last executing test programs: 6m31.843392989s ago: executing program 0 (id=2511): lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d8, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) 6m28.483710628s ago: executing program 0 (id=2519): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 6m28.454330959s ago: executing program 0 (id=2522): signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x68) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000000)={0xffff, 0x800, 0x15}, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc040) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa000200e}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 6m25.931211965s ago: executing program 0 (id=2526): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) 6m15.279766781s ago: executing program 0 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 6m15.175714822s ago: executing program 0 (id=2549): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5m58.82915987s ago: executing program 32 (id=2549): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m20.530702585s ago: executing program 1 (id=2859): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x11, 0x547, &(0x7f0000001140)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3m15.38803731s ago: executing program 1 (id=2865): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bond0\x00') 3m13.32856856s ago: executing program 1 (id=2869): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(0xffffffffffffffff, 0x6000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x7, 0x207}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) 3m10.703210609s ago: executing program 1 (id=2875): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 3m10.663994009s ago: executing program 1 (id=2877): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x11, 0x547, &(0x7f0000001140)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3m9.789441282s ago: executing program 1 (id=2885): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2m52.270248567s ago: executing program 33 (id=2885): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 55.991930876s ago: executing program 5 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 55.7246358s ago: executing program 5 (id=3174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) chdir(&(0x7f0000000100)='./file0\x00') r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 55.633085131s ago: executing program 5 (id=3175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, 0x0) 55.541119413s ago: executing program 5 (id=3178): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 54.343946699s ago: executing program 5 (id=3183): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @dev}, &(0x7f0000000480)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESDEC=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x1f, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001000008500000006000000bf91000000000000b702000001000000850000"], &(0x7f00000005c0)='GPL\x00', 0x2fb, 0xdf, &(0x7f0000000680)=""/223, 0x40f00, 0x2, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x10, 0x5, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) timer_create(0x3, 0x0, &(0x7f0000000040)) 51.4296047s ago: executing program 5 (id=3189): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 35.594260782s ago: executing program 34 (id=3189): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 14.247161411s ago: executing program 2 (id=3253): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1430df285133dc06d3585984aa2bd8fea921f6b14855c68"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(r5, 0x5452, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r7, 0x9, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000b00)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "5835b3", 0x48, 0x3c, 0xff, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x29, 0x0, 0x7, 0x1, 0x0, 0x16, 0x65}, @hopopts={0x2, 0x0, '\x00', [@ra]}, @routing={0x88, 0x2, 0x1, 0xf, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x4, 0x0, 0x80, 0x1, 0x0, 0x6, 0x64}, @hopopts={0x32}, @srh={0x2e, 0x0, 0x4, 0x0, 0x62, 0x20, 0x8}]}}}}}, 0x0) syz_clone(0xc0027080, 0x0, 0x0, 0x0, 0x0, 0x0) 11.792730135s ago: executing program 2 (id=3261): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(r5) r6 = syz_io_uring_complete(0x0) recvmsg$inet_nvme(r6, &(0x7f0000001a80)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f0000001880)=""/179, 0xb3}], 0x7, &(0x7f00000019c0)=""/170, 0xaa}, 0x100) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x10000) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0x4, 0x1}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]}) 11.060275185s ago: executing program 3 (id=3267): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x11, 0x547, &(0x7f0000001140)="$eJzs3c9vG0UbAOB3naS/0q/JJzgAp0ggtVKp0zQFioREuVNRCTgXy3GjKna2ip2qiSqVHjjDoZw4cUacOCMh/gcuSJy4oNIKVUiFm9E669Rt7NZNnbqwzyNtOrOz9vj17jua9dhqAIU1l/0pRbwcEV8kETM9bZORN85tHXfv7rXqX3evVZNotz/8I4kk39c9Psn/nc4rL0XEj59FHC/t7Le5sblSqddra3l9vtW4PN/c2DxxqVFZri3XVhfPLL5xemHh1OkzI4u1fL1y4PaXH9y+ufbriY8/v3c0ibNxOG/rjWNU5mIuf0+m4uxDbQuj7mzMknG/AHZlIs/zqcjGgJmYyLMe+O+7HhFtoKAS+Q8F1Z0HZPe/3W28M5Jn6857WzdAO+Of3PpsJGba2b3RoT+TB+6Msvvd2RH0n/Vx9vj537Mt9uhzCIB+Pr0REScnJ3eOf0k+/u3eySGOebgP4x88Oz9k85/X+81/SnluHuj8fXj+M90nd3fj8flfujWCbgbK5n/v9J3/bi9azU7ktf915nxTycVL9Vo2th2JiGMxtT+rD1zPyR548O2ZQc29879sy/rvzgXzJ7g1uf/BxyxVWpWnDHvbnRsRr/Sd/ybb5z/pc/6zsM4P2ceRF978eVDb4+PfW+2vI472Pf/3V7SSR69Pzneuh/nuVbHT4sTgNZVxx5+d/0OPjn826V2vbT55H699O/3ToLbdXv/7ko865X35vquVVmttIWJf8v7O/afuP7Zb7x6fxX/s1UePf/2u/4MR8cmQ8X+/+M0vu49/b2XxLz3R+X/ywlfpd+8O6n+483+6UzqW7xlm/Bv2BT7NewcAAAAAAADPm1JEHI6kVN4ul0rl8tb3O16MQ6V62mwdv5iury5F57eyszFV6q50z/R8H2Ih/z5st36qp96+Xq8tRsT/I+LmxMFOe7ma1pfGHTwAAAAAAAAAAAAAAAAAAAA8J6YH/P4/89vEuF8dsOf8l99QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FJf8h+KS/1Bc8h8AAAAAAAAAAAAAAAAAAAAAAAAAAABG6vy5c9nW/vvutWpWX7qysb6SXjmxVGuulBvr1XI1XbtcXk7T5XqtXE0bj3u+eppefitW16/Ot2rN1nxzY/NCI11fbV241Kgs1y7Upp5JVAAAAAAAAAAAAAAAAAAAAPDv0tzYXKnU67U1BQUFhe3CuEcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjvnwAAAP//qAUYIQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 10.863848578s ago: executing program 2 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095a1620e7f3e6911880164cab4a20b8aa5ee230135734a407fb7bd3441344e820240ef2c91f2055873084710fee7a8b124864f5e59f7de3ad2849d8ed6f4df336c2132e500b1ae27f3d4443df77fde3436ffeee3436892514f37ae0bfb6018f960cab3f260d7b11e870420799a21d9def8c9bfc79f62433e67dc00ad78d961d7db499657089ce09248baab6c19bb9ecb134fcc77327412d3fd24"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") r4 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() r6 = getpid() getpgrp(r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00fb00020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040fb020000000005000500000000000a"], 0x80}}, 0x0) 9.772985823s ago: executing program 7 (id=3271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 9.771687363s ago: executing program 2 (id=3272): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60903, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead9591", 0x19, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x1, 0xa, 0x80, 0x0, 0x2, 0xfd, 0x8, 0x5, 0x8, 0x3, 0x1, 0xf, 0x0, 0x0, 0x1, 0x4, 0x0, 0xf4, 0x4, '\x00', 0x5, 0x9ad}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.742882584s ago: executing program 3 (id=3275): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 9.707594524s ago: executing program 3 (id=3276): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(0xffffffffffffffff, 0x6000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x7, 0x207}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) 9.600223726s ago: executing program 6 (id=3277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 9.578577406s ago: executing program 6 (id=3278): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(r5) r6 = syz_io_uring_complete(0x0) recvmsg$inet_nvme(r6, &(0x7f0000001a80)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f0000001880)=""/179, 0xb3}], 0x7, &(0x7f00000019c0)=""/170, 0xaa}, 0x100) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x10000) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0x4, 0x1}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]}) 8.686458898s ago: executing program 7 (id=3279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 7.492177965s ago: executing program 6 (id=3280): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000300000001000000", @ANYRESOCT=r0, @ANYBLOB="0000ff02e3b3afe273022ddd", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ebff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005196c0083d1bbb0111000000000109022443dfd64d000009043c0002b1a92a0009050901ff030c090009050b"], 0x0) ioctl$TCFLSH(r9, 0x400455c8, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fcntl$dupfd(r5, 0x0, r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r11}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 7.491304396s ago: executing program 3 (id=3281): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 7.475155495s ago: executing program 4 (id=3282): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(r5) r6 = syz_io_uring_complete(0x0) recvmsg$inet_nvme(r6, &(0x7f0000001a80)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f0000001880)=""/179, 0xb3}], 0x7, &(0x7f00000019c0)=""/170, 0xaa}, 0x100) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x10000) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0x4, 0x1}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]}) 5.416588264s ago: executing program 3 (id=3283): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1430df285133dc06d3585984aa2bd8fea921f6b14855c68"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(r5, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$hiddev(0x0, 0x7, 0x400) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000b00)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "5835b3", 0x48, 0x3c, 0xff, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x29, 0x0, 0x7, 0x1, 0x0, 0x16, 0x65}, @hopopts={0x2, 0x0, '\x00', [@ra]}, @routing={0x88, 0x2, 0x1, 0xf, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x4, 0x0, 0x80, 0x1, 0x0, 0x6, 0x64}, @hopopts={0x32}, @srh={0x2e, 0x0, 0x4, 0x0, 0x62, 0x20, 0x8}]}}}}}, 0x0) syz_clone(0xc0027080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.414815014s ago: executing program 7 (id=3284): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 5.413876774s ago: executing program 2 (id=3285): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x11, 0x547, &(0x7f0000001140)="$eJzs3c9vG0UbAOB3naS/0q/JJzgAp0ggtVKp0zQFioREuVNRCTgXy3GjKna2ip2qiSqVHjjDoZw4cUacOCMh/gcuSJy4oNIKVUiFm9E669Rt7NZNnbqwzyNtOrOz9vj17jua9dhqAIU1l/0pRbwcEV8kETM9bZORN85tHXfv7rXqX3evVZNotz/8I4kk39c9Psn/nc4rL0XEj59FHC/t7Le5sblSqddra3l9vtW4PN/c2DxxqVFZri3XVhfPLL5xemHh1OkzI4u1fL1y4PaXH9y+ufbriY8/v3c0ibNxOG/rjWNU5mIuf0+m4uxDbQuj7mzMknG/AHZlIs/zqcjGgJmYyLMe+O+7HhFtoKAS+Q8F1Z0HZPe/3W28M5Jn6857WzdAO+Of3PpsJGba2b3RoT+TB+6Msvvd2RH0n/Vx9vj537Mt9uhzCIB+Pr0REScnJ3eOf0k+/u3eySGOebgP4x88Oz9k85/X+81/SnluHuj8fXj+M90nd3fj8flfujWCbgbK5n/v9J3/bi9azU7ktf915nxTycVL9Vo2th2JiGMxtT+rD1zPyR548O2ZQc29879sy/rvzgXzJ7g1uf/BxyxVWpWnDHvbnRsRr/Sd/ybb5z/pc/6zsM4P2ceRF978eVDb4+PfW+2vI472Pf/3V7SSR69Pzneuh/nuVbHT4sTgNZVxx5+d/0OPjn826V2vbT55H699O/3ToLbdXv/7ko865X35vquVVmttIWJf8v7O/afuP7Zb7x6fxX/s1UePf/2u/4MR8cmQ8X+/+M0vu49/b2XxLz3R+X/ywlfpd+8O6n+483+6UzqW7xlm/Bv2BT7NewcAAAAAAADPm1JEHI6kVN4ul0rl8tb3O16MQ6V62mwdv5iury5F57eyszFV6q50z/R8H2Ih/z5st36qp96+Xq8tRsT/I+LmxMFOe7ma1pfGHTwAAAAAAAAAAAAAAAAAAAA8J6YH/P4/89vEuF8dsOf8l99QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FJf8h+KS/1Bc8h8AAAAAAAAAAAAAAAAAAAAAAAAAAABG6vy5c9nW/vvutWpWX7qysb6SXjmxVGuulBvr1XI1XbtcXk7T5XqtXE0bj3u+eppefitW16/Ot2rN1nxzY/NCI11fbV241Kgs1y7Upp5JVAAAAAAAAAAAAAAAAAAAAPDv0tzYXKnU67U1BQUFhe3CuEcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjvnwAAAP//qAUYIQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.412983094s ago: executing program 4 (id=3286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5.351910395s ago: executing program 4 (id=3287): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 3.899823846s ago: executing program 7 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 3.864407856s ago: executing program 6 (id=3289): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 3.863268786s ago: executing program 4 (id=3290): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(0xffffffffffffffff, 0x6000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x7, 0x207}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) 1.074891265s ago: executing program 3 (id=3291): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x16, "52b16000fbaecd5770ac65bf3b1426137a9c52094728"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x7, "b03f99ead24a53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 989.073886ms ago: executing program 4 (id=3292): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) close(r6) r7 = syz_io_uring_complete(0x0) recvmsg$inet_nvme(r7, &(0x7f0000001a80)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f0000001880)=""/179, 0xb3}], 0x7, &(0x7f00000019c0)=""/170, 0xaa}, 0x100) r8 = openat(0xffffffffffffff9c, 0x0, 0x641, 0x0) flock(r8, 0x2) flock(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x10000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000140)={0x4, 0x1}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x2, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}, {0x1, 0x6, 0x4}]}) 931.663897ms ago: executing program 7 (id=3293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000095a1620e7f3e6911880164cab4a20b8aa5ee230135734a407fb7bd3441344e820240ef2c91f2055873084710fee7a8b124864f5e59f7de3ad2849d8ed6f4df336c2132e500b1ae27f3d4443df77fde3436ffeee3436892514f37ae0bfb6018f960cab3f260d7b11e870420799a21d9def8c9bfc79f62433e67dc00ad78d961d7db499657089ce09248baab6c19bb9ecb134fcc77327412d3fd24"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") r4 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() r6 = getpid() getpgrp(r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00fb00020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040fb020000000005000500000000000a"], 0x80}}, 0x0) 469.882013ms ago: executing program 6 (id=3294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 469.056534ms ago: executing program 2 (id=3295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 5.17735ms ago: executing program 4 (id=3296): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2.17513ms ago: executing program 6 (id=3297): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x16, "52b16000fbaecd5770ac65bf3b1426137a9c52094728"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x7, "b03f99ead24a53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=3298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): ta mode: writeback. [ 747.493371][ T9076] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.545365][ T9074] syz.5.2619[9074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.545442][ T9074] syz.5.2619[9074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.559446][ T9082] syz.3.2621[9082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.570924][ T9082] syz.3.2621[9082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.591471][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 747.591486][ T28] audit: type=1326 audit(1748926458.847:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 747.634011][ T321] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 747.662654][ T321] EXT4-fs error (device loop5): ext4_release_dquot:6825: comm kworker/u4:4: Failed to release dquot type 1 [ 747.717164][ T28] audit: type=1326 audit(1748926458.847:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 747.840387][ T28] audit: type=1326 audit(1748926458.847:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 748.310438][ T28] audit: type=1326 audit(1748926458.857:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 748.871948][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 748.883838][ T28] audit: type=1326 audit(1748926458.857:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 748.912495][ T28] audit: type=1326 audit(1748926458.857:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 749.375750][ T9103] syz.4.2625[9103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.375832][ T9103] syz.4.2625[9103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.403750][ T28] audit: type=1326 audit(1748926458.877:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 749.457531][ T28] audit: type=1326 audit(1748926458.887:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 750.330474][ T28] audit: type=1326 audit(1748926458.887:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 752.156677][ T9122] loop5: detected capacity change from 0 to 512 [ 754.664884][ T9122] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 755.522972][ T9145] syz.5.2637[9145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.524403][ T9145] syz.5.2637[9145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 761.061888][ T9155] 9pnet_fd: Insufficient options for proto=fd [ 764.496807][ T9184] loop1: detected capacity change from 0 to 512 [ 767.141748][ T9184] EXT4-fs (loop1): 1 orphan inode deleted [ 767.147543][ T9184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 767.156631][ T10] __quota_error: 3 callbacks suppressed [ 767.156645][ T10] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 767.172082][ T9184] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.228837][ T28] audit: type=1326 audit(1748926478.527:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.286468][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:1: Failed to release dquot type 1 [ 767.306354][ T28] audit: type=1326 audit(1748926478.527:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.411953][ T284] EXT4-fs (loop1): unmounting filesystem. [ 767.418976][ T28] audit: type=1326 audit(1748926478.527:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.442586][ T28] audit: type=1326 audit(1748926478.527:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.467181][ T28] audit: type=1326 audit(1748926478.527:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.491145][ T28] audit: type=1326 audit(1748926478.527:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.515378][ T28] audit: type=1326 audit(1748926478.527:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.540909][ T28] audit: type=1326 audit(1748926478.527:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 767.602213][ T28] audit: type=1326 audit(1748926478.527:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.1.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 768.524113][ T9215] syz.3.2657[9215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.524182][ T9215] syz.3.2657[9215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.789530][ T9224] syz.1.2656[9224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.801064][ T9224] syz.1.2656[9224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.890128][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 772.890145][ T28] audit: type=1400 audit(1748926484.187:1716): avc: denied { write } for pid=9237 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 773.021609][ T9249] loop1: detected capacity change from 0 to 128 [ 773.181496][ T9249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 773.195490][ T9249] ext4 filesystem being mounted at /499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 773.489239][ T284] EXT4-fs (loop1): unmounting filesystem. [ 777.044214][ T9270] input: syz1 as /devices/virtual/input/input95 [ 777.077834][ T28] audit: type=1326 audit(1748926486.327:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.159314][ T28] audit: type=1326 audit(1748926486.337:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.289921][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x1 [ 777.304823][ T28] audit: type=1326 audit(1748926486.357:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.337814][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.374198][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.383787][ T28] audit: type=1326 audit(1748926486.357:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.404187][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.409362][ T28] audit: type=1326 audit(1748926486.367:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.441302][ T28] audit: type=1326 audit(1748926486.377:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.472737][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.474189][ T28] audit: type=1326 audit(1748926486.387:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.503946][ T28] audit: type=1326 audit(1748926486.387:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.513971][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.527515][ T28] audit: type=1326 audit(1748926486.397:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9265 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3a698e969 code=0x7ffc0000 [ 777.606178][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x4 [ 777.613957][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.623362][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.631218][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.638990][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x2 [ 777.646764][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.654525][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.662256][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x4 [ 777.670024][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.677860][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.685636][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x2 [ 777.693409][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.761226][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.769283][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.777101][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.784863][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.792613][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.800444][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.808551][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.817303][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.825471][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.833242][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.851378][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.864404][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.881365][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.916517][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.984381][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 777.992487][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 778.000603][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 778.008435][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 778.016482][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 778.024741][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: unknown main item tag 0x0 [ 778.033786][ T1048] hid-generic 0000:007F:FFFFFFFE.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 780.069289][ T9296] fido_id[9296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 785.272522][ T9341] syz.2.2691[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.272916][ T9341] syz.2.2691[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 788.103238][ T9351] usb usb1: usbfs: process 9351 (syz.2.2693) did not claim interface 0 before use [ 788.279207][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 788.279224][ T28] audit: type=1400 audit(1748926499.577:1731): avc: denied { remount } for pid=9359 comm="syz.4.2696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 788.311401][ T9360] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 789.697846][ T9375] loop5: detected capacity change from 0 to 1024 [ 789.776631][ T9375] EXT4-fs error (device loop5): __ext4_fill_super:5377: inode #2: comm syz.5.2701: casefold flag without casefold feature [ 789.804352][ T9375] EXT4-fs (loop5): get root inode failed [ 789.830286][ T9375] EXT4-fs (loop5): mount failed [ 794.213084][ T9401] loop5: detected capacity change from 0 to 1024 [ 797.217497][ T28] audit: type=1326 audit(1748926505.497:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.248538][ T28] audit: type=1326 audit(1748926505.497:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.272058][ T28] audit: type=1326 audit(1748926505.497:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.296292][ T28] audit: type=1326 audit(1748926505.497:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.320137][ T28] audit: type=1326 audit(1748926505.497:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.343641][ T28] audit: type=1326 audit(1748926505.497:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.387844][ T9401] EXT4-fs: failed to create workqueue [ 797.393246][ T9401] EXT4-fs (loop5): mount failed [ 797.417452][ T28] audit: type=1326 audit(1748926505.497:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.594924][ T28] audit: type=1326 audit(1748926505.497:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 797.624393][ T28] audit: type=1326 audit(1748926505.497:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 798.790439][ T28] audit: type=1326 audit(1748926505.497:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 800.322188][ T9425] usb usb1: usbfs: process 9425 (syz.2.2713) did not claim interface 0 before use [ 811.392478][ T9487] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 811.450390][ T9496] loop1: detected capacity change from 0 to 1024 [ 811.484823][ T9496] EXT4-fs error (device loop1): __ext4_fill_super:5377: inode #2: comm syz.1.2732: casefold flag without casefold feature [ 811.497947][ T9496] EXT4-fs (loop1): get root inode failed [ 811.503890][ T9496] EXT4-fs (loop1): mount failed [ 812.760647][ T9512] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 812.956924][ T9518] syz.4.2737[9518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.957349][ T9518] syz.4.2737[9518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.256314][ T9520] usb usb1: usbfs: process 9520 (syz.5.2739) did not claim interface 0 before use [ 815.043915][ T9532] loop5: detected capacity change from 0 to 256 [ 815.667172][ T9532] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 816.792754][ T9550] syz.3.2746[9550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.792828][ T9550] syz.3.2746[9550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.320004][ T9573] usb usb1: usbfs: process 9573 (syz.5.2752) did not claim interface 0 before use [ 821.606835][ T9585] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 821.615930][ T9584] input: syz1 as /devices/virtual/input/input96 [ 821.771930][ T9588] syz.4.2757[9588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.772014][ T9588] syz.4.2757[9588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 826.841829][ T9625] syz.5.2769[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 826.853314][ T9625] syz.5.2769[9625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.022787][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x1 [ 827.106039][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 827.186442][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 827.186468][ T28] audit: type=1400 audit(1748926538.487:1746): avc: denied { connect } for pid=9623 comm="syz.2.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 827.232589][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 827.299203][ T28] audit: type=1400 audit(1748926538.597:1747): avc: denied { create } for pid=9623 comm="syz.2.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 827.310800][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 827.997664][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.064411][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.087382][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x4 [ 828.116779][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.135721][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.174382][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.194379][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x2 [ 828.202173][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.234646][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.262740][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x4 [ 828.282997][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.301085][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.314161][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x2 [ 828.332155][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.350205][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.364157][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.382101][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.392188][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.410222][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.424177][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.442122][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.460163][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.478519][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.494149][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.512377][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.522472][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.542753][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.563539][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.571682][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.584297][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.596414][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.614219][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.632303][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.640720][ T366] hid-generic 0000:007F:FFFFFFFE.0044: unknown main item tag 0x0 [ 828.655683][ T366] hid-generic 0000:007F:FFFFFFFE.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 828.719364][ T9639] fido_id[9639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 828.851044][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 828.869851][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 828.896224][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 829.594429][ T9649] syz.4.2774[9649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.594503][ T9649] syz.4.2774[9649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.649556][ T28] audit: type=1326 audit(1748926540.797:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 830.597980][ T28] audit: type=1326 audit(1748926540.797:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 830.621927][ T28] audit: type=1326 audit(1748926540.897:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 830.676953][ T9654] syz.5.2777[9654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.678113][ T9654] syz.5.2777[9654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.719551][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 830.789418][ T28] audit: type=1326 audit(1748926542.067:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.5.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 831.306996][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 831.314451][ T28] audit: type=1326 audit(1748926542.067:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.5.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 831.365026][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 831.409273][ T28] audit: type=1400 audit(1748926542.707:1753): avc: denied { name_bind } for pid=9644 comm="syz.1.2776" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 831.441707][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 832.874111][ T9679] syz.5.2781[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.874360][ T9679] syz.5.2781[9679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.984856][ T28] audit: type=1326 audit(1748926544.167:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.028409][ T28] audit: type=1326 audit(1748926544.167:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.088665][ T28] audit: type=1326 audit(1748926544.167:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.142558][ T28] audit: type=1326 audit(1748926544.187:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.254583][ T28] audit: type=1326 audit(1748926544.187:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.278589][ T28] audit: type=1326 audit(1748926544.187:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.302153][ T28] audit: type=1326 audit(1748926544.187:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.335142][ T28] audit: type=1326 audit(1748926544.187:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.387299][ T28] audit: type=1326 audit(1748926544.187:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.410933][ T28] audit: type=1326 audit(1748926544.187:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.5.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 835.814906][ T221] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 836.024293][ T221] usb 4-1: Using ep0 maxpacket: 16 [ 836.031616][ T221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.163365][ T221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.263258][ T9701] overlayfs: missing 'lowerdir' [ 836.313689][ T221] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 836.670265][ T9714] loop5: detected capacity change from 0 to 128 [ 837.062962][ T221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.071779][ T221] usb 4-1: config 0 descriptor?? [ 837.487038][ T221] appleir 0003:05AC:8241.0045: unknown main item tag 0x0 [ 837.494244][ T221] appleir 0003:05AC:8241.0045: unknown main item tag 0x0 [ 837.501866][ T221] appleir 0003:05AC:8241.0045: unknown main item tag 0x0 [ 837.509065][ T221] appleir 0003:05AC:8241.0045: unknown main item tag 0x0 [ 837.516592][ T221] appleir 0003:05AC:8241.0045: No inputs registered, leaving [ 837.529907][ T221] appleir 0003:05AC:8241.0045: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 839.152661][ T9743] syz.1.2801[9743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.152737][ T9743] syz.1.2801[9743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.427512][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 839.427527][ T28] audit: type=1326 audit(1748926550.447:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.497600][ T28] audit: type=1326 audit(1748926550.447:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.521134][ T28] audit: type=1326 audit(1748926550.447:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.547017][ T28] audit: type=1326 audit(1748926550.467:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.570536][ T28] audit: type=1326 audit(1748926550.467:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.605107][ T28] audit: type=1326 audit(1748926550.467:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.730342][ T28] audit: type=1326 audit(1748926550.467:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 839.754623][ T28] audit: type=1326 audit(1748926550.467:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 840.119850][ T28] audit: type=1326 audit(1748926550.467:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 840.145498][ T28] audit: type=1326 audit(1748926550.467:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 840.184144][ T19] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 840.280279][ T9759] overlayfs: missing 'lowerdir' [ 845.161113][ T9804] loop5: detected capacity change from 0 to 16 [ 845.298969][ T7488] usb 4-1: USB disconnect, device number 44 [ 845.335414][ T9804] erofs: (device loop5): mounted with root inode @ nid 36. [ 846.185785][ T9809] syz.3.2821[9809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.186184][ T9809] syz.3.2821[9809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.414372][ T1278] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 851.474216][ T9831] overlayfs: missing 'lowerdir' [ 855.508941][ T9845] 9pnet_fd: Insufficient options for proto=fd [ 855.570876][ T9850] loop5: detected capacity change from 0 to 128 [ 855.627232][ T9850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 857.076122][ T9859] syz.4.2836[9859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.076562][ T9859] syz.4.2836[9859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.529766][ T9850] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 857.654309][ T366] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 859.126057][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 859.133324][ T366] usb 2-1: device descriptor read/all, error -61 [ 859.143431][ T9871] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 859.464903][ T9878] syz.4.2839[9878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.465350][ T9878] syz.4.2839[9878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.529341][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 859.531207][ T28] audit: type=1326 audit(1748926570.757:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 859.534773][ T366] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 859.849330][ T28] audit: type=1326 audit(1748926570.757:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 862.857471][ T28] audit: type=1326 audit(1748926570.757:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 862.881306][ T28] audit: type=1326 audit(1748926570.777:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 862.906556][ T28] audit: type=1326 audit(1748926570.777:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 862.930185][ T28] audit: type=1326 audit(1748926570.797:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 862.972678][ T28] audit: type=1326 audit(1748926570.797:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 863.008182][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 863.028059][ T28] audit: type=1326 audit(1748926570.807:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 863.075389][ T28] audit: type=1326 audit(1748926570.807:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 863.123451][ T28] audit: type=1326 audit(1748926570.807:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 863.297457][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.308010][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 863.332682][ T9893] loop5: detected capacity change from 0 to 128 [ 863.342196][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 863.387039][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 863.440318][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 863.448523][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 863.456975][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 864.859373][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 864.859391][ T28] audit: type=1326 audit(1748926575.037:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9890 comm="syz.1.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbde18e969 code=0x7ffc0000 [ 869.517374][ T28] audit: type=1400 audit(1748926580.817:1808): avc: denied { ioctl } for pid=9920 comm="syz.3.2855" path="socket:[48668]" dev="sockfs" ino=48668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 869.707712][ T28] audit: type=1400 audit(1748926580.847:1809): avc: denied { bind } for pid=9920 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 871.357086][ T9940] loop5: detected capacity change from 0 to 512 [ 871.366996][ T508] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 871.585890][ T508] usb 4-1: Using ep0 maxpacket: 16 [ 871.595277][ T9940] EXT4-fs (loop5): 1 orphan inode deleted [ 871.601053][ T9940] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 871.611549][ T9940] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.698711][ T9940] syz.5.2860[9940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 871.699113][ T9940] syz.5.2860[9940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 871.755204][ T28] audit: type=1326 audit(1748926582.987:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 871.794777][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.301480][ T28] audit: type=1326 audit(1748926582.987:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.325313][ T3191] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 872.325565][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.344859][ T508] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 872.353910][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.362576][ T28] audit: type=1326 audit(1748926582.997:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.394989][ T508] usb 4-1: config 0 descriptor?? [ 872.404354][ T28] audit: type=1326 audit(1748926583.017:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.428165][ T3191] EXT4-fs error (device loop5): ext4_release_dquot:6825: comm kworker/u4:16: Failed to release dquot type 1 [ 872.445329][ T28] audit: type=1326 audit(1748926583.017:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.469463][ T28] audit: type=1326 audit(1748926583.027:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.493029][ T28] audit: type=1326 audit(1748926583.027:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.518605][ T28] audit: type=1326 audit(1748926583.027:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.542422][ T28] audit: type=1326 audit(1748926583.037:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.5.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 872.554638][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 875.261662][ T9951] syz.5.2862[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 875.261748][ T9951] syz.5.2862[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 875.330907][ T508] appleir 0003:05AC:8241.0046: unknown main item tag 0x0 [ 876.039328][ T508] appleir 0003:05AC:8241.0046: unknown main item tag 0x0 [ 876.046679][ T508] appleir 0003:05AC:8241.0046: unknown main item tag 0x0 [ 876.053938][ T508] appleir 0003:05AC:8241.0046: No inputs registered, leaving [ 876.086351][ T508] appleir 0003:05AC:8241.0046: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 876.166808][ T508] usb 4-1: USB disconnect, device number 45 [ 876.451438][ T9967] syz.1.2865[9967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 876.451571][ T9967] syz.1.2865[9967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.554746][ T9960] fido_id[9960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 880.878880][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 880.897248][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 880.910767][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 880.920625][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 880.929069][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 880.937195][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 880.947415][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 880.978556][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 880.989839][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 881.002642][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 881.011127][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 881.019696][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 881.028361][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 881.038266][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 881.671581][T10017] input: syz1 as /devices/virtual/input/input99 [ 881.947482][T10028] loop5: detected capacity change from 0 to 256 [ 881.956743][T10028] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 885.997345][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 886.114848][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 886.122173][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 886.230505][T10067] usb usb1: usbfs: process 10067 (syz.3.2895) did not claim interface 0 before use [ 886.534818][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 886.544588][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 886.552198][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 886.571267][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 886.908950][T10077] loop5: detected capacity change from 0 to 512 [ 890.906495][T10078] syz.5.2897[10078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 890.906655][T10078] syz.5.2897[10078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 892.864476][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 892.864496][ T28] audit: type=1326 audit(1748926602.207:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 892.938267][T10077] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 892.998104][ T28] audit: type=1326 audit(1748926602.207:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 893.072092][ T28] audit: type=1326 audit(1748926602.207:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 893.125943][T10089] loop5: detected capacity change from 0 to 256 [ 893.143660][T10089] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 893.146742][ T28] audit: type=1326 audit(1748926602.217:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 893.941821][ T28] audit: type=1326 audit(1748926602.217:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.033548][ T28] audit: type=1326 audit(1748926602.217:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.104121][ T28] audit: type=1326 audit(1748926602.217:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.196231][ T28] audit: type=1326 audit(1748926602.217:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.260870][ T28] audit: type=1326 audit(1748926602.217:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.348809][ T28] audit: type=1326 audit(1748926602.217:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae938e969 code=0x7ffc0000 [ 894.936907][T10115] loop5: detected capacity change from 0 to 1024 [ 895.233689][T10115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 898.239607][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 900.756148][T10145] syz.4.2915[10145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 900.756600][T10145] syz.4.2915[10145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.026096][T10146] syz.5.2914[10146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.038024][T10146] syz.5.2914[10146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 903.721046][T10162] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.845178][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.854686][T10162] device bridge_slave_0 entered promiscuous mode [ 903.864554][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.871649][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.881168][T10162] device bridge_slave_1 entered promiscuous mode [ 908.222254][T10194] syz.4.2930[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 908.222599][T10194] syz.4.2930[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 908.255025][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 908.255059][ T28] audit: type=1326 audit(1748926619.537:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 908.308247][ T28] audit: type=1326 audit(1748926619.537:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 908.331972][ T28] audit: type=1326 audit(1748926619.557:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 908.998120][ T28] audit: type=1326 audit(1748926619.597:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.105748][ T28] audit: type=1326 audit(1748926619.597:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.169786][ T28] audit: type=1326 audit(1748926619.597:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.193862][ T28] audit: type=1326 audit(1748926619.597:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.217775][ T28] audit: type=1326 audit(1748926619.597:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.241290][ T28] audit: type=1326 audit(1748926619.597:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 909.264989][ T28] audit: type=1326 audit(1748926619.597:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10188 comm="syz.4.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77e18e969 code=0x7ffc0000 [ 912.926366][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 912.946408][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 912.963004][T10231] loop5: detected capacity change from 0 to 1024 [ 912.969930][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 912.997601][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 913.016818][T10231] EXT4-fs error (device loop5): __ext4_fill_super:5377: inode #2: comm syz.5.2941: casefold flag without casefold feature [ 913.035021][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 913.044444][T10231] EXT4-fs (loop5): get root inode failed [ 913.148516][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 913.156382][T10231] EXT4-fs (loop5): mount failed [ 913.161815][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 913.175584][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.183365][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.417233][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.477340][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.485651][ T2409] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.492677][ T2409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.500077][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.513539][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.523482][ T2409] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.530569][ T2409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.538114][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.568983][T10162] device veth0_vlan entered promiscuous mode [ 913.582555][T10162] device veth1_macvtap entered promiscuous mode [ 913.664320][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.678848][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.357391][T10251] syz.2.2944[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 914.357462][T10251] syz.2.2944[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 914.464543][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 914.464584][ T28] audit: type=1326 audit(1748926625.657:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.360950][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.394479][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.419490][ T28] audit: type=1326 audit(1748926625.657:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.422714][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.443129][ T28] audit: type=1326 audit(1748926625.657:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.494093][ T28] audit: type=1326 audit(1748926625.757:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.528332][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.544443][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.554106][ T28] audit: type=1326 audit(1748926625.757:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.584258][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.604624][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.612991][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.624114][ T28] audit: type=1326 audit(1748926625.757:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.674098][ T28] audit: type=1326 audit(1748926625.757:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.674183][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.714102][ T28] audit: type=1326 audit(1748926625.757:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.739442][ T28] audit: type=1326 audit(1748926625.757:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.763519][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.772143][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.780979][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.789118][ T28] audit: type=1326 audit(1748926625.757:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d18e969 code=0x7ffc0000 [ 915.813231][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.891736][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.899484][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.997529][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.004699][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.051058][T10256] device bridge_slave_0 entered promiscuous mode [ 916.058777][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.066145][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.112010][T10256] device bridge_slave_1 entered promiscuous mode [ 916.127741][T10269] overlayfs: missing 'lowerdir' [ 916.380330][T10273] loop5: detected capacity change from 0 to 1024 [ 917.314340][ T366] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 917.985665][ T366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.000616][T10273] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 918.075002][ T366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.086248][ T366] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.095562][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.103587][ T366] usb 3-1: Product: syz [ 918.108076][ T366] usb 3-1: Manufacturer: syz [ 918.112709][ T366] usb 3-1: SerialNumber: syz [ 918.245993][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 918.330146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 918.338161][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 918.358965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 918.367643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 918.415257][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.422333][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.429823][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 918.438576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 918.448782][ T366] usb 3-1: 0:2 : does not exist [ 918.455612][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.462663][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.591792][ T366] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 919.667247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.233855][ T366] usb 3-1: USB disconnect, device number 44 [ 920.315548][T10256] device veth0_vlan entered promiscuous mode [ 920.464972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 920.473220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.482446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 920.518685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.574258][ T508] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 920.647023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 920.689712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 920.729667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 920.737808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 920.746065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 920.753674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 920.794209][ T508] usb 5-1: Using ep0 maxpacket: 16 [ 920.801181][ T508] usb 5-1: config 4 has an invalid interface number: 15 but max is 0 [ 920.809854][ T508] usb 5-1: config 4 has no interface number 0 [ 920.816024][ T508] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 920.827253][ T508] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 920.841305][ T508] usb 5-1: config 4 interface 15 has no altsetting 0 [ 920.860225][ T508] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 920.862936][T10256] device veth1_macvtap entered promiscuous mode [ 920.882556][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 920.882558][ T508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.882583][ T508] usb 5-1: Product: syz [ 920.893347][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 920.916876][ T508] usb 5-1: Manufacturer: syz [ 920.920810][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 920.921499][ T508] usb 5-1: SerialNumber: syz [ 920.931543][T10295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 920.954131][T10295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 920.960230][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 920.976486][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 920.993435][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 921.010007][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 921.241523][T10295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 921.265005][T10295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.174362][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 925.215674][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 925.269903][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 925.310951][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 925.341489][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 925.372386][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.403114][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.424471][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.448338][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.470142][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 925.513350][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.545698][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 925.576155][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 925.719425][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 925.734889][T10330] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.752985][T10330] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.760649][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 925.774619][T10330] device bridge_slave_0 entered promiscuous mode [ 925.793820][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 925.820113][T10330] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.895360][T10330] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.907672][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 925.973004][T10330] device bridge_slave_1 entered promiscuous mode [ 926.015457][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 926.112598][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 926.208347][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 926.299069][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 926.357178][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 926.411547][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 926.939237][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 926.959650][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 927.082982][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 927.097920][ T508] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 927.121654][ T508] ax88179_178a 5-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter, c2:34:c0:e3:46:a7 [ 934.149092][ T508] usb 5-1: USB disconnect, device number 41 [ 934.158356][ T508] ax88179_178a 5-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter [ 934.177353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.189527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.323773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 934.342354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 934.351415][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.358657][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.543172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 934.656893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 934.690142][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.697278][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.759966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 934.773118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 934.781436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 934.789912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 934.799064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.811708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 934.821898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 934.839202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 934.848654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 934.858346][T10330] device veth0_vlan entered promiscuous mode [ 934.864821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 935.220291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 935.242438][T10330] device veth1_macvtap entered promiscuous mode [ 935.265381][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 935.286056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 935.294409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 935.302188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 935.310836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 935.325228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 935.340937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 937.291544][T10427] syz.2.2959[10427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.292888][T10427] syz.2.2959[10427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.404474][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 937.404507][ T28] audit: type=1326 audit(1748926648.697:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.2.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cdd8e969 code=0x7ffc0000 [ 938.763745][ T28] audit: type=1326 audit(1748926648.697:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.2.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cdd8e969 code=0x7ffc0000 [ 941.824490][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.831658][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.839641][T10456] device bridge_slave_0 entered promiscuous mode [ 941.847464][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.854763][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.862393][T10456] device bridge_slave_1 entered promiscuous mode [ 941.905855][ T7488] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 941.952733][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.959821][T10456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.967127][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.974188][T10456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.999116][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.017497][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.031515][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 942.039200][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 942.104507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 942.112718][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.119774][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.127814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 942.136076][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.143132][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.143338][ T7488] usb 4-1: Using ep0 maxpacket: 16 [ 942.162509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 942.170841][ T7488] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 942.179252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.187099][ T7488] usb 4-1: config 4 has no interface number 0 [ 942.201823][T10456] device veth0_vlan entered promiscuous mode [ 942.303910][T10466] loop5: detected capacity change from 0 to 1024 [ 942.485246][T10466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 942.595156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 942.639760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.737210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 942.803899][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 943.304074][ T7488] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 943.307637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 943.313919][ T7488] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 943.331768][ T7488] usb 4-1: config 4 interface 15 has no altsetting 0 [ 943.495586][T10456] device veth1_macvtap entered promiscuous mode [ 943.505258][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 943.513427][ T7488] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 943.527224][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.534066][ T7488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.539258][T10477] loop5: detected capacity change from 0 to 256 [ 943.543225][ T7488] usb 4-1: Product: syz [ 943.652897][T10477] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 943.678028][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.755908][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.836337][ T7488] usb 4-1: Manufacturer: syz [ 943.841349][ T7488] usb 4-1: SerialNumber: syz [ 943.847008][ T1049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.868777][T10449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 943.882334][T10449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.170411][T10449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.194291][T10449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 944.527855][T10495] loop5: detected capacity change from 0 to 512 [ 944.544999][T10495] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3000: casefold flag without casefold feature [ 944.558849][T10495] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3000: couldn't read orphan inode 15 (err -117) [ 944.571350][T10499] syz.2.2997[10499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.571423][T10499] syz.2.2997[10499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.573694][T10495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 944.656351][ T28] audit: type=1400 audit(1748926655.957:1890): avc: denied { create } for pid=10494 comm="syz.5.3000" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 944.721022][ T28] audit: type=1400 audit(1748926656.017:1891): avc: denied { mounton } for pid=10494 comm="syz.5.3000" path="/84/file0/bus" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 944.743912][ T28] audit: type=1400 audit(1748926656.017:1892): avc: denied { write } for pid=10494 comm="syz.5.3000" name="bus" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 944.766067][ T28] audit: type=1400 audit(1748926656.017:1893): avc: denied { add_name } for pid=10494 comm="syz.5.3000" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 945.635124][ T28] audit: type=1400 audit(1748926656.017:1894): avc: denied { setattr } for pid=10494 comm="syz.5.3000" name="work" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 945.660752][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 946.043246][ T28] audit: type=1400 audit(1748926656.017:1895): avc: denied { remove_name } for pid=10494 comm="syz.5.3000" name="#19" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 946.084346][ T28] audit: type=1400 audit(1748926656.017:1896): avc: denied { rename } for pid=10494 comm="syz.5.3000" name="#19" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 946.107625][ T28] audit: type=1400 audit(1748926656.017:1897): avc: denied { unlink } for pid=10494 comm="syz.5.3000" name="#19" dev="loop5" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 946.130132][ T28] audit: type=1400 audit(1748926656.017:1898): avc: denied { unlink } for pid=10494 comm="syz.5.3000" name="#1a" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 946.154614][ T28] audit: type=1400 audit(1748926656.027:1899): avc: denied { link } for pid=10494 comm="syz.5.3000" name="file1" dev="overlay" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 946.426281][T10531] syz.6.3010[10531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.426453][T10531] syz.6.3010[10531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.887439][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 947.860149][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 947.872517][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 947.883657][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 947.896425][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 947.908056][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 947.919594][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 947.931290][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 947.956723][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 947.978969][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 949.232881][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 949.332381][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 949.396701][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 949.446463][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 949.484876][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 949.496074][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 951.251381][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 951.262965][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 951.289961][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 951.313709][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 951.448476][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 951.470605][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 951.489564][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 951.489573][T10585] syz.5.3026[10585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.489801][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 951.500498][T10585] syz.5.3026[10585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.166830][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 954.204813][T10593] 9pnet: Could not find request transport: fd0x0000000000000003 [ 954.243149][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 954.267538][T10595] 9pnet_fd: Insufficient options for proto=fd [ 954.292602][ T7488] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 954.521183][ T7488] ax88179_178a 4-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter, 1e:3c:63:9a:9b:2f [ 954.540064][ T7488] usb 4-1: USB disconnect, device number 46 [ 954.560156][ T7488] ax88179_178a 4-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter [ 956.160337][T10624] 9pnet_fd: Insufficient options for proto=fd [ 958.143770][T10631] syz.2.3038[10631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.143848][T10631] syz.2.3038[10631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.170577][T10636] overlayfs: failed to resolve './file0': -2 [ 958.648050][T10647] usb usb1: usbfs: process 10647 (syz.4.3048) did not claim interface 0 before use [ 959.669079][T10657] 9pnet_fd: Insufficient options for proto=fd [ 959.966978][T10661] syz.6.3053[10661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 959.967067][T10661] syz.6.3053[10661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 960.134300][ T508] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 960.191206][T10663] 9pnet_fd: Insufficient options for proto=fd [ 960.904128][ T508] usb 5-1: Using ep0 maxpacket: 32 [ 960.910951][ T508] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 960.996372][ T508] usb 5-1: config 0 has no interface number 0 [ 961.072843][ T508] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 961.289543][ T508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.677742][ T508] usb 5-1: Product: syz [ 961.855163][ T508] usb 5-1: Manufacturer: syz [ 961.861049][ T508] usb 5-1: SerialNumber: syz [ 963.339353][ T508] usb 5-1: config 0 descriptor?? [ 963.477603][ T508] smsc95xx v2.0.0 [ 963.490353][T10682] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 963.856273][ T508] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 963.866549][ T508] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 963.876351][ T508] usb 5-1: USB disconnect, device number 42 [ 964.429855][T10702] 9pnet_fd: Insufficient options for proto=fd [ 964.531955][T10703] usb usb1: usbfs: process 10703 (syz.6.3065) did not claim interface 0 before use [ 965.344015][T10708] 9pnet_fd: Insufficient options for proto=fd [ 968.917420][T10250] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 969.748978][T10740] kvm: pic: non byte write [ 969.926146][T10743] overlayfs: missing 'lowerdir' [ 969.952713][T10745] 9pnet_fd: Insufficient options for proto=fd [ 970.124065][T10250] usb 3-1: Using ep0 maxpacket: 16 [ 970.136290][T10250] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 970.144629][T10250] usb 3-1: config 4 has no interface number 0 [ 970.151036][T10250] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 970.289810][T10250] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 970.299957][T10250] usb 3-1: config 4 interface 15 has no altsetting 0 [ 970.309662][T10250] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 970.319184][T10250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.327409][T10250] usb 3-1: Product: syz [ 970.331697][T10250] usb 3-1: Manufacturer: syz [ 970.336415][T10250] usb 3-1: SerialNumber: syz [ 970.342448][T10726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 970.351448][T10726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 970.514072][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 970.561861][T10726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 970.569149][T10726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 970.694078][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 970.700314][ T19] usb 6-1: config index 0 descriptor too short (expected 17188, got 36) [ 970.708734][ T19] usb 6-1: config 214 has too many interfaces: 223, using maximum allowed: 32 [ 970.717655][ T19] usb 6-1: config 214 has 1 interface, different from the descriptor's value: 223 [ 970.726926][ T19] usb 6-1: config 214 has no interface number 0 [ 970.733234][ T19] usb 6-1: config 214 interface 60 altsetting 0 bulk endpoint 0xB has invalid maxpacket 627 [ 970.743375][ T19] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 970.752461][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.763728][T10753] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 973.101168][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 973.563854][ T19] usb 6-1: string descriptor 0 read error: -71 [ 973.574514][T10783] 9pnet_fd: Insufficient options for proto=fd [ 973.581418][ T19] ftdi_sio 6-1:214.60: FTDI USB Serial Device converter detected [ 973.594590][ T19] usb 6-1: Detected SIO [ 976.030521][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 976.183052][T10791] overlayfs: missing 'lowerdir' [ 976.547905][ T19] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 976.567411][T10796] 9pnet_fd: Insufficient options for proto=fd [ 976.590396][ T19] usb 6-1: USB disconnect, device number 3 [ 976.644997][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 976.659691][ T19] ftdi_sio 6-1:214.60: device disconnected [ 976.745579][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 976.756850][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 976.767645][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 976.769266][T10800] loop5: detected capacity change from 0 to 256 [ 976.778604][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 976.796749][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 976.804815][T10800] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 976.807969][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 976.831008][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 976.842783][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 976.854132][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 976.974143][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 976.987146][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 977.006206][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 977.702498][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 977.718808][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 977.735931][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 977.747155][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 977.759640][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 979.237444][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 979.248820][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 979.260705][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 979.272440][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 979.319393][T10826] loop5: detected capacity change from 0 to 512 [ 979.948976][T10826] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3098: casefold flag without casefold feature [ 979.993581][T10826] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3098: couldn't read orphan inode 15 (err -117) [ 980.304669][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 980.332858][T10826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 980.856607][T10826] overlayfs: failed to resolve './file1': -2 [ 981.295480][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 981.314812][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 981.324507][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 981.769861][ T503] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 981.964080][ T503] usb 7-1: Using ep0 maxpacket: 8 [ 981.970335][ T503] usb 7-1: config index 0 descriptor too short (expected 17188, got 36) [ 981.978961][ T503] usb 7-1: config 214 has too many interfaces: 223, using maximum allowed: 32 [ 981.988057][ T503] usb 7-1: config 214 has 1 interface, different from the descriptor's value: 223 [ 981.997416][ T503] usb 7-1: config 214 has no interface number 0 [ 982.003759][ T503] usb 7-1: config 214 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 25570, setting to 1024 [ 982.015675][ T503] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 982.018436][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 982.027175][ T503] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.045649][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 982.063418][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 982.084383][T10250] ax88179_178a 3-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, 9e:47:27:0b:a0:da [ 982.116854][T10250] usb 3-1: USB disconnect, device number 45 [ 982.123139][T10250] ax88179_178a 3-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 982.136534][T10859] loop5: detected capacity change from 0 to 128 [ 982.167152][T10859] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 982.185576][T10859] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 982.334034][ T503] usb 7-1: string descriptor 0 read error: -71 [ 982.344908][ T503] ftdi_sio 7-1:214.60: FTDI USB Serial Device converter detected [ 982.350349][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x1 [ 982.355504][ T503] usb 7-1: Detected SIO [ 982.365555][ T503] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 982.371624][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.401632][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.406080][ T503] usb 7-1: USB disconnect, device number 2 [ 982.419757][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.425466][ T503] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 982.444963][ T503] ftdi_sio 7-1:214.60: device disconnected [ 982.445664][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.465130][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.481036][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x4 [ 982.489410][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.503818][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.519794][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.530867][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x2 [ 982.540963][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.548968][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.557040][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x4 [ 982.564895][T10250] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 982.572655][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.583709][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.591637][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x2 [ 982.609364][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.619335][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.629689][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.640749][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.648755][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.657120][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.665048][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.674216][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.682390][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.692594][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.701189][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.709211][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.717124][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.725276][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.733760][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.741879][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.751539][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.759502][T10250] usb 3-1: Using ep0 maxpacket: 16 [ 982.764805][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.772677][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.780970][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.789075][T10722] hid-generic 0000:007F:FFFFFFFE.0047: unknown main item tag 0x0 [ 982.797008][T10250] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 982.805217][T10250] usb 3-1: config 4 has no interface number 0 [ 982.812321][T10250] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 982.822635][T10722] hid-generic 0000:007F:FFFFFFFE.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 982.836031][T10250] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 982.846221][T10250] usb 3-1: config 4 interface 15 has no altsetting 0 [ 982.883409][T10891] fido_id[10891]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 983.016071][T10250] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 983.025359][T10250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.033373][T10250] usb 3-1: Product: syz [ 983.037743][T10250] usb 3-1: Manufacturer: syz [ 983.042353][T10250] usb 3-1: SerialNumber: syz [ 983.057320][T10848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 983.066005][T10848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 983.430130][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 983.529995][T10848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 983.544056][T10848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 983.583416][T10902] loop5: detected capacity change from 0 to 128 [ 988.199484][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 988.554798][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 988.580311][T10934] overlayfs: missing 'lowerdir' [ 988.724154][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 988.735170][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 989.129394][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 989.141031][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 989.230496][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 989.481196][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 989.611407][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 989.626325][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 989.647415][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 990.040777][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 990.159917][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 990.185276][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 990.965794][T10957] usb usb1: usbfs: process 10957 (syz.3.3128) did not claim interface 0 before use [ 991.073320][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 991.073463][ T28] audit: type=1326 audit(1748926702.367:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 991.073743][T10964] syz.6.3129[10964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.103713][T10964] syz.6.3129[10964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.226364][ T28] audit: type=1326 audit(1748926702.367:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 991.271016][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 991.593625][T10971] syz.2.3130[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.593831][T10971] syz.2.3130[10971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 997.747592][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 997.774082][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 997.788993][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 997.823450][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 997.885979][ T28] audit: type=1326 audit(1748926702.367:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 997.924176][ T28] audit: type=1326 audit(1748926702.417:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 997.975523][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 998.011955][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 998.045224][ T2409] tipc: Disabling bearer [ 998.050778][ T2409] tipc: Left network mode [ 998.088040][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 998.144104][ T28] audit: type=1326 audit(1748926702.417:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 998.164522][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 998.184132][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 998.208892][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 998.766126][T10994] syz.2.3138[10994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 998.766632][T10994] syz.2.3138[10994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.295568][ T28] audit: type=1326 audit(1748926702.417:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 999.307686][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 999.514313][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 999.547008][T10998] 9p: Unknown access argument 18446744073709551615: -34 [ 1001.094057][ T28] audit: type=1326 audit(1748926702.417:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1002.603966][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1002.673789][ T28] audit: type=1326 audit(1748926702.417:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1002.697497][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1002.752613][ T28] audit: type=1326 audit(1748926702.417:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1002.767456][T10250] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1002.789228][T10250] ax88179_178a 3-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, 7a:a3:37:14:49:25 [ 1002.807345][T10250] usb 3-1: USB disconnect, device number 46 [ 1002.813636][T10250] ax88179_178a 3-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 1002.826528][ T28] audit: type=1326 audit(1748926702.417:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.149600][T11022] usb usb1: usbfs: process 11022 (syz.6.3143) did not claim interface 0 before use [ 1003.161580][T11026] usb usb1: usbfs: process 11026 (syz.4.3145) did not claim interface 0 before use [ 1003.240383][ T28] audit: type=1326 audit(1748926702.417:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.403787][ T28] audit: type=1326 audit(1748926702.417:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.427324][ T28] audit: type=1326 audit(1748926702.417:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.481459][ T28] audit: type=1326 audit(1748926702.417:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.505610][ T28] audit: type=1326 audit(1748926702.417:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.567535][T11030] loop5: detected capacity change from 0 to 1024 [ 1003.575405][ T28] audit: type=1326 audit(1748926702.517:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1003.600379][ T28] audit: type=1326 audit(1748926702.517:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.6.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a0d8e969 code=0x7ffc0000 [ 1004.863592][ T2409] device bridge_slave_1 left promiscuous mode [ 1004.955093][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.962836][ T2409] device bridge_slave_0 left promiscuous mode [ 1004.977923][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.993787][T11030] EXT4-fs error (device loop5): __ext4_fill_super:5377: inode #2: comm syz.5.3146: casefold flag without casefold feature [ 1005.007623][ T2409] device veth1_macvtap left promiscuous mode [ 1005.013722][ T2409] device veth0_vlan left promiscuous mode [ 1005.023327][ T28] audit: type=1326 audit(1748926716.317:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3798e969 code=0x7ffc0000 [ 1005.024234][T11030] EXT4-fs (loop5): get root inode failed [ 1005.074357][T11030] EXT4-fs (loop5): mount failed [ 1005.383583][ T28] audit: type=1326 audit(1748926716.357:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3798e969 code=0x7ffc0000 [ 1005.547579][T11049] syz.2.3151[11049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1005.547965][T11049] syz.2.3151[11049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.853786][T11058] 9pnet_fd: Insufficient options for proto=fd [ 1015.782195][T11124] incfs: Can't find or create .index dir in ./file0 [ 1015.789090][ T28] audit: type=1400 audit(1748926727.077:1939): avc: denied { mounton } for pid=11123 comm="syz.5.3173" path="/109/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1015.821367][T11124] incfs: mount failed -14 [ 1015.913594][T11129] 9pnet_fd: Insufficient options for proto=fd [ 1016.044549][T11133] overlayfs: missing 'lowerdir' [ 1016.061455][T11137] loop5: detected capacity change from 0 to 512 [ 1016.139520][T11137] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3178: casefold flag without casefold feature [ 1016.195572][T11137] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3178: couldn't read orphan inode 15 (err -117) [ 1016.207757][T11137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1016.487628][ T8935] EXT4-fs (loop5): unmounting filesystem. [ 1017.289526][T11159] loop5: detected capacity change from 0 to 256 [ 1017.302694][T11159] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 1038.604042][ T19] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1038.629282][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.654067][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.661637][T11278] device bridge_slave_0 entered promiscuous mode [ 1038.676058][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.683107][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.690856][T11278] device bridge_slave_1 entered promiscuous mode [ 1038.699395][T11277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2659290938 (10637163752 ns) > initial count (5107333296 ns). Using initial count to start timer. [ 1038.727377][T11277] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1038.795540][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.802629][T11278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.809945][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.814046][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 1038.817000][T11278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.830580][ T19] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1038.848834][ T19] usb 3-1: config 0 has no interface number 0 [ 1038.852581][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1038.867410][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.870489][ T19] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1038.883665][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.893272][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.903042][ T19] usb 3-1: Product: syz [ 1038.909367][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.921738][ T19] usb 3-1: Manufacturer: syz [ 1038.924318][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.926612][ T19] usb 3-1: SerialNumber: syz [ 1038.933415][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.945909][ T19] usb 3-1: config 0 descriptor?? [ 1038.955075][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.956458][ T19] smsc95xx v2.0.0 [ 1038.963533][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.973784][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.995237][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1039.013756][ T19] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1039.014583][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1039.028887][ T19] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1039.055012][ T19] usb 3-1: USB disconnect, device number 47 [ 1039.073349][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.125753][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.140741][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.149153][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.157810][T11278] device veth0_vlan entered promiscuous mode [ 1039.184924][T11278] device veth1_macvtap entered promiscuous mode [ 1039.461489][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.476082][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.495778][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1044.354419][T10250] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1044.884168][T10250] usb 7-1: Using ep0 maxpacket: 32 [ 1044.900994][T10250] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1045.042975][T10250] usb 7-1: config 0 has no interface number 0 [ 1045.147988][T10250] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1045.664792][T10250] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.672826][T10250] usb 7-1: Product: syz [ 1045.706098][T10250] usb 7-1: Manufacturer: syz [ 1045.713013][T11337] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1045.735661][T10250] usb 7-1: SerialNumber: syz [ 1045.761272][T10250] usb 7-1: config 0 descriptor?? [ 1045.894247][T10250] smsc95xx v2.0.0 [ 1046.950737][T10250] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1046.977637][T10250] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 1046.998811][T10250] usb 7-1: USB disconnect, device number 3 [ 1055.567810][ T2409] device bridge_slave_1 left promiscuous mode [ 1055.593635][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.759936][ T2409] device bridge_slave_0 left promiscuous mode [ 1055.961297][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.985839][T11392] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1055.999896][ T2409] device veth1_macvtap left promiscuous mode [ 1056.014291][ T2409] device veth0_vlan left promiscuous mode [ 1056.185661][ T28] audit: type=1326 audit(1748926767.487:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898758e969 code=0x7ffc0000 [ 1058.255406][T11431] syz.3.3254[11431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1058.255490][T11431] syz.3.3254[11431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1059.231627][ T28] audit: type=1326 audit(1748926767.487:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898758e969 code=0x7ffc0000 [ 1059.320629][ T28] audit: type=1326 audit(1748926769.557:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.344559][ T28] audit: type=1326 audit(1748926769.557:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.368097][ T28] audit: type=1326 audit(1748926769.557:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.391627][ T28] audit: type=1326 audit(1748926769.577:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.424755][ T28] audit: type=1326 audit(1748926769.577:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.454905][ T28] audit: type=1326 audit(1748926769.577:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.488878][ T28] audit: type=1326 audit(1748926769.577:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.561310][ T28] audit: type=1326 audit(1748926769.577:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.3.3254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94318e969 code=0x7ffc0000 [ 1059.752205][T11442] syz.3.3258[11442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1059.752283][T11442] syz.3.3258[11442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1059.788409][T10722] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1060.027305][T11452] usb usb1: usbfs: process 11452 (syz.2.3261) did not claim interface 0 before use [ 1060.084183][T10722] usb 5-1: Using ep0 maxpacket: 16 [ 1060.091688][T10722] usb 5-1: config 4 has an invalid interface number: 15 but max is 0 [ 1060.157652][T10722] usb 5-1: config 4 has no interface number 0 [ 1060.213689][T10722] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1060.238411][T10722] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1060.282764][T10722] usb 5-1: config 4 interface 15 has no altsetting 0 [ 1060.297427][T10722] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 1060.306898][T10722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.349452][T10722] usb 5-1: Product: syz [ 1060.353806][T10722] usb 5-1: Manufacturer: syz [ 1060.388610][T10722] usb 5-1: SerialNumber: syz [ 1060.414067][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1060.427924][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1060.489211][T11462] incfs: Backing dir is not set, filesystem can't be mounted. [ 1060.499134][T11462] incfs: mount failed -2 [ 1060.543420][T11464] kvm: pic: non byte write [ 1060.716371][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1060.733050][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1061.996972][T11496] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1062.019383][T11486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3423746961 (219119805504 ns) > initial count (49460237696 ns). Using initial count to start timer. [ 1062.917379][T11486] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1063.226094][T11502] usb usb1: usbfs: process 11502 (syz.6.3278) did not claim interface 0 before use [ 1064.074088][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1064.221943][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 1065.187390][T11516] usb usb1: usbfs: process 11516 (syz.4.3282) did not claim interface 0 before use [ 1066.171400][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1066.184745][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1066.196071][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1066.319040][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1067.668574][T11261] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1067.738778][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1067.764024][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1067.784032][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1067.796248][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1068.530100][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1070.526057][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1070.646675][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1070.657755][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1070.670158][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1070.681264][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1070.706785][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1070.719187][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1071.011480][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1071.079091][ T366] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1071.090442][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1071.102727][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1071.120731][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1071.134573][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1071.148478][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1071.166675][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1071.198055][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1071.252522][T10722] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1071.304172][ T366] usb 4-1: Using ep0 maxpacket: 32 [ 1071.311800][ T366] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1071.502591][T10722] ax88179_178a 5-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter, 92:42:4f:c8:6a:ff [ 1071.515572][ T366] usb 4-1: config 0 has no interface number 0 [ 1071.524421][ T366] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1071.533726][T10722] usb 5-1: USB disconnect, device number 43 [ 1071.539685][ T366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.548753][T10722] ax88179_178a 5-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter [ 1071.560090][ T366] usb 4-1: Product: syz [ 1071.564408][ T366] usb 4-1: Manufacturer: syz [ 1071.569005][ T366] usb 4-1: SerialNumber: syz [ 1071.708497][ T366] usb 4-1: config 0 descriptor?? [ 1071.713575][T10250] ================================================================== [ 1071.721634][T10250] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 1071.729554][T10250] Read of size 8 at addr ffff88811c200cf0 by task kworker/1:1/10250 [ 1071.737537][T10250] [ 1071.739908][T10250] CPU: 1 PID: 10250 Comm: kworker/1:1 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0 [ 1071.749888][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1071.759947][T10250] Workqueue: events_long br_fdb_cleanup [ 1071.765567][T10250] Call Trace: [ 1071.768880][T10250] [ 1071.771811][T10250] __dump_stack+0x21/0x24 [ 1071.776225][T10250] dump_stack_lvl+0xee/0x150 [ 1071.780826][T10250] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1071.785891][T10250] ? __list_del_entry_valid+0xa6/0x130 [ 1071.791352][T10250] print_address_description+0x71/0x210 [ 1071.796930][T10250] print_report+0x4a/0x60 [ 1071.801266][T10250] kasan_report+0x122/0x150 [ 1071.805804][T10250] ? __list_del_entry_valid+0xa6/0x130 [ 1071.811270][T10250] __asan_report_load8_noabort+0x14/0x20 [ 1071.816913][T10250] __list_del_entry_valid+0xa6/0x130 [ 1071.822203][T10250] process_one_work+0x4b9/0xc40 [ 1071.827062][T10250] worker_thread+0xa29/0x11f0 [ 1071.831755][T10250] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1071.837265][T10250] ? __kthread_parkme+0x142/0x180 [ 1071.842291][T10250] kthread+0x281/0x320 [ 1071.846370][T10250] ? __cfi_worker_thread+0x10/0x10 [ 1071.851486][T10250] ? __cfi_kthread+0x10/0x10 [ 1071.856085][T10250] ret_from_fork+0x1f/0x30 [ 1071.860512][T10250] [ 1071.863578][T10250] [ 1071.865905][T10250] Allocated by task 10722: [ 1071.870352][T10250] kasan_set_track+0x4b/0x70 [ 1071.874954][T10250] kasan_save_alloc_info+0x25/0x30 [ 1071.880074][T10250] __kasan_kmalloc+0x95/0xb0 [ 1071.884669][T10250] __kmalloc_node+0xb2/0x1e0 [ 1071.889330][T10250] kvmalloc_node+0x294/0x480 [ 1071.893947][T10250] alloc_netdev_mqs+0x8d/0xf90 [ 1071.898744][T10250] alloc_etherdev_mqs+0x37/0x40 [ 1071.903637][T10250] usbnet_probe+0x20c/0x2780 [ 1071.908269][T10250] usb_probe_interface+0x610/0xaf0 [ 1071.913431][T10250] really_probe+0x2cb/0x960 [ 1071.917982][T10250] __driver_probe_device+0x198/0x280 [ 1071.923280][T10250] driver_probe_device+0x54/0x3e0 [ 1071.928315][T10250] __device_attach_driver+0x2e9/0x4a0 [ 1071.933695][T10250] bus_for_each_drv+0x183/0x210 [ 1071.938550][T10250] __device_attach+0x2a2/0x400 [ 1071.943325][T10250] device_initial_probe+0x1a/0x20 [ 1071.948360][T10250] bus_probe_device+0xc0/0x1f0 [ 1071.953132][T10250] device_add+0xb4d/0xef0 [ 1071.957469][T10250] usb_set_configuration+0x19c2/0x1f10 [ 1071.962942][T10250] usb_generic_driver_probe+0x91/0x150 [ 1071.968468][T10250] usb_probe_device+0x159/0x270 [ 1071.973328][T10250] really_probe+0x2cb/0x960 [ 1071.977840][T10250] __driver_probe_device+0x198/0x280 [ 1071.983134][T10250] driver_probe_device+0x54/0x3e0 [ 1071.988170][T10250] __device_attach_driver+0x2e9/0x4a0 [ 1071.993639][T10250] bus_for_each_drv+0x183/0x210 [ 1071.998489][T10250] __device_attach+0x2a2/0x400 [ 1072.003348][T10250] device_initial_probe+0x1a/0x20 [ 1072.008383][T10250] bus_probe_device+0xc0/0x1f0 [ 1072.013145][T10250] device_add+0xb4d/0xef0 [ 1072.017478][T10250] usb_new_device+0xa70/0x1520 [ 1072.022293][T10250] hub_event+0x2a5d/0x4680 [ 1072.026715][T10250] process_one_work+0x71f/0xc40 [ 1072.031565][T10250] worker_thread+0xa29/0x11f0 [ 1072.036256][T10250] kthread+0x281/0x320 [ 1072.040326][T10250] ret_from_fork+0x1f/0x30 [ 1072.044744][T10250] [ 1072.047074][T10250] Freed by task 10722: [ 1072.051131][T10250] kasan_set_track+0x4b/0x70 [ 1072.055723][T10250] kasan_save_free_info+0x31/0x50 [ 1072.060763][T10250] ____kasan_slab_free+0x132/0x180 [ 1072.065895][T10250] __kasan_slab_free+0x11/0x20 [ 1072.070668][T10250] slab_free_freelist_hook+0xc2/0x190 [ 1072.076109][T10250] __kmem_cache_free+0xb7/0x1b0 [ 1072.080974][T10250] kfree+0x6f/0xf0 [ 1072.084716][T10250] kvfree+0x35/0x40 [ 1072.088536][T10250] netdev_freemem+0x3f/0x60 [ 1072.093052][T10250] netdev_release+0x7f/0xb0 [ 1072.097566][T10250] device_release+0xa4/0x1d0 [ 1072.102158][T10250] kobject_put+0x19d/0x280 [ 1072.106642][T10250] put_device+0x1f/0x30 [ 1072.110805][T10250] free_netdev+0x392/0x490 [ 1072.115224][T10250] usbnet_disconnect+0x25a/0x3b0 [ 1072.120179][T10250] ax88179_disconnect+0x82/0xb0 [ 1072.125078][T10250] usb_unbind_interface+0x223/0x8d0 [ 1072.130283][T10250] device_release_driver_internal+0x508/0x820 [ 1072.136359][T10250] device_release_driver+0x19/0x20 [ 1072.141484][T10250] bus_remove_device+0x2ee/0x350 [ 1072.146427][T10250] device_del+0x6a4/0xeb0 [ 1072.150760][T10250] usb_disable_device+0x3a8/0x750 [ 1072.155782][T10250] usb_disconnect+0x31e/0x860 [ 1072.160458][T10250] hub_event+0x1bd5/0x4680 [ 1072.164873][T10250] process_one_work+0x71f/0xc40 [ 1072.169721][T10250] worker_thread+0xd2e/0x11f0 [ 1072.174392][T10250] kthread+0x281/0x320 [ 1072.178474][T10250] ret_from_fork+0x1f/0x30 [ 1072.182894][T10250] [ 1072.185213][T10250] Last potentially related work creation: [ 1072.190918][T10250] kasan_save_stack+0x3a/0x60 [ 1072.195589][T10250] __kasan_record_aux_stack+0xb6/0xc0 [ 1072.201048][T10250] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1072.206846][T10250] insert_work+0x51/0x300 [ 1072.211178][T10250] __queue_work+0x9b1/0xd30 [ 1072.215676][T10250] queue_work_on+0xd2/0x140 [ 1072.220173][T10250] usbnet_link_change+0x176/0x1a0 [ 1072.225196][T10250] ax88179_reset+0x31c2/0x4c70 [ 1072.229951][T10250] ax88179_bind+0x2c7/0x3a0 [ 1072.234451][T10250] usbnet_probe+0xafa/0x2780 [ 1072.239040][T10250] usb_probe_interface+0x610/0xaf0 [ 1072.244154][T10250] really_probe+0x2cb/0x960 [ 1072.248658][T10250] __driver_probe_device+0x198/0x280 [ 1072.253945][T10250] driver_probe_device+0x54/0x3e0 [ 1072.258973][T10250] __device_attach_driver+0x2e9/0x4a0 [ 1072.264343][T10250] bus_for_each_drv+0x183/0x210 [ 1072.269187][T10250] __device_attach+0x2a2/0x400 [ 1072.273944][T10250] device_initial_probe+0x1a/0x20 [ 1072.278967][T10250] bus_probe_device+0xc0/0x1f0 [ 1072.283720][T10250] device_add+0xb4d/0xef0 [ 1072.288045][T10250] usb_set_configuration+0x19c2/0x1f10 [ 1072.293498][T10250] usb_generic_driver_probe+0x91/0x150 [ 1072.298943][T10250] usb_probe_device+0x159/0x270 [ 1072.303787][T10250] really_probe+0x2cb/0x960 [ 1072.308291][T10250] __driver_probe_device+0x198/0x280 [ 1072.313566][T10250] driver_probe_device+0x54/0x3e0 [ 1072.318582][T10250] __device_attach_driver+0x2e9/0x4a0 [ 1072.323944][T10250] bus_for_each_drv+0x183/0x210 [ 1072.328785][T10250] __device_attach+0x2a2/0x400 [ 1072.333541][T10250] device_initial_probe+0x1a/0x20 [ 1072.338559][T10250] bus_probe_device+0xc0/0x1f0 [ 1072.343312][T10250] device_add+0xb4d/0xef0 [ 1072.347636][T10250] usb_new_device+0xa70/0x1520 [ 1072.352392][T10250] hub_event+0x2a5d/0x4680 [ 1072.356804][T10250] process_one_work+0x71f/0xc40 [ 1072.361644][T10250] worker_thread+0xa29/0x11f0 [ 1072.366310][T10250] kthread+0x281/0x320 [ 1072.370372][T10250] ret_from_fork+0x1f/0x30 [ 1072.374783][T10250] [ 1072.377098][T10250] The buggy address belongs to the object at ffff88811c200000 [ 1072.377098][T10250] which belongs to the cache kmalloc-4k of size 4096 [ 1072.391137][T10250] The buggy address is located 3312 bytes inside of [ 1072.391137][T10250] 4096-byte region [ffff88811c200000, ffff88811c201000) [ 1072.404571][T10250] [ 1072.406900][T10250] The buggy address belongs to the physical page: [ 1072.413357][T10250] page:ffffea0004708000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c200 [ 1072.423585][T10250] head:ffffea0004708000 order:3 compound_mapcount:0 compound_pincount:0 [ 1072.432000][T10250] flags: 0x4000000000010200(slab|head|zone=1) [ 1072.438067][T10250] raw: 4000000000010200 ffffea0004cafe00 dead000000000002 ffff888100043380 [ 1072.446638][T10250] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1072.455216][T10250] page dumped because: kasan: bad access detected [ 1072.461619][T10250] page_owner tracks the page as allocated [ 1072.467327][T10250] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5253, tgid 5252 (syz.4.1371), ts 465386450792, free_ts 465371505305 [ 1072.490065][T10250] post_alloc_hook+0x1f5/0x210 [ 1072.494878][T10250] prep_new_page+0x1c/0x110 [ 1072.499377][T10250] get_page_from_freelist+0x2c6e/0x2ce0 [ 1072.504918][T10250] __alloc_pages+0x19e/0x3a0 [ 1072.509502][T10250] alloc_slab_page+0x6e/0xf0 [ 1072.514090][T10250] new_slab+0x98/0x3d0 [ 1072.518149][T10250] ___slab_alloc+0x6f6/0xb50 [ 1072.522725][T10250] __slab_alloc+0x5e/0xa0 [ 1072.527046][T10250] __kmem_cache_alloc_node+0x203/0x2c0 [ 1072.532503][T10250] kmalloc_trace+0x29/0xb0 [ 1072.536914][T10250] kobject_uevent_env+0x287/0x730 [ 1072.541929][T10250] kobject_uevent+0x1d/0x30 [ 1072.546442][T10250] net_rx_queue_update_kobjects+0x249/0x4d0 [ 1072.552325][T10250] netdev_register_kobject+0x229/0x320 [ 1072.557772][T10250] register_netdevice+0xe3d/0x14a0 [ 1072.562909][T10250] __ip_tunnel_create+0x33e/0x440 [ 1072.567971][T10250] page last free stack trace: [ 1072.572630][T10250] free_unref_page_prepare+0x742/0x750 [ 1072.578093][T10250] free_unref_page+0x8f/0x530 [ 1072.582760][T10250] __free_pages+0x67/0x100 [ 1072.587173][T10250] __free_slab+0xca/0x1a0 [ 1072.591496][T10250] __unfreeze_partials+0x160/0x190 [ 1072.596597][T10250] put_cpu_partial+0xa9/0x100 [ 1072.601270][T10250] __slab_free+0x1c4/0x280 [ 1072.605678][T10250] ___cache_free+0xbf/0xd0 [ 1072.610170][T10250] qlist_free_all+0xc6/0x140 [ 1072.614755][T10250] kasan_quarantine_reduce+0x14a/0x170 [ 1072.620396][T10250] __kasan_slab_alloc+0x24/0x80 [ 1072.625238][T10250] slab_post_alloc_hook+0x4f/0x2d0 [ 1072.630346][T10250] __kmem_cache_alloc_node+0x192/0x2c0 [ 1072.635796][T10250] __kmalloc+0xa1/0x1e0 [ 1072.639947][T10250] ops_init+0x89/0x4a0 [ 1072.644073][T10250] setup_net+0x4ab/0xcb0 [ 1072.648302][T10250] [ 1072.650609][T10250] Memory state around the buggy address: [ 1072.656222][T10250] ffff88811c200b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1072.664275][T10250] ffff88811c200c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1072.672320][T10250] >ffff88811c200c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1072.680364][T10250] ^ [ 1072.688064][T10250] ffff88811c200d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1072.696113][T10250] ffff88811c200d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1072.704161][T10250] ================================================================== [ 1072.712209][T10250] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc [ 1073.256634][ T366] smsc95xx v2.0.0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1073.294035][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1073.294217][ T28] audit: type=1400 audit(1748926784.587:1957): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[13284]" dev="pipefs" ino=13284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1073.478851][ T28] audit: type=1400 audit(1748926784.777:1958): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1073.501171][ T28] audit: type=1400 audit(1748926784.777:1959): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.529458][ T28] audit: type=1400 audit(1748926784.777:1960): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.534175][T11261] usb 7-1: device descriptor read/64, error -71 [ 1073.589134][ T28] audit: type=1400 audit(1748926784.777:1961): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.611275][ T28] audit: type=1400 audit(1748926784.777:1962): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.631956][ T28] audit: type=1400 audit(1748926784.777:1963): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.656374][ T28] audit: type=1400 audit(1748926784.777:1964): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.990138][ T366] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1074.000947][ T366] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1074.010484][ T366] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1074.021377][ T366] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 1074.034222][ T366] usb 4-1: USB disconnect, device number 47 [ 1074.375061][ T2409] device bridge_slave_1 left promiscuous mode [ 1074.381171][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.388664][ T2409] device bridge_slave_0 left promiscuous mode [ 1074.394853][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.402719][ T2409] device veth1_macvtap left promiscuous mode [ 1074.408772][ T2409] device veth0_vlan left promiscuous mode [ 1075.215179][ T2409] device bridge_slave_1 left promiscuous mode [ 1075.221298][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.228852][ T2409] device bridge_slave_0 left promiscuous mode [ 1075.235001][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.242880][ T2409] device bridge_slave_1 left promiscuous mode [ 1075.249063][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.256691][ T2409] device bridge_slave_0 left promiscuous mode [ 1075.262789][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.270759][ T2409] device bridge_slave_1 left promiscuous mode [ 1075.276994][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.284436][ T2409] device bridge_slave_0 left promiscuous mode [ 1075.290525][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.298537][ T2409] device bridge_slave_1 left promiscuous mode [ 1075.304650][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.311971][ T2409] device bridge_slave_0 left promiscuous mode [ 1075.318232][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.326885][ T2409] device veth1_macvtap left promiscuous mode [ 1075.332881][ T2409] device veth0_vlan left promiscuous mode [ 1075.339207][ T2409] device veth1_macvtap left promiscuous mode [ 1075.345221][ T2409] device veth0_vlan left promiscuous mode [ 1075.351236][ T2409] device veth1_macvtap left promiscuous mode [ 1075.357342][ T2409] device veth0_vlan left promiscuous mode [ 1075.363376][ T2409] device veth1_macvtap left promiscuous mode [ 1075.369542][ T2409] device veth0_vlan left promiscuous mode