)=""/193, 0xc1}, 0x9}, {{&(0x7f0000001ec0)=@alg, 0x80, &(0x7f0000001f40), 0x0, &(0x7f0000001f80)=""/220, 0xdc}, 0x2}, {{&(0x7f0000002080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)=""/90, 0x5a}], 0x1, &(0x7f00000021c0)=""/189, 0xbd}, 0x4}, {{&(0x7f0000002280)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/143, 0x8f}], 0x1, &(0x7f0000002400)=""/146, 0x92}, 0xffffffd9}], 0x4, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 2.569737756s ago: executing program 7 (id=1497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba0000000066ba2100ec0f300fc79d53bf0000c4b9e16dc301012202", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x200000000000000, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="b01db18ab592bbe7bedc0940a8fc781fe96ff5d819dd7ecb24c3d74df60d476cafcd2530f83ec2db3ce38f9f52bd4f835c028dcc7ce8d264179a90aebe044dec7656c3f25fdf5b1eceb43a16855d36d34cbb13fe5ce22e2ada7d9820bbc0ff4b82e99f183af45b2e8f4884c18287fd70547f7160c5a96f7c0e03d65b328eb7461e77287f7a7dcb330bbb7310a5ed6cd939dd14e7042783bfab91748048ebc7c33e7078d34858769f7c3006a2f63c32daaef9efcb", @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000640)='ext4_ext_convert_to_initialized_fastpath\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000020000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000040000000f001e370392272b94e58be1", @ANYRES32=r7, @ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xd9, 0xe5, 0xcb, 0x8, 0x5ac, 0x8514, 0x96c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0x27, 0x7, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc6, 0x40, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x23e4, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x9, 0x2, 0x3, 0x8, 0x1, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x0, 0xff}, @as_header={0x7, 0x24, 0x1, 0x8, 0x87, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xfb, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x440, 0xb, 0x0, 0x6, {0x7, 0x25, 0x1, 0x3, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x8c, 0x2, "", "9a6eab"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x3, 'W', "fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2a, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x7, 0x101}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 2.550535087s ago: executing program 3 (id=1498): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = signalfd(r0, &(0x7f0000000180)={[0x4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0), 0x4) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r7, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/188, 0xbc}}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) open$dir(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x14000, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x49, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r7], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.478693213s ago: executing program 3 (id=1499): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000076a7d687000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x48) 2.443647826s ago: executing program 5 (id=1500): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000a80)={[{@barrier_val}, {@resuid}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYRESOCT]) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000197}}}}}}, 0x0) 2.443193386s ago: executing program 5 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xfffffffc}]}]}}, &(0x7f00000018c0)=""/235, 0x32, 0xeb, 0x1}, 0x20) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) 1.343865473s ago: executing program 5 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffc}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x30}}], 0x1, 0x400ff97) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r4, 0x5501) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) bind$tipc(r6, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r8, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 1.343239134s ago: executing program 3 (id=1503): r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 1.236603412s ago: executing program 3 (id=1504): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$hwrng(0xffffff9c, 0x0, 0x202, 0x0) (async) r1 = openat$hwrng(0xffffff9c, 0x0, 0x202, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8805}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f00003d0000/0x4000)=nil, 0x4000}) socket(0x1f, 0x800, 0xde6) (async) socket(0x1f, 0x800, 0xde6) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x374b) 569.971015ms ago: executing program 3 (id=1505): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]}, 0xf1000003}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 186.411015ms ago: executing program 5 (id=1506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x9900, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xffffffffffffff58, 0x0, &(0x7f0000000240)="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", 0x0, 0xf000, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) 142.912269ms ago: executing program 3 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba0000000066ba2100ec0f300fc79d53bf0000c4b9e16dc301012202", 0x65}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x200000000000000, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="b01db18ab592bbe7bedc0940a8fc781fe96ff5d819dd7ecb24c3d74df60d476cafcd2530f83ec2db3ce38f9f52bd4f835c028dcc7ce8d264179a90aebe044dec7656c3f25fdf5b1eceb43a16855d36d34cbb13fe5ce22e2ada7d9820bbc0ff4b82e99f183af45b2e8f4884c18287fd70547f7160c5a96f7c0e03d65b328eb7461e77287f7a7dcb330bbb7310a5ed6cd939dd14e7042783bfab91748048ebc7c33e7078d34858769f7c3006a2f63c32daaef9efcb", @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000640)='ext4_ext_convert_to_initialized_fastpath\x00', r5}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000002000000deff0000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000040000000f001e370392272b94e58be1", @ANYRES32=r7, @ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xd9, 0xe5, 0xcb, 0x8, 0x5ac, 0x8514, 0x96c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0x27, 0x7, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc6, 0x40, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x23e4, 0x8}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x9, 0x2, 0x3, 0x8, 0x1, 0xa], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x0, 0xff}, @as_header={0x7, 0x24, 0x1, 0x8, 0x87, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xfb, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x440, 0xb, 0x0, 0x6, {0x7, 0x25, 0x1, 0x3, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x8c, 0x2, "", "9a6eab"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x3, 'W', "fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2a, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x7, 0x101}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 49.844046ms ago: executing program 5 (id=1508): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x8, 0x0) getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x7, 0x6, {{0x2e, 0x4, 0x2, 0x20, 0xb8, 0x66, 0x0, 0x40, 0x4, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x6, 0x1, 0xd, [{@local, 0x4}, {@local, 0x9}, {@broadcast, 0x401}, {@broadcast}, {@multicast1, 0x101}, {@empty, 0x1}, {@local, 0xffffffff}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x5a, 0x1, [{0x2, 0x11, "5357cc6ddb64ce8f7c2a8bf0e36ed7"}, {0x2, 0xd, "c80940235b4e7555c96524"}, {0x2, 0x2}, {0x0, 0xc, "f9a804eecbcd681c56f7"}, {0x7, 0x8, "b7b86dbfe001"}, {0x6, 0x6, "dfd6b7fb"}, {0x2, 0xa, "78f4cd1d4be1d365"}, {0x5, 0xd, "6efcb8874c2b6dce3a4eff"}, {0x6, 0x3, "a6"}]}, @end, @ra={0x94, 0x4}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000600)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x4, 0x1, 0x3, 0x2, 0x9, 0x100, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x6, 0x65add9eaf7315cfe, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @generic={0x28, 0x7, 0x9, 0x1a5a, 0xa}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1a91c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (fail_nth: 7) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) kernel console output (not intermixed with test programs): d836c3d8 #0 [ 298.821058][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.831116][ T3789] Call Trace: [ 298.834397][ T3789] [ 298.837365][ T3789] __dump_stack+0x21/0x24 [ 298.841708][ T3789] dump_stack_lvl+0xee/0x150 [ 298.846303][ T3789] ? __cfi_dump_stack_lvl+0x8/0x8 [ 298.851332][ T3789] ? do_syscall_64+0x4c/0xa0 [ 298.855935][ T3789] dump_stack+0x15/0x24 [ 298.860100][ T3789] should_fail_ex+0x3d4/0x520 [ 298.864782][ T3789] __should_failslab+0xac/0xf0 [ 298.869552][ T3789] ? sk_prot_alloc+0xed/0x320 [ 298.874245][ T3789] should_failslab+0x9/0x20 [ 298.878762][ T3789] __kmem_cache_alloc_node+0x3d/0x2c0 [ 298.884142][ T3789] ? sk_prot_alloc+0xed/0x320 [ 298.888828][ T3789] __kmalloc+0xa1/0x1e0 [ 298.893005][ T3789] sk_prot_alloc+0xed/0x320 [ 298.897524][ T3789] sk_alloc+0x3b/0x460 [ 298.901604][ T3789] ? __kasan_check_write+0x14/0x20 [ 298.906731][ T3789] bpf_prog_test_run_skb+0x37e/0x1290 [ 298.912120][ T3789] ? __fget_files+0x2d5/0x330 [ 298.916815][ T3789] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 298.922671][ T3789] bpf_prog_test_run+0x3e3/0x630 [ 298.927613][ T3789] ? slab_free_freelist_hook+0xc2/0x190 [ 298.933168][ T3789] ? bpf_prog_query+0x270/0x270 [ 298.938024][ T3789] ? selinux_bpf+0xce/0xf0 [ 298.942450][ T3789] ? security_bpf+0x93/0xb0 [ 298.946960][ T3789] __sys_bpf+0x56d/0x780 [ 298.951216][ T3789] ? bpf_link_show_fdinfo+0x320/0x320 [ 298.956603][ T3789] ? __cfi_ksys_write+0x10/0x10 [ 298.961477][ T3789] ? debug_smp_processor_id+0x17/0x20 [ 298.966864][ T3789] __x64_sys_bpf+0x7c/0x90 [ 298.971301][ T3789] x64_sys_call+0x488/0x9a0 [ 298.975819][ T3789] do_syscall_64+0x4c/0xa0 [ 298.980251][ T3789] ? clear_bhb_loop+0x30/0x80 [ 298.984942][ T3789] ? clear_bhb_loop+0x30/0x80 [ 298.989635][ T3789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.995536][ T3789] RIP: 0033:0x7f155478ebe9 [ 298.999961][ T3789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.019581][ T3789] RSP: 002b:00007f15555c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.028095][ T3789] RAX: ffffffffffffffda RBX: 00007f15549b5fa0 RCX: 00007f155478ebe9 [ 299.036071][ T3789] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 299.044050][ T3789] RBP: 00007f15555c9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.052031][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.060007][ T3789] R13: 00007f15549b6038 R14: 00007f15549b5fa0 R15: 00007ffce0eb16d8 [ 299.067996][ T3789] [ 300.302877][ T39] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 300.609961][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 300.609974][ T28] audit: type=1400 audit(1755464741.092:373): avc: denied { getopt } for pid=3815 comm="syz.5.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.667188][ T3822] FAULT_INJECTION: forcing a failure. [ 300.667188][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 300.680664][ T3822] CPU: 0 PID: 3822 Comm: syz.5.944 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 300.690395][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.700449][ T3822] Call Trace: [ 300.703722][ T3822] [ 300.706649][ T3822] __dump_stack+0x21/0x24 [ 300.710986][ T3822] dump_stack_lvl+0xee/0x150 [ 300.715578][ T3822] ? __cfi_dump_stack_lvl+0x8/0x8 [ 300.720619][ T3822] dump_stack+0x15/0x24 [ 300.724775][ T3822] should_fail_ex+0x3d4/0x520 [ 300.729453][ T3822] __should_failslab+0xac/0xf0 [ 300.734217][ T3822] ? v9fs_session_init+0xaf/0x16a0 [ 300.739325][ T3822] should_failslab+0x9/0x20 [ 300.743833][ T3822] __kmem_cache_alloc_node+0x3d/0x2c0 [ 300.749206][ T3822] ? v9fs_session_init+0xaf/0x16a0 [ 300.754317][ T3822] __kmalloc_node_track_caller+0xa0/0x1e0 [ 300.760049][ T3822] ? do_new_mount+0x25a/0xa20 [ 300.764744][ T3822] ? path_mount+0x675/0x1010 [ 300.769333][ T3822] ? __se_sys_mount+0x318/0x380 [ 300.774194][ T3822] kstrdup+0x3b/0x80 [ 300.778093][ T3822] v9fs_session_init+0xaf/0x16a0 [ 300.783037][ T3822] ? __cfi_v9fs_session_init+0x10/0x10 [ 300.788499][ T3822] ? kasan_save_alloc_info+0x25/0x30 [ 300.793795][ T3822] ? __kasan_kmalloc+0x95/0xb0 [ 300.798562][ T3822] ? v9fs_mount+0xaf/0xaa0 [ 300.802981][ T3822] ? kmalloc_trace+0x40/0xb0 [ 300.807575][ T3822] v9fs_mount+0xc5/0xaa0 [ 300.811821][ T3822] ? __cfi_v9fs_mount+0x10/0x10 [ 300.816675][ T3822] ? cap_capable+0x1aa/0x230 [ 300.820057][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 300.821270][ T3822] legacy_get_tree+0xfe/0x1a0 [ 300.827644][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.831045][ T3822] ? __cfi_v9fs_mount+0x10/0x10 [ 300.831073][ T3822] vfs_get_tree+0x9a/0x270 [ 300.831092][ T3822] do_new_mount+0x25a/0xa20 [ 300.831112][ T3822] path_mount+0x675/0x1010 [ 300.831130][ T3822] ? user_path_at_empty+0x161/0x1c0 [ 300.831145][ T3822] __se_sys_mount+0x318/0x380 [ 300.831163][ T3822] ? __x64_sys_mount+0xd0/0xd0 [ 300.831181][ T3822] ? __cfi_ksys_write+0x10/0x10 [ 300.831200][ T3822] __x64_sys_mount+0xbf/0xd0 [ 300.831218][ T3822] x64_sys_call+0x65d/0x9a0 [ 300.831245][ T3822] do_syscall_64+0x4c/0xa0 [ 300.831266][ T3822] ? clear_bhb_loop+0x30/0x80 [ 300.831283][ T3822] ? clear_bhb_loop+0x30/0x80 [ 300.831299][ T3822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.831314][ T3822] RIP: 0033:0x7f4be398ebe9 [ 300.831330][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.831346][ T3822] RSP: 002b:00007f4be4889038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.831365][ T3822] RAX: ffffffffffffffda RBX: 00007f4be3bb5fa0 RCX: 00007f4be398ebe9 [ 300.831377][ T3822] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 300.831388][ T3822] RBP: 00007f4be4889090 R08: 0000200000000140 R09: 0000000000000000 [ 300.831400][ T3822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.831411][ T3822] R13: 00007f4be3bb6038 R14: 00007f4be3bb5fa0 R15: 00007ffd8fefe838 [ 300.831426][ T3822] [ 300.881974][ T28] audit: type=1400 audit(1755464741.372:374): avc: denied { ioctl } for pid=3823 comm="syz.5.945" path="socket:[33615]" dev="sockfs" ino=33615 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 301.049424][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.059280][ T39] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 301.137200][ T715] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 301.178652][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.188451][ T39] usb 1-1: config 0 descriptor?? [ 301.944182][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 301.961088][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 301.968718][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 301.979733][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 301.990567][ T715] usb 3-1: Using ep0 maxpacket: 16 [ 301.996894][ T715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.007219][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 302.014824][ T715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.017434][ T39] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 302.025866][ T715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.043016][ T715] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 302.062610][ T715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.072445][ T715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 302.080518][ T715] usb 3-1: SerialNumber: syz [ 302.087812][ T715] hub 3-1:1.0: bad descriptor, ignoring hub [ 302.094043][ T715] hub: probe of 3-1:1.0 failed with error -5 [ 302.100336][ T715] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 302.110193][ T39] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf3 found [ 302.120073][ T2340] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 302.124438][ T39] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf4 found [ 302.153153][ T39] usb 1-1: USB disconnect, device number 27 [ 302.283008][ T28] audit: type=1400 audit(1755464742.772:375): avc: denied { mounton } for pid=3846 comm="syz.3.951" path="/191/file0" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 302.341058][ T2340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.352070][ T2340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.361843][ T2340] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 302.370988][ T19] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 302.378570][ T2340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.387279][ T2340] usb 6-1: config 0 descriptor?? [ 302.561041][ T19] usb 5-1: config 7 has an invalid interface number: 39 but max is 0 [ 302.569281][ T19] usb 5-1: config 7 has no interface number 0 [ 302.575414][ T19] usb 5-1: config 7 interface 39 has no altsetting 0 [ 302.583534][ T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 302.592720][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.600855][ T19] usb 5-1: Product: syz [ 302.605128][ T19] usb 5-1: Manufacturer: syz [ 302.609736][ T19] usb 5-1: SerialNumber: syz [ 302.838810][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.853775][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.006798][ T2340] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 303.018976][ T19] usb 5-1: Found UVC 0.00 device syz (05ac:8514) [ 303.025400][ T19] usb 5-1: No valid video chain found. [ 303.035438][ T19] usb 5-1: USB disconnect, device number 25 [ 303.080472][ T2340] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 303.846173][ T39] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 303.880424][ T2842] usb 3-1: USB disconnect, device number 30 [ 304.030100][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 304.037294][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 304.062843][ T39] usb 1-1: config 7 has an invalid interface number: 2 but max is 0 [ 304.128741][ T39] usb 1-1: config 7 has no interface number 0 [ 304.172210][ T39] usb 1-1: config 7 interface 2 has no altsetting 0 [ 304.206200][ T39] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=1b.eb [ 304.246017][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.282184][ T39] usb 1-1: Product: syz [ 304.293281][ T39] usb 1-1: Manufacturer: syz [ 304.298500][ T39] usb 1-1: SerialNumber: syz [ 304.576835][ T2340] cp2112 0003:10C4:EA90.0018: error setting SMBus config [ 304.584862][ T3862] xt_socket: unknown flags 0x8 [ 304.598125][ T39] ftdi_sio 1-1:7.2: FTDI USB Serial Device converter detected [ 304.720706][ T39] ftdi_sio ttyUSB0: unknown device type: 0x1beb [ 304.753140][ T39] usb 1-1: USB disconnect, device number 28 [ 304.770669][ T39] ftdi_sio 1-1:7.2: device disconnected [ 304.812029][ T28] audit: type=1400 audit(1755464745.302:376): avc: denied { write } for pid=3880 comm="syz.4.960" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 304.828666][ T2340] cp2112: probe of 0003:10C4:EA90.0018 failed with error -71 [ 304.846271][ T2340] usb 6-1: USB disconnect, device number 5 [ 304.911564][ T3884] fido_id[3884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 305.200060][ T2340] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 305.208775][ T3898] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 305.353040][ T3898] SELinux: failed to load policy [ 305.994988][ T2340] usb 6-1: Using ep0 maxpacket: 16 [ 306.008039][ T2340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.019101][ T2340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.028889][ T2340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.043814][ T2340] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.052951][ T2340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.063513][ T2340] usb 6-1: config 0 descriptor?? [ 306.710134][ T3878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.727152][ T3878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.770262][ T28] audit: type=1400 audit(1755464747.252:377): avc: denied { getopt } for pid=3877 comm="syz.5.959" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.513329][ T28] audit: type=1400 audit(1755464748.002:378): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.551504][ T2340] usbhid 6-1:0.0: can't add hid device: -71 [ 308.558091][ T2340] usbhid: probe of 6-1:0.0 failed with error -71 [ 308.566044][ T2340] usb 6-1: USB disconnect, device number 6 [ 308.580973][ T3967] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 308.680169][ T3977] FAULT_INJECTION: forcing a failure. [ 308.680169][ T3977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.693521][ T3977] CPU: 0 PID: 3977 Comm: syz.0.986 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 308.703247][ T3977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.713284][ T3977] Call Trace: [ 308.716544][ T3977] [ 308.719453][ T3977] __dump_stack+0x21/0x24 [ 308.723768][ T3977] dump_stack_lvl+0xee/0x150 [ 308.728337][ T3977] ? __cfi_dump_stack_lvl+0x8/0x8 [ 308.733364][ T3977] dump_stack+0x15/0x24 [ 308.737501][ T3977] should_fail_ex+0x3d4/0x520 [ 308.742165][ T3977] should_fail+0xb/0x10 [ 308.746327][ T3977] should_fail_usercopy+0x1a/0x20 [ 308.751332][ T3977] _copy_from_iter+0x190/0xfd0 [ 308.756077][ T3977] ? __cfi__copy_from_iter+0x10/0x10 [ 308.761338][ T3977] copy_page_from_iter+0x1d2/0x2b0 [ 308.766429][ T3977] ? skb_page_frag_refill+0x221/0x3a0 [ 308.771781][ T3977] tun_get_user+0x807/0x3320 [ 308.776379][ T3977] ? tun_do_read+0x1c20/0x1c20 [ 308.781129][ T3977] ? __kasan_check_write+0x14/0x20 [ 308.786223][ T3977] ? ref_tracker_alloc+0x30f/0x430 [ 308.791313][ T3977] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 308.796754][ T3977] ? avc_policy_seqno+0x1b/0x70 [ 308.801587][ T3977] ? selinux_file_permission+0x2a5/0x510 [ 308.807204][ T3977] tun_chr_write_iter+0x1fb/0x300 [ 308.812228][ T3977] vfs_write+0x5db/0xca0 [ 308.816451][ T3977] ? slab_free_freelist_hook+0xc2/0x190 [ 308.821979][ T3977] ? __cfi_vfs_write+0x10/0x10 [ 308.826730][ T3977] ? __fget_files+0x2d5/0x330 [ 308.831415][ T3977] ? __fdget_pos+0x1f2/0x380 [ 308.835985][ T3977] ? ksys_write+0x71/0x240 [ 308.840388][ T3977] ksys_write+0x140/0x240 [ 308.844699][ T3977] ? __cfi_ksys_write+0x10/0x10 [ 308.849527][ T3977] ? debug_smp_processor_id+0x17/0x20 [ 308.854878][ T3977] __x64_sys_write+0x7b/0x90 [ 308.859450][ T3977] x64_sys_call+0x27b/0x9a0 [ 308.863930][ T3977] do_syscall_64+0x4c/0xa0 [ 308.868333][ T3977] ? clear_bhb_loop+0x30/0x80 [ 308.873001][ T3977] ? clear_bhb_loop+0x30/0x80 [ 308.877687][ T3977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.883559][ T3977] RIP: 0033:0x7fe6a6f8d69f [ 308.887954][ T3977] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 308.907542][ T3977] RSP: 002b:00007fe6a7ea7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 308.915958][ T3977] RAX: ffffffffffffffda RBX: 00007fe6a71b5fa0 RCX: 00007fe6a6f8d69f [ 308.923930][ T3977] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 308.931879][ T3977] RBP: 00007fe6a7ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.939849][ T3977] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 308.947797][ T3977] R13: 00007fe6a71b6038 R14: 00007fe6a71b5fa0 R15: 00007ffe02d5c9b8 [ 308.955751][ T3977] [ 308.966121][ T19] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 308.974399][ T3979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.987'. [ 310.514417][ T28] audit: type=1400 audit(1755464751.002:379): avc: denied { setopt } for pid=3998 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 310.546863][ T19] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 310.555532][ T19] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 310.565934][ T19] usb 5-1: config 0 has no interface number 0 [ 310.771949][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 310.782895][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.791245][ T19] usb 5-1: Product: syz [ 310.795524][ T19] usb 5-1: Manufacturer: syz [ 310.800468][ T19] usb 5-1: SerialNumber: syz [ 310.805552][ T19] usb 5-1: config 0 descriptor?? [ 310.840086][ T715] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 311.030661][ T434] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 311.041147][ T715] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 311.041924][ T1654] usb 5-1: USB disconnect, device number 26 [ 311.053246][ T715] usb 1-1: config 0 interface 0 has no altsetting 0 [ 311.067278][ T715] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 311.076689][ T715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.087747][ T715] usb 1-1: config 0 descriptor?? [ 311.093082][ T3996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.272172][ T434] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 311.281371][ T434] usb 4-1: config 7 has no interface number 0 [ 311.606099][ T715] uclogic 0003:5543:0042.0019: item fetching failed at offset 0/3 [ 311.632206][ T715] uclogic 0003:5543:0042.0019: parse failed [ 311.658729][ T715] uclogic: probe of 0003:5543:0042.0019 failed with error -22 [ 311.883388][ T2340] usb 1-1: USB disconnect, device number 29 [ 312.071627][ T434] usb 4-1: config 7 interface 39 has no altsetting 0 [ 312.157992][ T434] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 312.167191][ T434] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.175318][ T434] usb 4-1: Product: syz [ 312.179478][ T434] usb 4-1: Manufacturer: syz [ 312.184121][ T434] usb 4-1: SerialNumber: syz [ 312.587767][ T4004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.638760][ T4004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.783944][ T434] usb 4-1: Found UVC 0.00 device syz (05ac:8514) [ 312.809146][ T434] usb 4-1: No valid video chain found. [ 312.999757][ T434] usb 4-1: USB disconnect, device number 29 [ 314.487202][ T28] audit: type=1400 audit(1755464754.972:380): avc: denied { watch } for pid=4067 comm="syz.4.1011" path="/197/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 314.772433][ T4075] syz.0.1013[4075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.772510][ T4075] syz.0.1013[4075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.926974][ T4081] syz.5.1014[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.938879][ T4081] syz.5.1014[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.394287][ T4091] fuse: Unknown parameter 'allow_othe' [ 317.335522][ T1273] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 317.521167][ T1273] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 317.532417][ T1273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.539616][ T1273] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 317.550513][ T1273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.560750][ T1273] usb 3-1: config 0 descriptor?? [ 317.565966][ T4079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.670032][ T2340] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 317.800043][ T434] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 317.851136][ T2340] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 317.859330][ T2340] usb 4-1: config 7 has no interface number 0 [ 317.865782][ T2340] usb 4-1: config 7 interface 39 has no altsetting 0 [ 317.874127][ T2340] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 317.883385][ T2340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.891657][ T2340] usb 4-1: Product: syz [ 317.895891][ T2340] usb 4-1: Manufacturer: syz [ 317.900672][ T2340] usb 4-1: SerialNumber: syz [ 317.977208][ T1273] uclogic 0003:5543:0042.001A: item fetching failed at offset 0/3 [ 317.980061][ T434] usb 1-1: Using ep0 maxpacket: 8 [ 317.985414][ T1273] uclogic 0003:5543:0042.001A: parse failed [ 317.991486][ T434] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 317.996202][ T1273] uclogic: probe of 0003:5543:0042.001A failed with error -22 [ 318.004438][ T434] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.021842][ T434] usb 1-1: config 0 has no interface number 0 [ 318.029328][ T434] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 318.038473][ T434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.046520][ T434] usb 1-1: Product: syz [ 318.050738][ T434] usb 1-1: Manufacturer: syz [ 318.055336][ T434] usb 1-1: SerialNumber: syz [ 318.060565][ T434] usb 1-1: config 0 descriptor?? [ 318.066487][ T434] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 318.072976][ T434] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 318.081547][ T434] usb 1-1: Failed to create links for entity 6 [ 318.087699][ T434] usb 1-1: Failed to register entities (-22). [ 318.113040][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.121701][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.132269][ T2340] usb 4-1: Found UVC 0.00 device syz (05ac:8514) [ 318.138795][ T2340] usb 4-1: No valid video chain found. [ 318.147356][ T2340] usb 4-1: USB disconnect, device number 30 [ 318.181844][ T1273] usb 3-1: USB disconnect, device number 31 [ 318.327635][ T19] usb 1-1: USB disconnect, device number 30 [ 318.698499][ T4134] tty tty3: ldisc open failed (-12), clearing slot 2 [ 318.962537][ T28] audit: type=1400 audit(1755464759.452:381): avc: denied { append } for pid=4150 comm="syz.3.1035" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 319.958652][ T4159] FAULT_INJECTION: forcing a failure. [ 319.958652][ T4159] name failslab, interval 1, probability 0, space 0, times 0 [ 320.122603][ T4159] CPU: 1 PID: 4159 Comm: syz.3.1037 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 320.132455][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.142518][ T4159] Call Trace: [ 320.145793][ T4159] [ 320.148722][ T4159] __dump_stack+0x21/0x24 [ 320.153071][ T4159] dump_stack_lvl+0xee/0x150 [ 320.157669][ T4159] ? __cfi_dump_stack_lvl+0x8/0x8 [ 320.162711][ T4159] ? preempt_schedule_irq+0xbb/0x110 [ 320.168012][ T4159] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 320.173747][ T4159] dump_stack+0x15/0x24 [ 320.177917][ T4159] should_fail_ex+0x3d4/0x520 [ 320.182594][ T4159] ? security_inode_alloc+0x33/0x120 [ 320.187871][ T4159] __should_failslab+0xac/0xf0 [ 320.192623][ T4159] should_failslab+0x9/0x20 [ 320.197115][ T4159] kmem_cache_alloc+0x3b/0x330 [ 320.201868][ T4159] security_inode_alloc+0x33/0x120 [ 320.206971][ T4159] inode_init_always+0x6fc/0x960 [ 320.211902][ T4159] new_inode_pseudo+0xa2/0x1f0 [ 320.216657][ T4159] new_inode+0x28/0x1e0 [ 320.220800][ T4159] ? __kasan_check_write+0x14/0x20 [ 320.225899][ T4159] shmem_get_inode+0x349/0xc20 [ 320.230658][ T4159] shmem_mknod+0x5c/0x1d0 [ 320.234982][ T4159] shmem_create+0x2c/0x40 [ 320.239296][ T4159] ? __cfi_shmem_create+0x10/0x10 [ 320.244309][ T4159] path_openat+0x11e3/0x2f50 [ 320.248891][ T4159] ? do_filp_open+0x3c0/0x3c0 [ 320.253563][ T4159] do_filp_open+0x1c1/0x3c0 [ 320.258060][ T4159] ? __cfi_do_filp_open+0x10/0x10 [ 320.263073][ T4159] ? alloc_fd+0x4e6/0x590 [ 320.267398][ T4159] do_sys_openat2+0x185/0x7e0 [ 320.272063][ T4159] ? __kasan_check_write+0x14/0x20 [ 320.277202][ T4159] ? do_sys_open+0xe0/0xe0 [ 320.281609][ T4159] ? ksys_write+0x1eb/0x240 [ 320.286107][ T4159] __x64_sys_openat+0x136/0x160 [ 320.290948][ T4159] x64_sys_call+0x783/0x9a0 [ 320.295439][ T4159] do_syscall_64+0x4c/0xa0 [ 320.299873][ T4159] ? clear_bhb_loop+0x30/0x80 [ 320.304536][ T4159] ? clear_bhb_loop+0x30/0x80 [ 320.309196][ T4159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.315075][ T4159] RIP: 0033:0x7fd627f8ebe9 [ 320.319478][ T4159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.339074][ T4159] RSP: 002b:00007fd6269f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.347474][ T4159] RAX: ffffffffffffffda RBX: 00007fd6281b5fa0 RCX: 00007fd627f8ebe9 [ 320.355433][ T4159] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 320.363389][ T4159] RBP: 00007fd6269f7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.371348][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.379306][ T4159] R13: 00007fd6281b6038 R14: 00007fd6281b5fa0 R15: 00007ffef14c7e08 [ 320.387268][ T4159] [ 320.542940][ T28] audit: type=1326 audit(1755464761.032:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.580862][ T28] audit: type=1326 audit(1755464761.032:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.736985][ T28] audit: type=1326 audit(1755464761.032:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.811959][ T28] audit: type=1326 audit(1755464761.032:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.927277][ T28] audit: type=1326 audit(1755464761.032:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.952166][ T28] audit: type=1326 audit(1755464761.032:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 320.985056][ T28] audit: type=1326 audit(1755464761.032:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 321.020131][ T4181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59127 sclass=netlink_route_socket pid=4181 comm=syz.0.1042 [ 321.470096][ T28] audit: type=1326 audit(1755464761.032:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 321.560819][ T28] audit: type=1326 audit(1755464761.032:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 321.584419][ T28] audit: type=1326 audit(1755464761.032:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4be398ebe9 code=0x7ffc0000 [ 322.433864][ T1273] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 322.480175][ T1654] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 322.672126][ T1654] usb 5-1: config 7 has an invalid interface number: 39 but max is 0 [ 322.680700][ T1654] usb 5-1: config 7 has no interface number 0 [ 322.687228][ T1654] usb 5-1: config 7 interface 39 has no altsetting 0 [ 322.700746][ T1654] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 322.710502][ T1654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.718676][ T1654] usb 5-1: Product: syz [ 322.724918][ T1654] usb 5-1: Manufacturer: syz [ 322.729658][ T1654] usb 5-1: SerialNumber: syz [ 323.032006][ T1273] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 323.050021][ T1273] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.064347][ T1273] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 323.074734][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.084092][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.092811][ T1273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.122930][ T1273] usb 1-1: config 0 descriptor?? [ 323.129699][ T4186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.140421][ T1654] usb 5-1: Found UVC 0.00 device syz (05ac:8514) [ 323.146894][ T1654] usb 5-1: No valid video chain found. [ 323.166764][ T1654] usb 5-1: USB disconnect, device number 27 [ 323.563547][ T1273] uclogic 0003:5543:0042.001B: item fetching failed at offset 0/3 [ 323.571547][ T1273] uclogic 0003:5543:0042.001B: parse failed [ 323.577515][ T1273] uclogic: probe of 0003:5543:0042.001B failed with error -22 [ 323.721466][ T4213] netlink: 'syz.4.1052': attribute type 25 has an invalid length. [ 323.729396][ T4213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1052'. [ 323.765269][ T1273] usb 1-1: USB disconnect, device number 31 [ 324.016945][ T915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 324.103069][ T4222] netlink: 'syz.3.1054': attribute type 11 has an invalid length. [ 324.116301][ T4222] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1054'. [ 324.139507][ T4222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4222 comm=syz.3.1054 [ 324.147046][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 326.672340][ T4256] block device autoloading is deprecated and will be removed. [ 326.680282][ T4256] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.689735][ T4256] FAT-fs (loop11): unable to read boot sector [ 326.690060][ T1733] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 327.941304][ T1733] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 327.949511][ T1733] usb 4-1: config 7 has no interface number 0 [ 327.956272][ T1733] usb 4-1: config 7 interface 39 has no altsetting 0 [ 327.965774][ T1733] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 327.975139][ T1733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.024458][ T1733] usb 4-1: Product: syz [ 328.028695][ T1733] usb 4-1: Manufacturer: syz [ 328.033665][ T434] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 328.052326][ T1733] usb 4-1: SerialNumber: syz [ 328.472446][ T434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 328.489496][ T434] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.502729][ T434] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 328.510024][ T1273] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 328.512050][ T434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.528545][ T434] usb 1-1: config 0 descriptor?? [ 328.533970][ T4265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.540816][ T1733] usb 4-1: Found UVC 0.00 device syz (05ac:8514) [ 328.549803][ T1733] usb 4-1: No valid video chain found. [ 328.563963][ T1733] usb 4-1: USB disconnect, device number 31 [ 328.653842][ T4285] 9pnet_fd: Insufficient options for proto=fd [ 328.691280][ T1273] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 328.702275][ T1273] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.708941][ T1273] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 328.718087][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.741927][ T1273] usb 6-1: config 0 descriptor?? [ 328.747255][ T4272] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 328.770645][ T4287] FAULT_INJECTION: forcing a failure. [ 328.770645][ T4287] name failslab, interval 1, probability 0, space 0, times 0 [ 328.783758][ T4287] CPU: 0 PID: 4287 Comm: syz.4.1074 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 328.793579][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.803648][ T4287] Call Trace: [ 328.806939][ T4287] [ 328.809881][ T4287] __dump_stack+0x21/0x24 [ 328.814228][ T4287] dump_stack_lvl+0xee/0x150 [ 328.818841][ T4287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.823881][ T4287] ? vfs_parse_fs_string+0xc8/0x160 [ 328.829094][ T4287] ? path_mount+0x675/0x1010 [ 328.833700][ T4287] ? __se_sys_mount+0x318/0x380 [ 328.838576][ T4287] ? __x64_sys_mount+0xbf/0xd0 [ 328.843356][ T4287] ? do_syscall_64+0x4c/0xa0 [ 328.847958][ T4287] dump_stack+0x15/0x24 [ 328.852212][ T4287] should_fail_ex+0x3d4/0x520 [ 328.856899][ T4287] ? getname_kernel+0x59/0x2e0 [ 328.861674][ T4287] __should_failslab+0xac/0xf0 [ 328.866447][ T4287] should_failslab+0x9/0x20 [ 328.870960][ T4287] kmem_cache_alloc+0x3b/0x330 [ 328.875723][ T4287] getname_kernel+0x59/0x2e0 [ 328.880316][ T4287] kern_path+0x24/0x1b0 [ 328.884459][ T4287] blkdev_get_by_path+0xc6/0x3f0 [ 328.889394][ T4287] ? __cfi_blkdev_get_by_path+0x10/0x10 [ 328.894936][ T4287] ? __cfi_selinux_capable+0x10/0x10 [ 328.900220][ T4287] ? __traceiter_kfree+0x38/0x50 [ 328.905149][ T4287] ? __cfi_vfat_fill_super+0x10/0x10 [ 328.910430][ T4287] mount_bdev+0x50/0x3f0 [ 328.914668][ T4287] ? vfs_parse_fs_string+0xfe/0x160 [ 328.919857][ T4287] ? cap_capable+0x1aa/0x230 [ 328.924440][ T4287] vfat_mount+0x34/0x40 [ 328.928589][ T4287] legacy_get_tree+0xfe/0x1a0 [ 328.933260][ T4287] ? __cfi_vfat_mount+0x10/0x10 [ 328.938195][ T4287] vfs_get_tree+0x9a/0x270 [ 328.942603][ T4287] do_new_mount+0x25a/0xa20 [ 328.947104][ T4287] path_mount+0x675/0x1010 [ 328.951515][ T4287] ? user_path_at_empty+0x161/0x1c0 [ 328.956705][ T4287] __se_sys_mount+0x318/0x380 [ 328.961377][ T4287] ? __x64_sys_mount+0xd0/0xd0 [ 328.966134][ T4287] ? __cfi_ksys_write+0x10/0x10 [ 328.970987][ T4287] __x64_sys_mount+0xbf/0xd0 [ 328.975576][ T4287] x64_sys_call+0x65d/0x9a0 [ 328.980070][ T4287] do_syscall_64+0x4c/0xa0 [ 328.984476][ T4287] ? clear_bhb_loop+0x30/0x80 [ 328.989141][ T4287] ? clear_bhb_loop+0x30/0x80 [ 328.993817][ T4287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.999789][ T4287] RIP: 0033:0x7f52e3b8ebe9 [ 329.004193][ T4287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.023789][ T4287] RSP: 002b:00007f52e4a81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.032200][ T4287] RAX: ffffffffffffffda RBX: 00007f52e3db5fa0 RCX: 00007f52e3b8ebe9 [ 329.040161][ T4287] RDX: 0000200000001200 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 329.048217][ T4287] RBP: 00007f52e4a81090 R08: 0000000000000000 R09: 0000000000000000 [ 329.056178][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.064141][ T4287] R13: 00007f52e3db6038 R14: 00007f52e3db5fa0 R15: 00007fffcd85dbf8 [ 329.072107][ T4287] [ 329.079006][ T4265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.087644][ T4265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.132134][ T434] wacom 0003:056A:0020.001C: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 329.144422][ T434] wacom 0003:056A:0020.001C: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.0-1/input0 [ 329.144466][ T4291] fuse: Unknown parameter 'rootmOde' [ 329.157055][ T434] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0020.001C/input/input9 [ 329.294420][ T1273] uclogic 0003:5543:0042.001D: item fetching failed at offset 0/3 [ 329.302944][ T1273] uclogic 0003:5543:0042.001D: parse failed [ 332.696637][ T1273] uclogic: probe of 0003:5543:0042.001D failed with error -22 [ 332.739638][ T1273] usb 6-1: USB disconnect, device number 7 [ 332.786005][ T6] usb 1-1: USB disconnect, device number 32 [ 332.933320][ T4325] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 332.943606][ T4325] SELinux: failed to load policy [ 333.168940][ T434] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 333.290090][ T60] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 333.361247][ T434] usb 3-1: config 7 has an invalid interface number: 39 but max is 0 [ 333.369469][ T434] usb 3-1: config 7 has no interface number 0 [ 333.375651][ T434] usb 3-1: config 7 interface 39 has no altsetting 0 [ 333.383750][ T434] usb 3-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 333.392896][ T434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.401037][ T434] usb 3-1: Product: syz [ 333.405244][ T434] usb 3-1: Manufacturer: syz [ 333.409878][ T434] usb 3-1: SerialNumber: syz [ 333.420045][ T6] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 333.470029][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 333.476375][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.486568][ T60] usb 4-1: config 0 has no interfaces? [ 333.492083][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.501305][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.509860][ T60] usb 4-1: config 0 descriptor?? [ 333.601283][ T6] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 333.609773][ T6] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 333.618307][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.628625][ T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 333.637833][ T6] usb 1-1: config 0 has no interface number 0 [ 333.644121][ T6] usb 1-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.653393][ T4319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.665891][ T4319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.677694][ T434] usb 3-1: Found UVC 0.00 device syz (05ac:8514) [ 333.685215][ T434] usb 3-1: No valid video chain found. [ 333.694124][ T6] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 333.695956][ T434] usb 3-1: USB disconnect, device number 32 [ 333.703909][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.719434][ T6] usb 1-1: config 0 descriptor?? [ 333.725359][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 334.081414][ T1733] usb 1-1: USB disconnect, device number 33 [ 334.082213][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.094439][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.107940][ T4339] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.111651][ T4337] FAULT_INJECTION: forcing a failure. [ 334.111651][ T4337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.117311][ T4339] FAT-fs (loop11): unable to read boot sector [ 334.130855][ T4337] CPU: 1 PID: 4337 Comm: syz.3.1079 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 334.146422][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.156469][ T4337] Call Trace: [ 334.159733][ T4337] [ 334.162649][ T4337] __dump_stack+0x21/0x24 [ 334.166975][ T4337] dump_stack_lvl+0xee/0x150 [ 334.171553][ T4337] ? __cfi_dump_stack_lvl+0x8/0x8 [ 334.176572][ T4337] dump_stack+0x15/0x24 [ 334.180717][ T4337] should_fail_ex+0x3d4/0x520 [ 334.185386][ T4337] should_fail+0xb/0x10 [ 334.189532][ T4337] should_fail_usercopy+0x1a/0x20 [ 334.194550][ T4337] _copy_to_user+0x1e/0x90 [ 334.198957][ T4337] simple_read_from_buffer+0xe9/0x160 [ 334.204325][ T4337] proc_fail_nth_read+0x19a/0x210 [ 334.209345][ T4337] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 334.214883][ T4337] ? security_file_permission+0x94/0xb0 [ 334.220417][ T4337] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 334.225956][ T4337] vfs_read+0x26e/0x8c0 [ 334.230110][ T4337] ? __cfi_vfs_read+0x10/0x10 [ 334.234774][ T4337] ? __kasan_check_write+0x14/0x20 [ 334.239878][ T4337] ? mutex_lock+0x8d/0x1a0 [ 334.244279][ T4337] ? __cfi_mutex_lock+0x10/0x10 [ 334.249123][ T4337] ? __fdget_pos+0x2cd/0x380 [ 334.253706][ T4337] ? ksys_read+0x71/0x240 [ 334.258027][ T4337] ksys_read+0x140/0x240 [ 334.262259][ T4337] ? __cfi_ksys_read+0x10/0x10 [ 334.267012][ T4337] ? fpregs_restore_userregs+0x128/0x260 [ 334.272632][ T4337] __x64_sys_read+0x7b/0x90 [ 334.277131][ T4337] x64_sys_call+0x2f/0x9a0 [ 334.281537][ T4337] do_syscall_64+0x4c/0xa0 [ 334.285942][ T4337] ? clear_bhb_loop+0x30/0x80 [ 334.290610][ T4337] ? clear_bhb_loop+0x30/0x80 [ 334.295363][ T4337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.301244][ T4337] RIP: 0033:0x7fd627f8d5fc [ 334.305646][ T4337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.325259][ T4337] RSP: 002b:00007fd6269d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.333662][ T4337] RAX: ffffffffffffffda RBX: 00007fd6281b6090 RCX: 00007fd627f8d5fc [ 334.341651][ T4337] RDX: 000000000000000f RSI: 00007fd6269d60a0 RDI: 0000000000000006 [ 334.349609][ T4337] RBP: 00007fd6269d6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.357566][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.365523][ T4337] R13: 00007fd6281b6128 R14: 00007fd6281b6090 R15: 00007ffef14c7e08 [ 334.373488][ T4337] [ 334.384245][ T6] usb 4-1: USB disconnect, device number 32 [ 336.312608][ T2740] udevd[2740]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 336.992034][ T60] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 337.229001][ T4372] input: syz1 as /devices/virtual/input/input12 [ 337.251501][ T60] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 337.270027][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.283317][ T60] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 337.292937][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.305564][ T60] usb 6-1: config 0 descriptor?? [ 337.312091][ T4352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 338.752069][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 338.752084][ T28] audit: type=1400 audit(1755464779.242:407): avc: denied { ioctl } for pid=4384 comm="syz.2.1099" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 338.943776][ T60] uclogic 0003:5543:0042.001E: item fetching failed at offset 0/3 [ 338.956657][ T60] uclogic 0003:5543:0042.001E: parse failed [ 338.970050][ T60] uclogic: probe of 0003:5543:0042.001E failed with error -22 [ 339.785274][ T1157] usb 6-1: USB disconnect, device number 8 [ 340.075079][ T4408] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 340.084465][ T4408] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 342.275712][ T4430] fuse: Bad value for 'fd' [ 344.546099][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.553369][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.560985][ T4459] device bridge_slave_0 entered promiscuous mode [ 344.568227][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.723186][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.730949][ T4459] device bridge_slave_1 entered promiscuous mode [ 344.783433][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.790516][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.797798][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.804838][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.826147][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.833837][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.842108][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.849601][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.860307][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.868585][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.875685][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.883210][ T1273] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 344.892072][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.900515][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.907717][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.916205][ T409] device bridge_slave_1 left promiscuous mode [ 344.922468][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.930071][ T409] device bridge_slave_0 left promiscuous mode [ 344.936237][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.944715][ T409] device veth1_macvtap left promiscuous mode [ 344.950849][ T409] device veth0_vlan left promiscuous mode [ 345.071023][ T1273] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 345.081994][ T1273] usb 6-1: config 0 interface 0 has no altsetting 0 [ 345.088644][ T1273] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 345.098389][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.115500][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.116396][ T1273] usb 6-1: config 0 descriptor?? [ 345.129056][ T4454] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.131798][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.147750][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.163611][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.171820][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.179322][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.187676][ T4459] device veth0_vlan entered promiscuous mode [ 345.199310][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.209766][ T4459] device veth1_macvtap entered promiscuous mode [ 345.220388][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.230934][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.309363][ T28] audit: type=1400 audit(1755464785.792:408): avc: denied { mount } for pid=4459 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.261513][ T1273] uclogic 0003:5543:0042.001F: item fetching failed at offset 0/3 [ 347.272308][ T1273] uclogic 0003:5543:0042.001F: parse failed [ 347.278332][ T1273] uclogic: probe of 0003:5543:0042.001F failed with error -22 [ 347.403330][ T4501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4501 comm=syz.0.1128 [ 347.476599][ T1273] usb 6-1: USB disconnect, device number 9 [ 348.933326][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 349.120083][ T715] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 349.279858][ T28] audit: type=1400 audit(1755464789.762:409): avc: denied { call } for pid=4534 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.179582][ T28] audit: type=1400 audit(1755464789.792:410): avc: denied { transfer } for pid=4534 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.450122][ T715] usb 4-1: device descriptor read/all, error -71 [ 352.967998][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 353.000010][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 353.190016][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 353.196265][ T60] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.256757][ T60] usb 7-1: config 0 has no interfaces? [ 353.267894][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.311116][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.323632][ T60] usb 7-1: config 0 descriptor?? [ 353.354681][ T1654] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 354.281777][ T4575] binder: BC_ACQUIRE_RESULT not supported [ 354.287665][ T4575] binder: 4574:4575 ioctl c0306201 200000000640 returned -22 [ 354.540053][ T1654] usb 6-1: Using ep0 maxpacket: 16 [ 354.546292][ T1654] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.570003][ T1654] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.580493][ T1654] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.589559][ T1654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.610022][ T1654] usb 6-1: Product: syz [ 354.614222][ T1654] usb 6-1: Manufacturer: syz [ 354.618816][ T1654] usb 6-1: SerialNumber: syz [ 354.763134][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 355.218093][ T1654] usb 6-1: 0:2 : does not exist [ 355.440042][ T6] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 355.618713][ T4567] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1147'. [ 355.628828][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.640191][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.650277][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.663184][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.672247][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.680909][ T6] usb 4-1: config 0 descriptor?? [ 355.688524][ T715] usb 7-1: USB disconnect, device number 2 [ 355.743928][ T1654] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 355.761900][ T1654] usb 6-1: USB disconnect, device number 10 [ 355.890095][ T343] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 356.002481][ T4458] udevd[4458]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 356.091160][ T343] usb 5-1: config 7 has an invalid interface number: 39 but max is 0 [ 356.099436][ T343] usb 5-1: config 7 has no interface number 0 [ 356.110978][ T4611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.126503][ T343] usb 5-1: config 7 interface 39 has no altsetting 0 [ 356.140582][ T343] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 356.152816][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.161676][ T343] usb 5-1: Product: syz [ 356.165895][ T343] usb 5-1: Manufacturer: syz [ 356.177742][ T343] usb 5-1: SerialNumber: syz [ 356.198770][ T6] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 356.206273][ T6] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 356.213717][ T6] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 356.221410][ T6] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 356.231114][ T6] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 356.517798][ T1733] usb 4-1: USB disconnect, device number 35 [ 356.648621][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.851849][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.439347][ T343] usb 5-1: Found UVC 0.00 device syz (05ac:8514) [ 357.445798][ T343] usb 5-1: No valid video chain found. [ 357.452632][ T343] usb 5-1: USB disconnect, device number 28 [ 357.733570][ T4630] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 359.686739][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 360.365783][ T28] audit: type=1400 audit(1755464800.852:411): avc: denied { append } for pid=4652 comm="syz.4.1170" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 360.393677][ T4657] random: crng reseeded on system resumption [ 360.820025][ T715] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 361.001021][ T715] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 361.011971][ T715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 361.018595][ T715] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 361.027662][ T715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.036583][ T715] usb 4-1: config 0 descriptor?? [ 361.041860][ T4660] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.166092][ T4670] FAULT_INJECTION: forcing a failure. [ 361.166092][ T4670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.191636][ T4670] CPU: 1 PID: 4670 Comm: syz.4.1174 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 361.201485][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.211550][ T4670] Call Trace: [ 361.214836][ T4670] [ 361.217770][ T4670] __dump_stack+0x21/0x24 [ 361.222119][ T4670] dump_stack_lvl+0xee/0x150 [ 361.226724][ T4670] ? __cfi_dump_stack_lvl+0x8/0x8 [ 361.231759][ T4670] ? __cfi_seq_printf+0x10/0x10 [ 361.236611][ T4670] dump_stack+0x15/0x24 [ 361.240774][ T4670] should_fail_ex+0x3d4/0x520 [ 361.245450][ T4670] should_fail+0xb/0x10 [ 361.249607][ T4670] should_fail_usercopy+0x1a/0x20 [ 361.254634][ T4670] _copy_to_iter+0x18a/0xe50 [ 361.259210][ T4670] ? seq_puts+0xea/0x120 [ 361.263438][ T4670] ? __cfi_v9fs_show_options+0x10/0x10 [ 361.268888][ T4670] ? __kasan_check_write+0x14/0x20 [ 361.273990][ T4670] ? _raw_spin_lock+0x8e/0xe0 [ 361.278660][ T4670] ? __cfi__copy_to_iter+0x10/0x10 [ 361.283797][ T4670] ? kvmalloc_node+0x2bf/0x480 [ 361.288565][ T4670] ? check_stack_object+0x81/0x140 [ 361.293671][ T4670] ? __check_object_size+0x45a/0x600 [ 361.298956][ T4670] seq_read_iter+0xbeb/0xdd0 [ 361.303550][ T4670] vfs_read+0x41e/0x8c0 [ 361.307712][ T4670] ? __cfi_vfs_read+0x10/0x10 [ 361.312379][ T4670] ? __cfi_mutex_lock+0x10/0x10 [ 361.317222][ T4670] ? __fdget_pos+0x2cd/0x380 [ 361.321796][ T4670] ? ksys_read+0x71/0x240 [ 361.326112][ T4670] ksys_read+0x140/0x240 [ 361.330354][ T4670] ? __cfi_ksys_read+0x10/0x10 [ 361.335111][ T4670] ? debug_smp_processor_id+0x17/0x20 [ 361.340480][ T4670] __x64_sys_read+0x7b/0x90 [ 361.344976][ T4670] x64_sys_call+0x2f/0x9a0 [ 361.349400][ T4670] do_syscall_64+0x4c/0xa0 [ 361.353819][ T4670] ? clear_bhb_loop+0x30/0x80 [ 361.358484][ T4670] ? clear_bhb_loop+0x30/0x80 [ 361.363159][ T4670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.369052][ T4670] RIP: 0033:0x7f52e3b8ebe9 [ 361.373460][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.393054][ T4670] RSP: 002b:00007f52e4a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.401494][ T4670] RAX: ffffffffffffffda RBX: 00007f52e3db5fa0 RCX: 00007f52e3b8ebe9 [ 361.409450][ T4670] RDX: 0000000000002020 RSI: 0000200000003980 RDI: 0000000000000006 [ 361.417420][ T4670] RBP: 00007f52e4a81090 R08: 0000000000000000 R09: 0000000000000000 [ 361.425378][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.433349][ T4670] R13: 00007f52e3db6038 R14: 00007f52e3db5fa0 R15: 00007fffcd85dbf8 [ 361.441322][ T4670] [ 361.540018][ T60] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 361.741093][ T715] uclogic 0003:5543:0042.0021: item fetching failed at offset 0/3 [ 361.749506][ T715] uclogic 0003:5543:0042.0021: parse failed [ 361.755554][ T715] uclogic: probe of 0003:5543:0042.0021 failed with error -22 [ 361.771150][ T60] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 361.790176][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 361.796898][ T60] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 361.806432][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.818441][ T6] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 361.829253][ T60] usb 7-1: config 0 descriptor?? [ 361.834616][ T4679] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 361.857045][ T715] usb 4-1: USB disconnect, device number 36 [ 362.041843][ T6] usb 1-1: config 7 has an invalid interface number: 39 but max is 0 [ 362.050154][ T6] usb 1-1: config 7 has no interface number 0 [ 362.056297][ T6] usb 1-1: config 7 interface 39 has no altsetting 0 [ 362.066112][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 362.075850][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.084291][ T6] usb 1-1: Product: syz [ 362.089199][ T6] usb 1-1: Manufacturer: syz [ 362.093834][ T6] usb 1-1: SerialNumber: syz [ 362.251663][ T60] uclogic 0003:5543:0042.0022: item fetching failed at offset 0/3 [ 362.259706][ T60] uclogic 0003:5543:0042.0022: parse failed [ 362.265698][ T60] uclogic: probe of 0003:5543:0042.0022 failed with error -22 [ 362.301378][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.309917][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.320032][ T6] usb 1-1: Found UVC 0.00 device syz (05ac:8514) [ 362.326465][ T6] usb 1-1: No valid video chain found. [ 362.335578][ T6] usb 1-1: USB disconnect, device number 34 [ 362.456244][ T60] usb 7-1: USB disconnect, device number 3 [ 362.641942][ T4706] random: crng reseeded on system resumption [ 362.665750][ T28] audit: type=1400 audit(1755464803.152:412): avc: denied { ioctl } for pid=4702 comm="syz.5.1186" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.666934][ T4706] Restarting kernel threads ... done. [ 362.956295][ T4715] overlayfs: failed to set xattr on upper [ 363.192915][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.200065][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.207812][ T4727] device bridge_slave_0 entered promiscuous mode [ 363.215157][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.222513][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.230189][ T4727] device bridge_slave_1 entered promiscuous mode [ 363.286321][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.293434][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.300727][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.307763][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.330082][ T1654] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 363.337828][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.345987][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.355715][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.368720][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.378233][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.392221][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.404837][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.413183][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.420847][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.432789][ T4727] device veth0_vlan entered promiscuous mode [ 363.445797][ T4727] device veth1_macvtap entered promiscuous mode [ 363.461584][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.472976][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.483436][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.544728][ T1654] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 363.556640][ T1654] usb 1-1: config 0 interface 0 has no altsetting 0 [ 363.563552][ T1654] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 363.572798][ T1654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.582531][ T1654] usb 1-1: config 0 descriptor?? [ 363.588315][ T4725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.904755][ T28] audit: type=1400 audit(1755464807.396:413): avc: denied { accept } for pid=4761 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.924858][ T4769] incfs: iterate_incfs_dir / -22 [ 366.012385][ T343] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 366.054020][ T4771] devpts: called with bogus options [ 366.088638][ T4778] usb usb8: usbfs: process 4778 (syz.4.1212) did not claim interface 0 before use [ 366.103509][ T1654] uclogic 0003:5543:0042.0023: item fetching failed at offset 0/3 [ 366.112020][ T1654] uclogic 0003:5543:0042.0023: parse failed [ 366.118405][ T1654] uclogic: probe of 0003:5543:0042.0023 failed with error -22 [ 366.130841][ T43] device bridge_slave_1 left promiscuous mode [ 366.137011][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.150640][ T43] device bridge_slave_0 left promiscuous mode [ 366.156901][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.165338][ T43] device veth1_macvtap left promiscuous mode [ 366.171779][ T43] device veth0_vlan left promiscuous mode [ 366.201049][ T343] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 366.216710][ T343] usb 4-1: config 7 has no interface number 0 [ 366.278128][ T343] usb 4-1: config 7 interface 39 has no altsetting 0 [ 366.293117][ T343] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 366.302227][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.306076][ T6] usb 1-1: USB disconnect, device number 35 [ 366.310691][ T343] usb 4-1: Product: syz [ 366.320732][ T343] usb 4-1: Manufacturer: syz [ 366.325369][ T343] usb 4-1: SerialNumber: syz [ 366.341402][ T343] usb 4-1: can't set config #7, error -71 [ 366.367593][ T343] usb 4-1: USB disconnect, device number 37 [ 367.127985][ T4805] FAULT_INJECTION: forcing a failure. [ 367.127985][ T4805] name failslab, interval 1, probability 0, space 0, times 0 [ 367.611411][ T4805] CPU: 1 PID: 4805 Comm: syz.7.1221 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 367.611437][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.611447][ T4805] Call Trace: [ 367.611453][ T4805] [ 367.611460][ T4805] __dump_stack+0x21/0x24 [ 367.611488][ T4805] dump_stack_lvl+0xee/0x150 [ 367.611509][ T4805] ? __cfi_dump_stack_lvl+0x8/0x8 [ 367.611530][ T4805] ? __local_bh_enable_ip+0x58/0x80 [ 367.611549][ T4805] ? release_sock+0x169/0x1c0 [ 367.611571][ T4805] dump_stack+0x15/0x24 [ 367.611591][ T4805] should_fail_ex+0x3d4/0x520 [ 367.611613][ T4805] __should_failslab+0xac/0xf0 [ 367.611644][ T4805] should_failslab+0x9/0x20 [ 367.611667][ T4805] kmem_cache_alloc_node+0x42/0x340 [ 367.611687][ T4805] ? __alloc_skb+0xea/0x4b0 [ 367.611708][ T4805] __alloc_skb+0xea/0x4b0 [ 367.611728][ T4805] ? netlink_autobind+0x168/0x1a0 [ 367.611751][ T4805] netlink_sendmsg+0x626/0xbc0 [ 367.611790][ T4805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 367.611813][ T4805] ? security_socket_sendmsg+0x93/0xb0 [ 367.611837][ T4805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 367.611857][ T4805] ____sys_sendmsg+0x5a9/0x990 [ 367.611874][ T4805] ? __sys_sendmsg_sock+0x40/0x40 [ 367.611892][ T4805] ? import_iovec+0x7c/0xb0 [ 367.611912][ T4805] ___sys_sendmsg+0x21c/0x290 [ 367.611929][ T4805] ? __sys_sendmsg+0x270/0x270 [ 367.611946][ T4805] ? __kasan_check_write+0x14/0x20 [ 367.611969][ T4805] ? proc_fail_nth_write+0x17a/0x1f0 [ 367.611999][ T4805] ? vfs_write+0x9d6/0xca0 [ 367.612025][ T4805] ? __fdget+0x19c/0x220 [ 367.612048][ T4805] __x64_sys_sendmsg+0x1f0/0x2c0 [ 367.612065][ T4805] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 367.612085][ T4805] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 367.612108][ T4805] x64_sys_call+0x171/0x9a0 [ 367.612127][ T4805] do_syscall_64+0x4c/0xa0 [ 367.612148][ T4805] ? clear_bhb_loop+0x30/0x80 [ 367.612166][ T4805] ? clear_bhb_loop+0x30/0x80 [ 367.612184][ T4805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.612201][ T4805] RIP: 0033:0x7fe88c18ebe9 [ 367.612217][ T4805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.612232][ T4805] RSP: 002b:00007fe88cfbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.612252][ T4805] RAX: ffffffffffffffda RBX: 00007fe88c3b5fa0 RCX: 00007fe88c18ebe9 [ 367.612266][ T4805] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 367.612278][ T4805] RBP: 00007fe88cfbc090 R08: 0000000000000000 R09: 0000000000000000 [ 367.612291][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.612302][ T4805] R13: 00007fe88c3b6038 R14: 00007fe88c3b5fa0 R15: 00007ffe6216c258 [ 367.612319][ T4805] [ 367.792560][ T28] audit: type=1400 audit(1755464809.196:414): avc: denied { create } for pid=4814 comm="syz.7.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 367.792594][ T28] audit: type=1400 audit(1755464809.206:415): avc: denied { sys_admin } for pid=4814 comm="syz.7.1224" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 368.026504][ T4822] syz.7.1224[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.026579][ T4822] syz.7.1224[4822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.674784][ T4813] tty tty30: ldisc open failed (-12), clearing slot 29 [ 369.046918][ T28] audit: type=1400 audit(1755464810.536:416): avc: denied { getopt } for pid=4833 comm="syz.5.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.683977][ T1733] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 370.082700][ T1733] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 370.097785][ T1733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.104696][ T1733] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 370.113982][ T1733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.123351][ T1733] usb 5-1: config 0 descriptor?? [ 370.128638][ T4835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 370.310021][ T6] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 370.360011][ T19] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 370.538814][ T1733] uclogic 0003:5543:0042.0024: item fetching failed at offset 0/3 [ 370.641666][ T1733] uclogic 0003:5543:0042.0024: parse failed [ 370.647628][ T1733] uclogic: probe of 0003:5543:0042.0024 failed with error -22 [ 370.671420][ T19] usb 6-1: config 1 interface 0 has no altsetting 0 [ 370.679888][ T19] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.40 [ 370.689389][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.697775][ T19] usb 6-1: Product: 돭愾Î佴䴸Ꙙ䲏鱏䱊ᰓ䂝ꔌ⹦箓篙点譂燥Х㠜嵀ḇ燒뷲゛鬀땏룳䱹턼싺灁⼇宕Ꮿ蔞虊檊ն麗㚀崙컓㞴윢忓钳锸꿨醛菭烡꺺䫍호ꨗ眗㣞틁傝牻痶༙͒鴳皗益씪蛘쎃偯嬺〴膇禑璙괺⬰吃암툖 [ 370.740928][ T1733] usb 5-1: USB disconnect, device number 29 [ 370.755178][ T19] usb 6-1: Manufacturer: Е [ 370.759794][ T19] usb 6-1: SerialNumber: 裑﵇ꈱḓ㯻︛㉪첽㤯겈㚦弐⹻￧䇕䣳蒖쒊䠬ꩦ鸞⁡̰פּ䃅틦玭쫶㙀랔䰑☥蟯鈷ﬡ翯璖敂ᾔ˼ꛮ딈행ᇦ뭟꒥ন⛃喴Ⴚ㋭烞ᔰ퓋ൔ檝䀑␯塅ꫥẹ࿓ꎴ讪ﯗ枨瞚웝좴曭쏵黤＀ퟄ࿚귞桛崘섾髦겖킕▹苤밗㋾蓼톁  [ 370.791285][ T19] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 370.800093][ T19] usb 6-1: no configuration chosen from 1 choice [ 371.210777][ T4880] FAULT_INJECTION: forcing a failure. [ 371.210777][ T4880] name failslab, interval 1, probability 0, space 0, times 0 [ 371.224262][ T4880] CPU: 1 PID: 4880 Comm: syz.7.1242 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 371.234085][ T4880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.244142][ T4880] Call Trace: [ 371.247428][ T4880] [ 371.250356][ T4880] __dump_stack+0x21/0x24 [ 371.254698][ T4880] dump_stack_lvl+0xee/0x150 [ 371.259296][ T4880] ? __cfi_dump_stack_lvl+0x8/0x8 [ 371.264343][ T4880] ? __local_bh_enable_ip+0x58/0x80 [ 371.269549][ T4880] ? release_sock+0x169/0x1c0 [ 371.274234][ T4880] dump_stack+0x15/0x24 [ 371.278396][ T4880] should_fail_ex+0x3d4/0x520 [ 371.283083][ T4880] __should_failslab+0xac/0xf0 [ 371.287848][ T4880] should_failslab+0x9/0x20 [ 371.292358][ T4880] kmem_cache_alloc_node+0x42/0x340 [ 371.297562][ T4880] ? __alloc_skb+0xea/0x4b0 [ 371.302069][ T4880] __alloc_skb+0xea/0x4b0 [ 371.306402][ T4880] ? netlink_autobind+0x168/0x1a0 [ 371.311443][ T4880] netlink_sendmsg+0x626/0xbc0 [ 371.316205][ T4880] ? sysvec_reschedule_ipi+0x78/0x80 [ 371.321493][ T4880] ? __cfi_netlink_sendmsg+0x10/0x10 [ 371.326783][ T4880] ? _copy_from_user+0x1/0xc0 [ 371.331518][ T4880] ? security_socket_sendmsg+0x93/0xb0 [ 371.336983][ T4880] ? __cfi_netlink_sendmsg+0x10/0x10 [ 371.342272][ T4880] ____sys_sendmsg+0x5a9/0x990 [ 371.347043][ T4880] ? __sys_sendmsg_sock+0x40/0x40 [ 371.352066][ T4880] ? import_iovec+0x7c/0xb0 [ 371.356570][ T4880] ___sys_sendmsg+0x21c/0x290 [ 371.361254][ T4880] ? __sys_sendmsg+0x270/0x270 [ 371.366065][ T4880] ? __fdget+0x19c/0x220 [ 371.370331][ T4880] __x64_sys_sendmsg+0x1f0/0x2c0 [ 371.375277][ T4880] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 371.380745][ T4880] ? __kasan_check_write+0x14/0x20 [ 371.385864][ T4880] ? fpregs_restore_userregs+0x128/0x260 [ 371.391509][ T4880] ? switch_fpu_return+0xe/0x10 [ 371.396366][ T4880] x64_sys_call+0x171/0x9a0 [ 371.400873][ T4880] do_syscall_64+0x4c/0xa0 [ 371.405292][ T4880] ? clear_bhb_loop+0x30/0x80 [ 371.409992][ T4880] ? clear_bhb_loop+0x30/0x80 [ 371.414673][ T4880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.420566][ T4880] RIP: 0033:0x7fe88c18ebe9 [ 371.424984][ T4880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.444589][ T4880] RSP: 002b:00007fe88cfbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.453008][ T4880] RAX: ffffffffffffffda RBX: 00007fe88c3b5fa0 RCX: 00007fe88c18ebe9 [ 371.460984][ T4880] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 371.468955][ T4880] RBP: 00007fe88cfbc090 R08: 0000000000000000 R09: 0000000000000000 [ 371.476927][ T4880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.484897][ T4880] R13: 00007fe88c3b6038 R14: 00007fe88c3b5fa0 R15: 00007ffe6216c258 [ 371.492875][ T4880] [ 371.622300][ T28] audit: type=1400 audit(1755464813.116:417): avc: denied { bind } for pid=4883 comm="syz.7.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.667734][ T28] audit: type=1400 audit(1755464813.156:418): avc: denied { write } for pid=4887 comm="syz.3.1246" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 371.697255][ T28] audit: type=1400 audit(1755464813.186:419): avc: denied { create } for pid=4892 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 371.798052][ T28] audit: type=1400 audit(1755464813.286:420): avc: denied { write } for pid=4897 comm="syz.4.1249" name="nf_conntrack_expect" dev="proc" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 372.036428][ T4904] syz.3.1252[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.036505][ T4904] syz.3.1252[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.690609][ T4912] tipc: Started in network mode [ 372.706987][ T4912] tipc: Node identity ac14140f, cluster identity 4711 [ 372.714412][ T4912] tipc: New replicast peer: 255.255.255.255 [ 372.721050][ T4912] tipc: Enabled bearer , priority 10 [ 373.904331][ T715] usb 6-1: USB disconnect, device number 11 [ 373.923206][ T288] tipc: Node number set to 2886997007 [ 373.963957][ T4943] bridge: RTM_NEWNEIGH with invalid ether address [ 373.972376][ T28] audit: type=1400 audit(1755464815.466:421): avc: denied { write } for pid=4942 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.924589][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 374.933633][ T4960] device bridge_slave_1 left promiscuous mode [ 374.939926][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.948522][ T4960] device bridge_slave_0 left promiscuous mode [ 374.955726][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.990019][ T60] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 375.007548][ T4969] futex_wake_op: syz.5.1272 tries to shift op by 144; fix this program [ 375.052787][ T28] audit: type=1326 audit(1755464816.546:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6f8ebe9 code=0x7ffc0000 [ 375.076214][ T28] audit: type=1326 audit(1755464816.546:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6f8ebe9 code=0x7ffc0000 [ 375.099855][ T28] audit: type=1326 audit(1755464816.546:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a6f8ebe9 code=0x7ffc0000 [ 375.127833][ T28] audit: type=1326 audit(1755464816.546:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6f8ebe9 code=0x7ffc0000 [ 375.131014][ T4973] xt_TCPMSS: Only works on TCP SYN packets [ 375.151822][ T28] audit: type=1326 audit(1755464816.546:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.0.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a6f8ebe9 code=0x7ffc0000 [ 375.190380][ T4973] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 375.201605][ T4973] SELinux: security_context_str_to_sid (unconfined_uobj_type=fsconte,) failed with errno=-22 [ 375.220154][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 375.227801][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 375.237695][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.246190][ T60] usb 4-1: Product: syz [ 375.248133][ T4979] 9pnet_fd: Insufficient options for proto=fd [ 375.250973][ T60] usb 4-1: Manufacturer: syz [ 375.261577][ T60] usb 4-1: SerialNumber: syz [ 375.266608][ T60] r8152-cfgselector 4-1: config 0 descriptor?? [ 375.320480][ T4987] FAULT_INJECTION: forcing a failure. [ 375.320480][ T4987] name failslab, interval 1, probability 0, space 0, times 0 [ 375.333624][ T4987] CPU: 0 PID: 4987 Comm: syz.5.1278 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 375.343444][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.353513][ T4987] Call Trace: [ 375.356777][ T4987] [ 375.359686][ T4987] __dump_stack+0x21/0x24 [ 375.364039][ T4987] dump_stack_lvl+0xee/0x150 [ 375.368617][ T4987] ? __cfi_dump_stack_lvl+0x8/0x8 [ 375.373628][ T4987] dump_stack+0x15/0x24 [ 375.377774][ T4987] should_fail_ex+0x3d4/0x520 [ 375.382432][ T4987] ? getname_flags+0xb9/0x500 [ 375.387096][ T4987] __should_failslab+0xac/0xf0 [ 375.391846][ T4987] should_failslab+0x9/0x20 [ 375.396337][ T4987] kmem_cache_alloc+0x3b/0x330 [ 375.401113][ T4987] getname_flags+0xb9/0x500 [ 375.405602][ T4987] user_path_at_empty+0x30/0x1c0 [ 375.410536][ T4987] __se_sys_mount+0x2e3/0x380 [ 375.415198][ T4987] ? __x64_sys_mount+0xd0/0xd0 [ 375.419942][ T4987] ? __cfi_ksys_write+0x10/0x10 [ 375.424792][ T4987] __x64_sys_mount+0xbf/0xd0 [ 375.429368][ T4987] x64_sys_call+0x65d/0x9a0 [ 375.433956][ T4987] do_syscall_64+0x4c/0xa0 [ 375.438358][ T4987] ? clear_bhb_loop+0x30/0x80 [ 375.443015][ T4987] ? clear_bhb_loop+0x30/0x80 [ 375.447672][ T4987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.453543][ T4987] RIP: 0033:0x7f4be398ebe9 [ 375.457937][ T4987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.477524][ T4987] RSP: 002b:00007f4be4889038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.485919][ T4987] RAX: ffffffffffffffda RBX: 00007f4be3bb5fa0 RCX: 00007f4be398ebe9 [ 375.493887][ T4987] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 375.501841][ T4987] RBP: 00007f4be4889090 R08: 0000200000000140 R09: 0000000000000000 [ 375.509819][ T4987] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 375.517772][ T4987] R13: 00007f4be3bb6038 R14: 00007f4be3bb5fa0 R15: 00007ffd8fefe838 [ 375.525729][ T4987] [ 375.534991][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 375.542018][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 375.548322][ T60] r8152-cfgselector 4-1: bad CDC descriptors [ 375.554801][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 375.576417][ T60] r8152-cfgselector 4-1: USB disconnect, device number 38 [ 375.657506][ T5005] FAULT_INJECTION: forcing a failure. [ 375.657506][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 375.671205][ T5005] CPU: 1 PID: 5005 Comm: syz.5.1285 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 375.681041][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.691104][ T5005] Call Trace: [ 375.694484][ T5005] [ 375.697422][ T5005] __dump_stack+0x21/0x24 [ 375.701773][ T5005] dump_stack_lvl+0xee/0x150 [ 375.706381][ T5005] ? __cfi_dump_stack_lvl+0x8/0x8 [ 375.711429][ T5005] dump_stack+0x15/0x24 [ 375.715605][ T5005] should_fail_ex+0x3d4/0x520 [ 375.720302][ T5005] __should_failslab+0xac/0xf0 [ 375.725080][ T5005] ? kvmalloc_node+0x294/0x480 [ 375.729863][ T5005] should_failslab+0x9/0x20 [ 375.734376][ T5005] __kmem_cache_alloc_node+0x3d/0x2c0 [ 375.739741][ T5005] ? kvmalloc_node+0x294/0x480 [ 375.744497][ T5005] __kmalloc_node+0xa1/0x1e0 [ 375.749082][ T5005] kvmalloc_node+0x294/0x480 [ 375.753666][ T5005] ? __cfi_kvmalloc_node+0x10/0x10 [ 375.758788][ T5005] alloc_netdev_mqs+0x8d/0xf90 [ 375.763578][ T5005] ? __cfi_ip6gre_tap_setup+0x10/0x10 [ 375.768959][ T5005] rtnl_create_link+0x319/0xb10 [ 375.773806][ T5005] rtnl_newlink+0x13b1/0x2030 [ 375.778475][ T5005] ? memcpy+0x56/0x70 [ 375.782461][ T5005] ? __cfi_rtnl_newlink+0x10/0x10 [ 375.787478][ T5005] ? selinux_capable+0x29c/0x380 [ 375.792410][ T5005] ? __cfi_selinux_capable+0x10/0x10 [ 375.797687][ T5005] ? __cfi_mutex_lock+0x10/0x10 [ 375.802522][ T5005] ? ns_capable+0x8c/0xf0 [ 375.806842][ T5005] ? netlink_net_capable+0x125/0x160 [ 375.812177][ T5005] ? __cfi_rtnl_newlink+0x10/0x10 [ 375.817196][ T5005] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 375.822125][ T5005] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 375.827570][ T5005] ? kernel_text_address+0xa0/0xd0 [ 375.832672][ T5005] ? __kernel_text_address+0xd/0x30 [ 375.837858][ T5005] ? unwind_get_return_address+0x4d/0x90 [ 375.843482][ T5005] ? memcpy+0x56/0x70 [ 375.847457][ T5005] ? avc_has_perm_noaudit+0x2f4/0x460 [ 375.852844][ T5005] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 375.858553][ T5005] ? slab_post_alloc_hook+0x4f/0x2d0 [ 375.863829][ T5005] ? kmem_cache_alloc_node+0x181/0x340 [ 375.869275][ T5005] ? __alloc_skb+0xea/0x4b0 [ 375.873768][ T5005] ? avc_has_perm+0x158/0x240 [ 375.878434][ T5005] ? __alloc_skb+0x236/0x4b0 [ 375.883013][ T5005] ? netlink_sendmsg+0x626/0xbc0 [ 375.887942][ T5005] ? __cfi_avc_has_perm+0x10/0x10 [ 375.892958][ T5005] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 375.898330][ T5005] netlink_rcv_skb+0x1f2/0x440 [ 375.903086][ T5005] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 375.908534][ T5005] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 375.913809][ T5005] ? __netlink_lookup+0x387/0x3b0 [ 375.918825][ T5005] rtnetlink_rcv+0x1c/0x20 [ 375.923229][ T5005] netlink_unicast+0x8b1/0xa30 [ 375.927989][ T5005] netlink_sendmsg+0x8aa/0xbc0 [ 375.932748][ T5005] ? __cfi_netlink_sendmsg+0x10/0x10 [ 375.938026][ T5005] ? security_socket_sendmsg+0x93/0xb0 [ 375.943484][ T5005] ? __cfi_netlink_sendmsg+0x10/0x10 [ 375.948764][ T5005] ____sys_sendmsg+0x5a9/0x990 [ 375.953519][ T5005] ? __sys_sendmsg_sock+0x40/0x40 [ 375.958529][ T5005] ? import_iovec+0x7c/0xb0 [ 375.963027][ T5005] ___sys_sendmsg+0x21c/0x290 [ 375.967703][ T5005] ? __sys_sendmsg+0x270/0x270 [ 375.972460][ T5005] ? __kasan_check_write+0x14/0x20 [ 375.977565][ T5005] ? proc_fail_nth_write+0x17a/0x1f0 [ 375.982849][ T5005] ? vfs_write+0x9d6/0xca0 [ 375.987263][ T5005] ? __fdget+0x19c/0x220 [ 375.991499][ T5005] __x64_sys_sendmsg+0x1f0/0x2c0 [ 375.996426][ T5005] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 376.001876][ T5005] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 376.007937][ T5005] x64_sys_call+0x171/0x9a0 [ 376.012436][ T5005] do_syscall_64+0x4c/0xa0 [ 376.016931][ T5005] ? clear_bhb_loop+0x30/0x80 [ 376.021596][ T5005] ? clear_bhb_loop+0x30/0x80 [ 376.026268][ T5005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.032152][ T5005] RIP: 0033:0x7f4be398ebe9 [ 376.036560][ T5005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.056154][ T5005] RSP: 002b:00007f4be4889038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.064559][ T5005] RAX: ffffffffffffffda RBX: 00007f4be3bb5fa0 RCX: 00007f4be398ebe9 [ 376.072521][ T5005] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 376.080483][ T5005] RBP: 00007f4be4889090 R08: 0000000000000000 R09: 0000000000000000 [ 376.088443][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.096404][ T5005] R13: 00007f4be3bb6038 R14: 00007f4be3bb5fa0 R15: 00007ffd8fefe838 [ 376.104372][ T5005] [ 377.431632][ T5025] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 377.440084][ T1654] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 377.640204][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 377.640220][ T28] audit: type=1400 audit(1755464819.126:559): avc: denied { accept } for pid=5026 comm="syz.7.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 377.668204][ T1654] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.680299][ T1654] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 377.698972][ T5039] 8021q: VLANs not supported on ip_vti0 [ 377.704805][ T1654] usb 1-1: config 7 has no interface number 0 [ 377.950285][ T1654] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 377.959427][ T1654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.998944][ T1654] usb 1-1: Product: 㯑 [ 378.026341][ T28] audit: type=1326 audit(1755464819.516:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.049835][ T28] audit: type=1326 audit(1755464819.516:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.073481][ T28] audit: type=1326 audit(1755464819.516:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.097705][ T28] audit: type=1326 audit(1755464819.516:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.121422][ T28] audit: type=1326 audit(1755464819.516:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.145045][ T28] audit: type=1326 audit(1755464819.516:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.168758][ T28] audit: type=1326 audit(1755464819.516:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e3b8ebe9 code=0x7ffc0000 [ 378.192446][ T28] audit: type=1326 audit(1755464819.516:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52e3b8d550 code=0x7ffc0000 [ 378.216035][ T28] audit: type=1326 audit(1755464819.516:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52e3b8e7eb code=0x7ffc0000 [ 378.240789][ T5011] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 378.408364][ T343] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 378.609215][ T343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.637194][ T343] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 378.704877][ T343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.770960][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.807054][ T343] usb 5-1: Product: syz [ 378.816320][ T343] usb 5-1: Manufacturer: syz [ 378.822535][ T343] usb 5-1: SerialNumber: syz [ 379.111068][ T5063] binder: BC_ACQUIRE_RESULT not supported [ 379.116830][ T5063] binder: 5062:5063 ioctl c0306201 200000000640 returned -22 [ 379.397993][ T1654] usb 1-1: USB disconnect, device number 37 [ 379.438771][ T5085] 9pnet_fd: Insufficient options for proto=fd [ 379.448733][ T5085] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 379.458499][ T5085] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 379.467580][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 379.477054][ T5085] device bridge_slave_1 left promiscuous mode [ 379.483419][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.491446][ T5085] device bridge_slave_0 left promiscuous mode [ 379.508004][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.572821][ T343] usb 5-1: USB disconnect, device number 30 [ 380.164766][ T6] hid-generic 0000:0004:0000.0025: unknown main item tag 0x0 [ 380.180039][ T6] hid-generic 0000:0004:0000.0025: unknown main item tag 0x0 [ 380.187586][ T6] hid-generic 0000:0004:0000.0025: unknown main item tag 0x0 [ 380.208325][ T6] hid-generic 0000:0004:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 380.265595][ T5099] fido_id[5099]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.604914][ T5111] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1317'. [ 380.615384][ T5110] binder: BC_ACQUIRE_RESULT not supported [ 380.623118][ T5110] binder: 5108:5110 ioctl c0306201 200000000640 returned -22 [ 381.206462][ T343] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 381.280105][ T5146] syz.7.1329[5146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.280970][ T5146] syz.7.1329[5146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.309669][ T5148] overlayfs: missing 'lowerdir' [ 381.597033][ T343] usb 5-1: device descriptor read/64, error -71 [ 381.807708][ T5155] binder: BC_ACQUIRE_RESULT not supported [ 381.813617][ T5155] binder: 5154:5155 ioctl c0306201 200000000640 returned -22 [ 381.870013][ T343] usb 5-1: device descriptor read/64, error -71 [ 382.041046][ T5162] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 382.048024][ T5162] overlayfs: failed to set xattr on upper [ 382.053782][ T5162] overlayfs: ...falling back to xino=off. [ 382.160752][ T1157] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 382.168495][ T343] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 382.560361][ T343] usb 5-1: device descriptor read/64, error -71 [ 382.610551][ T1157] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 382.621942][ T1157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.634494][ T1157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.647993][ T1157] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 382.670426][ T1157] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 382.680319][ T1157] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 382.688595][ T1157] usb 6-1: Manufacturer: syz [ 382.697689][ T1157] usb 6-1: config 0 descriptor?? [ 382.840021][ T343] usb 5-1: device descriptor read/64, error -71 [ 382.960090][ T343] usb usb5-port1: attempt power cycle [ 384.774742][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 384.774757][ T28] audit: type=1400 audit(1755464826.266:642): avc: denied { map } for pid=5195 comm="syz.7.1345" path="socket:[40805]" dev="sockfs" ino=40805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.859068][ T28] audit: type=1400 audit(1755464826.266:643): avc: denied { accept } for pid=5195 comm="syz.7.1345" path="socket:[40805]" dev="sockfs" ino=40805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.885607][ T5205] FAULT_INJECTION: forcing a failure. [ 384.885607][ T5205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.926082][ T28] audit: type=1400 audit(1755464826.306:644): avc: denied { map } for pid=5195 comm="syz.7.1345" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.949176][ T5205] CPU: 0 PID: 5205 Comm: syz.7.1348 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 384.958995][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.969147][ T5205] Call Trace: [ 384.972432][ T5205] [ 384.975358][ T5205] __dump_stack+0x21/0x24 [ 384.979692][ T5205] dump_stack_lvl+0xee/0x150 [ 384.984284][ T5205] ? __cfi_dump_stack_lvl+0x8/0x8 [ 384.989343][ T5205] ? irqentry_exit+0x37/0x40 [ 384.993931][ T5205] ? exc_page_fault+0x5e/0xb0 [ 384.998606][ T5205] dump_stack+0x15/0x24 [ 385.002771][ T5205] should_fail_ex+0x3d4/0x520 [ 385.007458][ T5205] should_fail+0xb/0x10 [ 385.011615][ T5205] should_fail_usercopy+0x1a/0x20 [ 385.016639][ T5205] _copy_from_user+0x1e/0xc0 [ 385.021233][ T5205] memdup_user+0x63/0xc0 [ 385.025482][ T5205] kvm_arch_vcpu_ioctl+0x1611/0x2240 [ 385.030767][ T5205] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 385.036407][ T5205] ? debug_smp_processor_id+0x17/0x20 [ 385.041866][ T5205] ? get_nohz_timer_target+0x74/0x540 [ 385.047238][ T5205] ? __kasan_check_write+0x14/0x20 [ 385.052359][ T5205] ? debug_smp_processor_id+0x17/0x20 [ 385.057734][ T5205] ? hrtimer_reprogram+0x297/0x430 [ 385.062847][ T5205] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 385.068658][ T5205] ? hrtimer_start_range_ns+0xada/0xc10 [ 385.074211][ T5205] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 385.080035][ T5205] ? dummy_timer+0x2d10/0x2ea0 [ 385.084816][ T5205] ? do_vfs_ioctl+0xc36/0x1c80 [ 385.089585][ T5205] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 385.095218][ T5205] ? kstrtouint_from_user+0xf7/0x150 [ 385.100549][ T5205] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 385.106275][ T5205] ? memcpy+0x56/0x70 [ 385.110286][ T5205] ? __kasan_check_write+0x14/0x20 [ 385.115416][ T5205] ? mutex_lock_killable+0x8d/0x1a0 [ 385.120621][ T5205] ? __cfi_mutex_lock_killable+0x10/0x10 [ 385.126274][ T5205] kvm_vcpu_ioctl+0x6ac/0xb70 [ 385.130991][ T5205] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 385.136210][ T5205] ? selinux_file_ioctl+0x377/0x480 [ 385.141425][ T5205] ? kvm_sched_clock_read+0x18/0x40 [ 385.146645][ T5205] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 385.152211][ T5205] ? sched_clock_cpu+0x6e/0x250 [ 385.157083][ T5205] ? __cfi_sched_clock_cpu+0x10/0x10 [ 385.162391][ T5205] ? __fget_files+0x2d5/0x330 [ 385.167094][ T5205] ? security_file_ioctl+0x95/0xc0 [ 385.172220][ T5205] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 385.177438][ T5205] __se_sys_ioctl+0x12f/0x1b0 [ 385.182125][ T5205] __x64_sys_ioctl+0x7b/0x90 [ 385.186725][ T5205] x64_sys_call+0x58b/0x9a0 [ 385.191237][ T5205] do_syscall_64+0x4c/0xa0 [ 385.195661][ T5205] ? clear_bhb_loop+0x30/0x80 [ 385.200339][ T5205] ? clear_bhb_loop+0x30/0x80 [ 385.205033][ T5205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.210945][ T5205] RIP: 0033:0x7fe88c18ebe9 [ 385.215382][ T5205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.235000][ T5205] RSP: 002b:00007fe88cfbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.243431][ T5205] RAX: ffffffffffffffda RBX: 00007fe88c3b5fa0 RCX: 00007fe88c18ebe9 [ 385.248367][ T28] audit: type=1400 audit(1755464826.306:645): avc: denied { execute } for pid=5195 comm="syz.7.1345" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.251407][ T5205] RDX: 0000200000001640 RSI: 000000004008ae89 RDI: 0000000000000009 [ 385.251421][ T5205] RBP: 00007fe88cfbc090 R08: 0000000000000000 R09: 0000000000000000 [ 385.251430][ T5205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.251439][ T5205] R13: 00007fe88c3b6038 R14: 00007fe88c3b5fa0 R15: 00007ffe6216c258 [ 385.251456][ T5205] [ 385.940285][ T1157] usbhid 6-1:0.0: can't add hid device: -71 [ 385.946359][ T1157] usbhid: probe of 6-1:0.0 failed with error -71 [ 385.953721][ T1157] usb 6-1: USB disconnect, device number 12 [ 386.165071][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.173169][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.192166][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.207099][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.648291][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.656234][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.664048][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.671992][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.679607][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.698654][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.709067][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.770034][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.777738][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.785532][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.793261][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.801197][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.808764][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.822773][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.830521][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.838078][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.845819][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.853667][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.861179][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.868679][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 386.876520][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.003258][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.025526][ T5257] binder_alloc: 5256: binder_install_single_page failed to insert page at offset 0 with -14 [ 387.173612][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.181437][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.189078][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.199175][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.206916][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.214682][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.230924][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.251312][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.268105][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.288356][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.296858][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.304997][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.557216][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.683288][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.727043][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.737819][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.748574][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.759332][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.779297][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.800648][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.808292][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.821895][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 387.835010][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 388.247069][ T5275] futex_wake_op: syz.4.1366 tries to shift op by -1; fix this program [ 388.975350][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.075622][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.195045][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.205747][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.216335][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.302446][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.314118][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.324184][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.334618][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.345118][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.354484][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.363922][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.506999][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.514563][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.514857][ T5284] FAULT_INJECTION: forcing a failure. [ 389.514857][ T5284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.522112][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.522140][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.522159][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.535897][ T5284] CPU: 1 PID: 5284 Comm: syz.4.1369 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 389.542728][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.550070][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.550083][ T5284] Call Trace: [ 389.550088][ T5284] [ 389.550096][ T5284] __dump_stack+0x21/0x24 [ 389.550121][ T5284] dump_stack_lvl+0xee/0x150 [ 389.557776][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.567335][ T5284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 389.567366][ T5284] dump_stack+0x15/0x24 [ 389.567385][ T5284] should_fail_ex+0x3d4/0x520 [ 389.567406][ T5284] should_fail+0xb/0x10 [ 389.567424][ T5284] should_fail_usercopy+0x1a/0x20 [ 389.567439][ T5284] _copy_to_user+0x1e/0x90 [ 389.567454][ T5284] simple_read_from_buffer+0xe9/0x160 [ 389.567477][ T5284] proc_fail_nth_read+0x19a/0x210 [ 389.567499][ T5284] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 389.567521][ T5284] ? security_file_permission+0x94/0xb0 [ 389.567538][ T5284] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 389.567556][ T5284] vfs_read+0x26e/0x8c0 [ 389.567577][ T5284] ? __cfi_vfs_read+0x10/0x10 [ 389.567593][ T5284] ? __kasan_check_write+0x14/0x20 [ 389.567615][ T5284] ? mutex_lock+0x8d/0x1a0 [ 389.567631][ T5284] ? __cfi_mutex_lock+0x10/0x10 [ 389.567648][ T5284] ? __fdget_pos+0x2cd/0x380 [ 389.567670][ T5284] ? ksys_read+0x71/0x240 [ 389.567691][ T5284] ksys_read+0x140/0x240 [ 389.567711][ T5284] ? __cfi_ksys_read+0x10/0x10 [ 389.567733][ T5284] ? debug_smp_processor_id+0x17/0x20 [ 389.567753][ T5284] __x64_sys_read+0x7b/0x90 [ 389.567775][ T5284] x64_sys_call+0x2f/0x9a0 [ 389.567794][ T5284] do_syscall_64+0x4c/0xa0 [ 389.567814][ T5284] ? clear_bhb_loop+0x30/0x80 [ 389.567832][ T5284] ? clear_bhb_loop+0x30/0x80 [ 389.567849][ T5284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.567867][ T5284] RIP: 0033:0x7f52e3b8d5fc [ 389.567883][ T5284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.567898][ T5284] RSP: 002b:00007f52e4a81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.567918][ T5284] RAX: ffffffffffffffda RBX: 00007f52e3db5fa0 RCX: 00007f52e3b8d5fc [ 389.567931][ T5284] RDX: 000000000000000f RSI: 00007f52e4a810a0 RDI: 0000000000000005 [ 389.567941][ T5284] RBP: 00007f52e4a81090 R08: 0000000000000000 R09: 0000000000000000 [ 389.567952][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.575442][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.585425][ T5284] R13: 00007f52e3db6038 R14: 00007f52e3db5fa0 R15: 00007fffcd85dbf8 [ 389.585447][ T5284] [ 389.842344][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.850052][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.857696][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.865214][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.872792][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.880310][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.887830][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.895360][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.903151][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.910669][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.918146][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.925674][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.933194][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.941261][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.948856][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.956410][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.963951][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.971539][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.979019][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.986560][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 389.994054][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.001547][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.009032][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.016796][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.024502][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.032292][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.039865][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.047653][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.055333][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.063138][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.070861][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.078457][ T60] hid-generic 0007:10000:000D.0026: unknown main item tag 0x0 [ 390.095579][ T60] hid-generic 0007:10000:000D.0026: hidraw0: HID v0.a8 Device [syz1] on syz1 [ 390.141381][ T5296] fido_id[5296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.253840][ T5300] overlayfs: statfs failed on './file0' [ 390.265183][ T5300] incfs: Can't find or create .index dir in ./file0 [ 390.310377][ T5300] incfs: mount failed -14 [ 393.235352][ T28] audit: type=1400 audit(1755464834.646:646): avc: denied { audit_write } for pid=5315 comm="syz.3.1378" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 393.474608][ T28] audit: type=1107 audit(1755464834.646:647): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 393.937569][ T5334] netlink: 'syz.7.1379': attribute type 27 has an invalid length. [ 395.005364][ T28] audit: type=1400 audit(1755464835.526:648): avc: denied { write } for pid=5330 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 395.225276][ T5342] block device autoloading is deprecated and will be removed. [ 396.269449][ T5337] bridge: RTM_NEWNEIGH with invalid ether address [ 396.315417][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.380713][ T28] audit: type=1400 audit(1755467415.863:649): avc: denied { ioctl } for pid=5358 comm="syz.3.1388" path="socket:[42061]" dev="sockfs" ino=42061 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.443941][ T5336] device veth0_vlan left promiscuous mode [ 396.450991][ T5336] device veth0_vlan entered promiscuous mode [ 396.458842][ T5336] device veth1_macvtap left promiscuous mode [ 396.548419][ T5336] device veth1_macvtap entered promiscuous mode [ 396.580273][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.695599][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.898213][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.996288][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.017823][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.026479][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.035057][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.043721][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.052542][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.061024][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.069461][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 397.077825][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.086708][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 397.095012][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.103356][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.111638][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.120101][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.151758][ T5375] random: crng reseeded on system resumption [ 397.432594][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.475187][ T28] audit: type=1400 audit(1755467416.963:650): avc: denied { map } for pid=5379 comm="syz.4.1392" path="socket:[42082]" dev="sockfs" ino=42082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 397.475392][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 397.531224][ T5380] netlink: 'syz.4.1392': attribute type 27 has an invalid length. [ 397.541003][ T28] audit: type=1400 audit(1755467417.033:651): avc: denied { ioctl } for pid=5383 comm="syz.0.1394" path="socket:[42091]" dev="sockfs" ino=42091 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 397.588783][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.595996][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.779761][ T5394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 397.937265][ T5394] netlink: 235 bytes leftover after parsing attributes in process `syz.5.1396'. [ 398.310860][ T5384] loop0: detected capacity change from 0 to 40427 [ 398.330971][ T5384] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 398.341542][ T5384] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 398.354675][ T5384] F2FS-fs (loop0): invalid crc value [ 398.697868][ T5384] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 398.762170][ T5384] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 398.769478][ T5384] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 401.198428][ T28] audit: type=1400 audit(1755467420.683:652): avc: denied { read append open } for pid=5383 comm="syz.0.1394" path="/257/file1/blkio.throttle.io_service_bytes" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.234334][ T28] audit: type=1400 audit(1755467420.693:653): avc: denied { map } for pid=5383 comm="syz.0.1394" path="/257/file1/blkio.throttle.io_service_bytes" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.268132][ T28] audit: type=1400 audit(1755467420.693:654): avc: denied { write } for pid=5383 comm="syz.0.1394" path="/257/file1/blkio.throttle.io_service_bytes" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.293607][ T28] audit: type=1400 audit(1755467420.753:655): avc: denied { ioctl } for pid=5383 comm="syz.0.1394" path="/257/file1/blkio.throttle.io_service_bytes" dev="loop0" ino=10 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.377965][ T283] syz-executor: attempt to access beyond end of device [ 401.377965][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 401.829228][ T6] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 402.009219][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 402.015419][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.026414][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.036191][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.045251][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.053749][ T6] usb 1-1: config 0 descriptor?? [ 402.059635][ T6] hub 1-1:0.0: USB hub found [ 402.239222][ T434] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 402.410284][ T6] hub 1-1:0.0: 1 port detected [ 402.450198][ T434] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 402.461461][ T434] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.468548][ T434] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 402.478268][ T434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.487044][ T434] usb 6-1: config 0 descriptor?? [ 402.492440][ T5456] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 402.729136][ T60] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 402.894314][ T6] hub 1-1:0.0: activate --> -90 [ 402.903695][ T434] uclogic 0003:5543:0042.0027: item fetching failed at offset 0/3 [ 402.911745][ T434] uclogic 0003:5543:0042.0027: parse failed [ 402.917690][ T434] uclogic: probe of 0003:5543:0042.0027 failed with error -22 [ 402.920165][ T60] usb 4-1: config 7 has an invalid interface number: 39 but max is 0 [ 402.954710][ T60] usb 4-1: config 7 has no interface number 0 [ 402.961249][ T60] usb 4-1: config 7 interface 39 has no altsetting 0 [ 402.971992][ T60] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 402.981098][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.989430][ T60] usb 4-1: Product: syz [ 402.993609][ T60] usb 4-1: Manufacturer: syz [ 402.998187][ T60] usb 4-1: SerialNumber: syz [ 403.111945][ T715] usb 6-1: USB disconnect, device number 13 [ 403.205702][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.214309][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.224826][ T60] usb 4-1: Found UVC 0.00 device syz (05ac:8514) [ 403.231353][ T60] usb 4-1: No valid video chain found. [ 403.238286][ T60] usb 4-1: USB disconnect, device number 39 [ 403.289093][ T19] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 403.479967][ T19] usb 5-1: config 7 has an invalid interface number: 39 but max is 0 [ 403.488094][ T19] usb 5-1: config 7 has no interface number 0 [ 403.494363][ T19] usb 5-1: config 7 interface 39 has no altsetting 0 [ 403.502416][ T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 403.511509][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.519507][ T19] usb 5-1: Product: syz [ 403.523662][ T19] usb 5-1: Manufacturer: syz [ 403.528241][ T19] usb 5-1: SerialNumber: syz [ 403.659579][ T5480] SELinux: policydb magic number 0x52f6ba19 does not match expected magic number 0xf97cff8c [ 403.670751][ T5480] SELinux: failed to load policy [ 403.703498][ T39] usb 1-1: USB disconnect, device number 38 [ 403.736862][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.745743][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.756127][ T19] usb 5-1: Found UVC 0.00 device syz (05ac:8514) [ 403.764054][ T19] usb 5-1: No valid video chain found. [ 403.798080][ T19] usb 5-1: USB disconnect, device number 34 [ 408.769964][ T5525] binder: BC_ACQUIRE_RESULT not supported [ 408.818479][ T5525] binder: 5521:5525 ioctl c0306201 200000000640 returned -22 [ 409.190739][ T28] audit: type=1400 audit(1755467428.684:656): avc: denied { ioctl } for pid=5527 comm="syz.4.1435" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 409.830358][ T5549] netlink: 'syz.0.1439': attribute type 4 has an invalid length. [ 411.788190][ T5561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 412.585916][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.202122][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.959925][ T5598] x_tables: duplicate underflow at hook 4 [ 416.026893][ T28] audit: type=1400 audit(1755467435.515:657): avc: denied { ioctl } for pid=5603 comm="syz.4.1453" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 416.273134][ T5612] device batadv_slave_0 entered promiscuous mode [ 416.299746][ T5602] loop0: detected capacity change from 0 to 40427 [ 416.313319][ T5602] F2FS-fs (loop0): fault_type options not supported [ 416.329899][ T5602] F2FS-fs (loop0): invalid crc value [ 416.351728][ T5602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 416.420434][ T5602] F2FS-fs (loop0): Start checkpoint disabled! [ 416.446938][ T5602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 416.982194][ T3077] kworker/u4:16: attempt to access beyond end of device [ 416.982194][ T3077] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 417.337330][ T39] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 417.528516][ T39] usb 1-1: config 7 has an invalid interface number: 39 but max is 0 [ 417.536659][ T39] usb 1-1: config 7 has no interface number 0 [ 417.542824][ T39] usb 1-1: config 7 interface 39 has no altsetting 0 [ 417.550962][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=96.c2 [ 417.560107][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.568171][ T39] usb 1-1: Product: syz [ 417.572377][ T39] usb 1-1: Manufacturer: syz [ 417.576992][ T39] usb 1-1: SerialNumber: syz [ 417.784717][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.793334][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.802654][ T39] usb 1-1: Found UVC 0.00 device syz (05ac:8514) [ 417.809424][ T39] usb 1-1: No valid video chain found. [ 417.841051][ T39] usb 1-1: USB disconnect, device number 39 [ 417.955547][ T5645] 8021q: VLANs not supported on sit0 [ 417.968658][ T5645] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 418.412269][ T5649] x_tables: duplicate underflow at hook 4 [ 419.048231][ T5672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 419.444648][ T5679] loop0: detected capacity change from 0 to 512 [ 419.530509][ T5679] FAT-fs (loop0): Unrecognized mount option "00000003776324772000000" or missing value [ 419.795530][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1474'. [ 419.968663][ T5688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5688 comm=syz.7.1474 [ 422.324816][ T28] audit: type=1400 audit(1755467441.816:658): avc: denied { create } for pid=5699 comm="syz.3.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.497966][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1490'. [ 424.691699][ T5749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5749 comm=syz.3.1490 [ 427.218075][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.226631][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.434143][ T434] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 427.506322][ T1733] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 428.189714][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1499'. [ 428.205853][ T434] usb 5-1: device descriptor read/64, error -71 [ 428.490411][ T1733] usb 1-1: Using ep0 maxpacket: 16 [ 428.519170][ T1733] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 428.529516][ T1733] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 428.583168][ T1733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.584870][ T5793] input: syz0 as /devices/virtual/input/input13 [ 429.591843][ T1733] usb 1-1: Product: syz [ 429.596129][ T1733] usb 1-1: Manufacturer: syz [ 429.600733][ T1733] usb 1-1: SerialNumber: syz [ 429.655859][ T434] usb 5-1: device descriptor read/64, error -71 [ 429.675566][ T1733] usb 1-1: config 0 descriptor?? [ 429.683400][ T1733] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 429.691606][ T1733] usb 1-1: Detected FT232R [ 429.819057][ T28] audit: type=1400 audit(1755467449.317:659): avc: denied { relabelfrom } for pid=5809 comm="syz.5.1508" name="" dev="pipefs" ino=43177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 429.896552][ T1733] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 429.925785][ T434] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 430.004999][ T5814] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 430.016763][ T5814] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 430.025176][ T5814] CPU: 1 PID: 5814 Comm: syz.5.1509 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 430.034988][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.045041][ T5814] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 430.051471][ T5814] Code: e8 24 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 26 8b 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 ec e7 b4 fd 48 8b 45 [ 430.071075][ T5814] RSP: 0018:ffffc90001196e28 EFLAGS: 00010202 [ 430.077127][ T5814] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 430.085102][ T5814] RDX: ffff88810ee82880 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.093065][ T5814] RBP: ffffc90001196e70 R08: ffff88810ee82880 R09: 0000000000000002 [ 430.101021][ T5814] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 [ 430.108986][ T5814] R13: ffff888132ac6000 R14: 0000000000000000 R15: ffff888132ac6000 [ 430.117012][ T5814] FS: 00007f4be48476c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 430.125924][ T5814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.132491][ T5814] CR2: 00007f4be4846f98 CR3: 0000000122ec3000 CR4: 00000000003526a0 [ 430.140454][ T5814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.148431][ T5814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.156414][ T5814] Call Trace: [ 430.159696][ T5814] [ 430.162648][ T5814] fq_codel_change+0xafd/0x1010 [ 430.167509][ T5814] ? __kasan_check_read+0x11/0x20 [ 430.172551][ T5814] ? __cfi_fq_codel_change+0x10/0x10 [ 430.177856][ T5814] ? fq_codel_change+0x1/0x1010 [ 430.182722][ T5814] fq_codel_init+0x384/0xa90 [ 430.187326][ T5814] ? __cfi_fq_codel_init+0x10/0x10 [ 430.192445][ T5814] qdisc_create+0x7f3/0x1040 [ 430.197044][ T5814] ? qdisc_notify+0x360/0x360 [ 430.201728][ T5814] ? qdisc_lookup+0x57/0x4e0 [ 430.206319][ T5814] ? qdisc_lookup+0x100/0x4e0 [ 430.211002][ T5814] tc_modify_qdisc+0x8ea/0x1900 [ 430.215842][ T5814] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 430.221114][ T5814] ? __kasan_check_write+0x14/0x20 [ 430.226214][ T5814] ? mutex_lock+0x8d/0x1a0 [ 430.230632][ T5814] ? __cfi_mutex_lock+0x10/0x10 [ 430.235487][ T5814] ? ns_capable+0x8c/0xf0 [ 430.239800][ T5814] ? netlink_net_capable+0x125/0x160 [ 430.245067][ T5814] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 430.250366][ T5814] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 430.255291][ T5814] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 430.260740][ T5814] ? __kasan_check_write+0x14/0x20 [ 430.265861][ T5814] ? __switch_to+0x51f/0xe30 [ 430.270461][ T5814] ? __cfi___switch_to+0x10/0x10 [ 430.275436][ T5814] ? _raw_spin_unlock+0x4c/0x70 [ 430.280298][ T5814] ? finish_task_switch+0x16b/0x7b0 [ 430.285505][ T5814] ? __switch_to_asm+0x3a/0x60 [ 430.290274][ T5814] ? __schedule+0xb8f/0x14e0 [ 430.294875][ T5814] netlink_rcv_skb+0x1f2/0x440 [ 430.299640][ T5814] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 430.305092][ T5814] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 430.310370][ T5814] ? preempt_schedule_irq+0xbb/0x110 [ 430.315651][ T5814] ? __netlink_lookup+0x387/0x3b0 [ 430.320674][ T5814] rtnetlink_rcv+0x1c/0x20 [ 430.325082][ T5814] netlink_unicast+0x8b1/0xa30 [ 430.329836][ T5814] netlink_sendmsg+0x8aa/0xbc0 [ 430.334597][ T5814] ? sysvec_reschedule_ipi+0x78/0x80 [ 430.339887][ T5814] ? __cfi_netlink_sendmsg+0x10/0x10 [ 430.345178][ T5814] ? security_socket_sendmsg+0x8c/0xb0 [ 430.350633][ T5814] ? __sanitizer_cov_trace_pc+0x10/0x60 [ 430.356173][ T5814] ? security_socket_sendmsg+0x93/0xb0 [ 430.361630][ T5814] ? __cfi_netlink_sendmsg+0x10/0x10 [ 430.366908][ T5814] ____sys_sendmsg+0x5a9/0x990 [ 430.371669][ T5814] ? __sys_sendmsg_sock+0x40/0x40 [ 430.376683][ T5814] ? import_iovec+0x7c/0xb0 [ 430.381180][ T5814] ___sys_sendmsg+0x21c/0x290 [ 430.385845][ T5814] ? __sys_sendmsg+0x270/0x270 [ 430.390604][ T5814] ? __fdget+0x19c/0x220 [ 430.394927][ T5814] __x64_sys_sendmsg+0x1f0/0x2c0 [ 430.399865][ T5814] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 430.405311][ T5814] ? __kasan_check_write+0x14/0x20 [ 430.410416][ T5814] ? fpregs_restore_userregs+0x128/0x260 [ 430.416047][ T5814] ? switch_fpu_return+0xe/0x10 [ 430.420886][ T5814] x64_sys_call+0x171/0x9a0 [ 430.425380][ T5814] do_syscall_64+0x4c/0xa0 [ 430.429798][ T5814] ? clear_bhb_loop+0x30/0x80 [ 430.434463][ T5814] ? clear_bhb_loop+0x30/0x80 [ 430.439134][ T5814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.445013][ T5814] RIP: 0033:0x7f4be398ebe9 [ 430.449416][ T5814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.469013][ T5814] RSP: 002b:00007f4be4847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.477442][ T5814] RAX: ffffffffffffffda RBX: 00007f4be3bb6180 RCX: 00007f4be398ebe9 [ 430.485402][ T5814] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000a [ 430.493371][ T5814] RBP: 00007f4be3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.501344][ T5814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.509305][ T5814] R13: 00007f4be3bb6218 R14: 00007f4be3bb6180 R15: 00007ffd8fefe838 [ 430.517269][ T5814] [ 430.520288][ T5814] Modules linked in: [ 430.524283][ T5814] ---[ end trace 0000000000000000 ]--- [ 430.529769][ T5814] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 430.536203][ T5814] Code: e8 24 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 26 8b 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 ec e7 b4 fd 48 8b 45 [ 430.555951][ T5814] RSP: 0018:ffffc90001196e28 EFLAGS: 00010202 [ 430.562044][ T5814] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 430.567888][ T28] audit: type=1400 audit(1755467450.067:660): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 430.570062][ T5814] RDX: ffff88810ee82880 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.595811][ T28] audit: type=1400 audit(1755467450.087:661): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.599781][ T5814] RBP: ffffc90001196e70 R08: ffff88810ee82880 R09: 0000000000000002 [ 430.621380][ T28] audit: type=1400 audit(1755467450.087:662): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.629055][ T5814] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000afff2 [ 430.650584][ T28] audit: type=1400 audit(1755467450.087:663): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.658240][ T5814] R13: ffff888132ac6000 R14: 0000000000000000 R15: ffff888132ac6000 [ 430.679182][ T28] audit: type=1400 audit(1755467450.087:664): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.686785][ T5814] FS: 00007f4be48476c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 430.686807][ T5814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.708812][ T28] audit: type=1400 audit(1755467450.087:665): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.716327][ T5814] CR2: 00007f4be4846f98 CR3: 0000000122ec3000 CR4: 00000000003526a0 [ 430.723165][ T28] audit: type=1400 audit(1755467450.087:666): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 430.745757][ T5814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.745779][ T5814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.745791][ T5814] Kernel panic - not syncing: Fatal exception in interrupt [ 430.754042][ T5814] Kernel Offset: disabled [ 430.803921][ T5814] Rebooting in 86400 seconds..