last executing test programs: 5.894928466s ago: executing program 3 (id=52): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)) close(0x3) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 5.891446006s ago: executing program 1 (id=53): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001", @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000003900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x4}, 0xfffffffffffffffb, 0x6cd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x8, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.460325695s ago: executing program 3 (id=55): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) newfstatat(0xffffffffffffff9c, &(0x7f0000005400)='./file0\x00', &(0x7f0000005440), 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000054c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005500)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@local}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000005600)=0xe8) stat(&(0x7f0000005640)='./file0\x00', &(0x7f0000005680)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdc0) setregid(r1, 0x0) syz_pidfd_open(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 5.447848155s ago: executing program 0 (id=56): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0x0, r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2}, @generic={0x61}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x80000004, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.200758854s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mount$tmpfs(0x0, 0x0, 0x0, 0x2000402, &(0x7f0000000480)=ANY=[@ANYRES32=r2]) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000002c80)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfff}}, {@data_err_ignore}, {@dioread_nolock}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@oldalloc}, {@data_err_ignore}]}, 0xfc, 0x56c, &(0x7f0000002640)="$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") r6 = openat(r5, &(0x7f00000001c0)='./file0\x00', 0x26842, 0x42) syz_usb_connect(0x3, 0x31d, &(0x7f00000020c0)={{0x12, 0x1, 0x300, 0x97, 0xcc, 0x5b, 0x8, 0x294b, 0x135, 0x3c0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30b, 0x2, 0x4e, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0x1b, 0x8, 0xa, 0xff, 0x47, 0xd0, 0x3, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x7f, 0x30, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x69, 0x5, 0x6, [@generic={0x31, 0x10, "c3cd89ba1f0aaa150d72327b16d4b8211de509569757169a6c5433971f77ab244ba9b55327074a34704be909b04dd6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xbe, 0x200}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x3, 0x2, 0x1, [@generic={0x29, 0xf, "dead36a27f23dd25ce058947d569ec4f72c1f5af3215ea1453bd494e357950b23df7a159b5509e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xd4d5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0x6, 0x2, [@generic={0x13, 0x11, "74a503b150f1d4a25960b7ff766ff9d18e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x10}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x7, 0x0, 0x9, [@generic={0x57, 0xe, "ae7de592024ac4ec957c50fa59b12cf7bd0bb36f5c2c4405df627cc705f2a7c6a8931335c5c3aac8281cdf2d435f0d66139d01ed80983899760c5883434e26c3833d8463764dd333a530e8ffdd210111815a405887"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x7ff, 0x3, 0x9, 0xfe}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xf9, 0x8, 0x2}}, {{0x9, 0x5, 0x100, 0x2, 0x200, 0x10, 0xc, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xbc, 0x6, 0x7, [@generic={0x4c, 0xa, "3f03cb5865aecb8ff81aae3697f495ad5dc45377526bd8ec297d1c3aa7b24c0af74aeb79105ed4f922ea72bc2ec4d78b75cb0a2a417da1974f0d5bb1aafd2e092553443e7e3bae9dbd76"}]}}, {{0x9, 0x5, 0xa, 0x8cfa75dfb6d9d4ab, 0x40, 0x5, 0x9, 0x4}}]}}, {{0x9, 0x4, 0x60, 0xe, 0x2, 0x4b, 0xcb, 0x10, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x2, 0x3, 0x80, 0x8}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x8, "e7373b"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "6072cec4c724"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x2fa6, 0x6, 0x7f, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xe5, 0x5, 0x8, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x70, 0x3, 0x5}, @mdlm_detail={0xad, 0x24, 0x13, 0x7, "293bdeed5d3c6f38f1452bfed3e736348362de93f34ccb5b78a965f489b3a2e87abda03b4feaf6b664fa61898693c7c7f706ddff5a1208c310ab831e21ba5e3ce863166d7f9bab08ff229b198db95b8f6ded7444389e22f4cee92f7eb1ebc22bfeed25d256a4f342c829026917e8ef646e878f21ecb89bdf954e79131551d4564e6ac24d49e67c6aec2af96b64b24804ad3a1b6a8e5093385b78d53dd74f9e8bd80c757f4b22df4d9f"}]}], [{{0x9, 0x5, 0x1, 0xe, 0x20, 0x5, 0xb3, 0x0, [@generic={0x3d, 0x11, "cc61fcf91a2cb902707f24e6ed72d1cc91cfd417357d7594a238b2adfd0f0dcca78b60d7d4b105fa16018ed12d62fa617c7ed6b643009fa1e2750e"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1, 0xfa, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xa}, @generic={0x12, 0x21, "4b3065eabc919a4c10d947f64d260fed"}]}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002440)={0xa, 0x6, 0x300, 0x10, 0x9, 0x2, 0x8}, 0x20, &(0x7f0000002480)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "1abe98e2e1213615c5a9de638d8ed86a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x8001}]}, 0x4, [{0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x2d, &(0x7f0000002540)=ANY=[@ANYBLOB="2d0397a9c356a27123db5dbda4435ef6f0bdd9feb561ddde7c13aca609a11f330fdea45e8b277fbb4e70645173"]}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x100c}}]}) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='L', 0x1}], 0x1, 0xfff, 0x0, 0x8) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 5.019223134s ago: executing program 1 (id=61): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="04000000", 0x4}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="a2", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timerfd_create(0x3, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000300)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) 4.960269703s ago: executing program 0 (id=62): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = syz_io_uring_setup(0x7c8a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r2, r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b65581327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x10048, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000aae58d2332ef052ba1a3840fa3733d9da7f0ac61f69e8feff99f6bb96d5959666b80280856e5692552", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) 4.860402253s ago: executing program 0 (id=63): socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)={0x0, 0x0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="a2", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000300)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) 4.106249041s ago: executing program 2 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.047302338s ago: executing program 0 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000800)=""/259, 0x1b, 0x103, 0x1, 0x4, 0x0, @void, @value}, 0x28) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x4b4d, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r0}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 3.046793648s ago: executing program 2 (id=68): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000003c0)) 3.035918868s ago: executing program 1 (id=70): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030104000000000000"], 0x1c}}, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x4a1, 0x5, 0xfffffffffffffffe, 0x4000004, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8a4, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.929678598s ago: executing program 1 (id=71): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001", @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000003900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x4}, 0xfffffffffffffffb, 0x6cd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x8, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.676277597s ago: executing program 4 (id=73): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0x0, r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2}, @generic={0x61}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x80000004, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.523967597s ago: executing program 4 (id=74): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = syz_io_uring_setup(0x7c8a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r2, r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b65581327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x10048, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000aae58d2332ef052ba1a3840fa3733d9da7f0ac61f69e8feff99f6bb96d5959666b80280856e5692552", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) 2.421484906s ago: executing program 4 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000489000/0x2000)=nil) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f000051f000/0x4000)=nil, 0x4000, 0x2000008, 0x810, r0, 0xb0425000) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x97137ef8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x63}) r2 = epoll_create(0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x30000010}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x4a070000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$nl_xfrm(0x10, 0x3, 0x6) 2.084853116s ago: executing program 0 (id=76): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @multicast1}, 0x2, 0xfffffffd}}, 0x2e) 2.077802726s ago: executing program 3 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.985973425s ago: executing program 1 (id=78): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x208) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002664599405714185191cf0000000109021200010000900009040000003dc1"], 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @rand_addr, 0x5fdf4394}, 0x1c) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000500)="44f9b108b1cdc885c9c533d21f475dec8bfef1df1e2da71e578d00000000000000008571d8e27546090011006e7514ab717528ee4b7a9beaf908d1", 0x3b, 0x20044850, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) 914.738913ms ago: executing program 4 (id=79): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @multicast1}, 0x2, 0xfffffffd}}, 0x2e) 913.663173ms ago: executing program 0 (id=80): socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)={0x0, 0x0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="a2", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000300)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) 913.038972ms ago: executing program 3 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 912.119783ms ago: executing program 2 (id=82): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)) close(0x3) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 533.957492ms ago: executing program 1 (id=83): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="04000000", 0x4}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="a2", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timerfd_create(0x3, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000300)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) 533.331501ms ago: executing program 2 (id=84): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203010400000000000000000000001008"], 0x1c}}, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x4a1, 0x5, 0xfffffffffffffffe, 0x4000004, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8a4, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 409.907701ms ago: executing program 2 (id=85): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = syz_io_uring_setup(0x7c8a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r2, r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b65581327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x10048, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000aae58d2332ef052ba1a3840fa3733d9da7f0ac61f69e8feff99f6bb96d5959666b80280856e5692552", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) 284.651441ms ago: executing program 2 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000800)=""/259, 0x1b, 0x103, 0x1, 0x4, 0x0, @void, @value}, 0x28) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x4b4d, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r0}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 128.685401ms ago: executing program 4 (id=87): bpf$MAP_CREATE(0x0, &(0x7f0000003780)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x340, 0xe0, 0x0, 0xffffffff, 0x250, 0x250, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @private=0xa010100, 0x0, 0xff, 'gretap0\x00', 'pimreg1\x00', {}, {}, 0x21, 0x3, 0x80}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x8, 0x9, 0xfffff909, 0x1, 0xffffffff, 0x1, 0x80000001]}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffff00, 'batadv0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @private=0xa010102, @port=0x4e21, @port=0x4e20}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x0, 'erspan0\x00', 'ipvlan1\x00', {}, {0xff}, 0x84, 0x3}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x65, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xb, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key=0x3, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) keyctl$session_to_parent(0x12) r2 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x0, 0x1}) r3 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xb4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000000)=[r0]}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1700000000000000040000ff00000000000000009612f339086cc1a6ff7f10224b5a95b489fcd77a54472c95958a3a3aa9b0385fb1b29a2b2c6b34cd222a5ec8af2b9c29aa0c10acc0577e004ece4f320d6a03", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) ustat(0x9, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 58.33518ms ago: executing program 3 (id=88): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000003900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x4}, 0xfffffffffffffffb, 0x6cd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x8, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 4 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mount$tmpfs(0x0, 0x0, 0x0, 0x2000402, &(0x7f0000000480)=ANY=[@ANYRES32=r2]) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000002c80)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfff}}, {@data_err_ignore}, {@dioread_nolock}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@oldalloc}, {@data_err_ignore}]}, 0xfc, 0x56c, &(0x7f0000002640)="$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") r6 = openat(r5, &(0x7f00000001c0)='./file0\x00', 0x26842, 0x42) syz_usb_connect(0x3, 0x31d, &(0x7f00000020c0)={{0x12, 0x1, 0x300, 0x97, 0xcc, 0x5b, 0x8, 0x294b, 0x135, 0x3c0e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30b, 0x2, 0x4e, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0x1b, 0x8, 0xa, 0xff, 0x47, 0xd0, 0x3, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x7f, 0x30, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x69, 0x5, 0x6, [@generic={0x31, 0x10, "c3cd89ba1f0aaa150d72327b16d4b8211de509569757169a6c5433971f77ab244ba9b55327074a34704be909b04dd6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xbe, 0x200}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x3, 0x2, 0x1, [@generic={0x29, 0xf, "dead36a27f23dd25ce058947d569ec4f72c1f5af3215ea1453bd494e357950b23df7a159b5509e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xd4d5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0x6, 0x2, [@generic={0x13, 0x11, "74a503b150f1d4a25960b7ff766ff9d18e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x10}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x7, 0x0, 0x9, [@generic={0x57, 0xe, "ae7de592024ac4ec957c50fa59b12cf7bd0bb36f5c2c4405df627cc705f2a7c6a8931335c5c3aac8281cdf2d435f0d66139d01ed80983899760c5883434e26c3833d8463764dd333a530e8ffdd210111815a405887"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x7ff, 0x3, 0x9, 0xfe}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xf9, 0x8, 0x2}}, {{0x9, 0x5, 0x100, 0x2, 0x200, 0x10, 0xc, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xbc, 0x6, 0x7, [@generic={0x4c, 0xa, "3f03cb5865aecb8ff81aae3697f495ad5dc45377526bd8ec297d1c3aa7b24c0af74aeb79105ed4f922ea72bc2ec4d78b75cb0a2a417da1974f0d5bb1aafd2e092553443e7e3bae9dbd76"}]}}, {{0x9, 0x5, 0xa, 0x8cfa75dfb6d9d4ab, 0x40, 0x5, 0x9, 0x4}}]}}, {{0x9, 0x4, 0x60, 0xe, 0x2, 0x4b, 0xcb, 0x10, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x2, 0x3, 0x80, 0x8}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x8, "e7373b"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "6072cec4c724"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x2fa6, 0x6, 0x7f, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xe5, 0x5, 0x8, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x70, 0x3, 0x5}, @mdlm_detail={0xad, 0x24, 0x13, 0x7, "293bdeed5d3c6f38f1452bfed3e736348362de93f34ccb5b78a965f489b3a2e87abda03b4feaf6b664fa61898693c7c7f706ddff5a1208c310ab831e21ba5e3ce863166d7f9bab08ff229b198db95b8f6ded7444389e22f4cee92f7eb1ebc22bfeed25d256a4f342c829026917e8ef646e878f21ecb89bdf954e79131551d4564e6ac24d49e67c6aec2af96b64b24804ad3a1b6a8e5093385b78d53dd74f9e8bd80c757f4b22df4d9f"}]}], [{{0x9, 0x5, 0x1, 0xe, 0x20, 0x5, 0xb3, 0x0, [@generic={0x3d, 0x11, "cc61fcf91a2cb902707f24e6ed72d1cc91cfd417357d7594a238b2adfd0f0dcca78b60d7d4b105fa16018ed12d62fa617c7ed6b643009fa1e2750e"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1, 0xfa, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xa}, @generic={0x12, 0x21, "4b3065eabc919a4c10d947f64d260fed"}]}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002440)={0xa, 0x6, 0x300, 0x10, 0x9, 0x2, 0x8}, 0x20, &(0x7f0000002480)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "1abe98e2e1213615c5a9de638d8ed86a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x8001}]}, 0x4, [{0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x2d, &(0x7f0000002540)=ANY=[@ANYBLOB="2d0397a9c356a27123db5dbda4435ef6f0bdd9feb561ddde7c13aca609a11f330fdea45e8b277fbb4e70645173"]}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x100c}}]}) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='L', 0x1}], 0x1, 0xfff, 0x0, 0x8) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 23.049657][ T28] audit: type=1400 audit(1737270401.226:66): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.051056][ T282] cgroup: Unknown subsys name 'net' [ 23.072405][ T28] audit: type=1400 audit(1737270401.226:67): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.099285][ T28] audit: type=1400 audit(1737270401.266:68): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.099497][ T282] cgroup: Unknown subsys name 'devices' [ 23.222525][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.228061][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.363701][ T28] audit: type=1400 audit(1737270401.546:69): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.386858][ T28] audit: type=1400 audit(1737270401.546:70): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.392938][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.412599][ T28] audit: type=1400 audit(1737270401.546:71): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.436239][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.443505][ T28] audit: type=1400 audit(1737270401.606:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.477330][ T28] audit: type=1400 audit(1737270401.606:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.502794][ T28] audit: type=1400 audit(1737270401.616:74): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.528144][ T28] audit: type=1400 audit(1737270401.616:75): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.457237][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.464252][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.471916][ T294] device bridge_slave_0 entered promiscuous mode [ 25.481031][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.487905][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.495273][ T294] device bridge_slave_1 entered promiscuous mode [ 25.525759][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.532645][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.539954][ T293] device bridge_slave_0 entered promiscuous mode [ 25.557481][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.564527][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.571991][ T293] device bridge_slave_1 entered promiscuous mode [ 25.606484][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.613393][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.620738][ T295] device bridge_slave_0 entered promiscuous mode [ 25.637823][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.644825][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.652161][ T295] device bridge_slave_1 entered promiscuous mode [ 25.697774][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.704775][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.712144][ T297] device bridge_slave_0 entered promiscuous mode [ 25.722346][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.729207][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.736729][ T296] device bridge_slave_0 entered promiscuous mode [ 25.751011][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758188][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.765641][ T297] device bridge_slave_1 entered promiscuous mode [ 25.775631][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.782515][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.789705][ T296] device bridge_slave_1 entered promiscuous mode [ 25.905681][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.912565][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.919671][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.926457][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.007104][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.013999][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.021105][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.027864][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.052182][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.059053][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.066193][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.073002][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.093525][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.100488][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.107569][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.114397][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.126919][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.134428][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.141494][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.148558][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.155983][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.163080][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.170161][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.177760][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.186148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.193595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.220130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.228200][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.235066][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.242340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.251035][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.257885][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.283631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.291503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.314509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.322055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.329861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.338055][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.344936][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.352955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.361383][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.368314][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.375692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.383873][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.390740][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.404416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.412635][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.419471][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.429061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.437442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.461135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.469109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.477093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.485296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.494075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.501979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.526919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.534900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.543164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.551380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.559147][ T294] device veth0_vlan entered promiscuous mode [ 26.577627][ T295] device veth0_vlan entered promiscuous mode [ 26.585024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.593204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.601148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.609306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.617994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.625986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.633498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.641742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.649720][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.656593][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.663913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.672391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.680500][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.687352][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.694736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.702510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.710785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.718109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.725685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.733451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.740889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.768397][ T293] device veth0_vlan entered promiscuous mode [ 26.779250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.787584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.795734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.803899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.812149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.820961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.829148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.837472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.845690][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.852629][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.859916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.868151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.876245][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.883334][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.890551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.898257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.906457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.914585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.922906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.930307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.938859][ T294] device veth1_macvtap entered promiscuous mode [ 26.959476][ T295] device veth1_macvtap entered promiscuous mode [ 26.967651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.976488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.984957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.992607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.001287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.009802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.017991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.028509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.036793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.054366][ T293] device veth1_macvtap entered promiscuous mode [ 27.062795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.071082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.078399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.086108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.094581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.103008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.111317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.119572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.130778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.138931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.152411][ T297] device veth0_vlan entered promiscuous mode [ 27.167229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.175556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.184071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.192722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.201184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.209270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.227690][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.236369][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 27.236964][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.265259][ T296] device veth0_vlan entered promiscuous mode [ 27.286129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.297141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.305959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.324917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.332833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.341894][ T297] device veth1_macvtap entered promiscuous mode [ 27.370373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.395931][ T296] device veth1_macvtap entered promiscuous mode [ 27.414307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.432116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.477301][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.491234][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.507817][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.539730][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.553145][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.573212][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.658001][ T343] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.067779][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.154408][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 28.154433][ T28] audit: type=1400 audit(1737270406.336:122): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.365189][ T28] audit: type=1400 audit(1737270406.546:123): avc: denied { create } for pid=323 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.390351][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 28.452772][ T39] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 28.467104][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.475072][ T39] usb 5-1: Product: syz [ 28.479173][ T39] usb 5-1: Manufacturer: syz [ 28.483854][ T39] usb 5-1: SerialNumber: syz [ 28.492527][ T39] usb 5-1: config 0 descriptor?? [ 28.800923][ T28] audit: type=1400 audit(1737270406.956:124): avc: denied { mounton } for pid=368 comm="syz.0.10" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.865191][ T28] audit: type=1400 audit(1737270407.046:125): avc: denied { unmount } for pid=368 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 28.915004][ T380] futex_wake_op: syz.2.13 tries to shift op by -1; fix this program [ 29.245187][ T39] rtl8150 5-1:0.0: couldn't reset the device [ 29.251218][ T39] rtl8150: probe of 5-1:0.0 failed with error -5 [ 29.258568][ T39] usb 5-1: USB disconnect, device number 2 [ 31.280806][ T409] loop0: detected capacity change from 0 to 1024 [ 31.287393][ T409] EXT4-fs: Ignoring removed oldalloc option [ 31.460952][ T28] audit: type=1400 audit(1737270409.456:126): avc: denied { mount } for pid=400 comm="syz.0.19" name="/" dev="pstore" ino=13031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 31.537242][ T409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.552431][ T28] audit: type=1400 audit(1737270409.456:127): avc: denied { read } for pid=400 comm="syz.0.19" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.576286][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 31.623257][ T28] audit: type=1400 audit(1737270409.456:128): avc: denied { open } for pid=400 comm="syz.0.19" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.649642][ T409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.664636][ T28] audit: type=1400 audit(1737270409.846:129): avc: denied { mount } for pid=400 comm="syz.0.19" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.693105][ T421] loop2: detected capacity change from 0 to 1024 [ 31.699678][ T421] EXT4-fs: Ignoring removed oldalloc option [ 31.710367][ T421] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.741713][ T421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.860315][ T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.910356][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.014040][ T431] loop4: detected capacity change from 0 to 40427 [ 32.020896][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.028968][ T431] F2FS-fs (loop4): invalid crc value [ 32.036176][ T431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.042101][ T318] usb 2-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91 [ 32.051536][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.063622][ T318] usb 2-1: config 0 descriptor?? [ 32.071010][ T318] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 32.083810][ T431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 32.090352][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 32.100461][ T410] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.122599][ T6] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 32.131611][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.139473][ T6] usb 4-1: Product: syz [ 32.143845][ T6] usb 4-1: Manufacturer: syz [ 32.148289][ T6] usb 4-1: SerialNumber: syz [ 32.153958][ T6] usb 4-1: config 0 descriptor?? [ 32.240290][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 32.247265][ T24] usb 1-1: config 78 has an invalid interface number: 27 but max is 1 [ 32.255518][ T24] usb 1-1: config 78 has an invalid interface number: 96 but max is 1 [ 32.263552][ T24] usb 1-1: config 78 contains an unexpected descriptor of type 0x2, skipping [ 32.271456][ T28] audit: type=1400 audit(1737270410.456:130): avc: denied { name_bind } for pid=411 comm="syz.1.21" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 32.272165][ T24] usb 1-1: config 78 has an invalid descriptor of length 250, skipping remainder of the config [ 32.294909][ T28] audit: type=1400 audit(1737270410.456:131): avc: denied { node_bind } for pid=411 comm="syz.1.21" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.304756][ T24] usb 1-1: config 78 has no interface number 0 [ 32.328909][ T24] usb 1-1: config 78 has no interface number 1 [ 32.334162][ T318] usb 2-1: USB disconnect, device number 2 [ 32.336045][ T410] usb 3-1: Using ep0 maxpacket: 8 [ 32.350514][ T24] usb 1-1: config 78 interface 27 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1023 [ 32.361715][ T410] usb 3-1: config 78 has an invalid interface number: 27 but max is 1 [ 32.369714][ T410] usb 3-1: config 78 has an invalid interface number: 96 but max is 1 [ 32.377757][ T24] usb 1-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 32.388262][ T410] usb 3-1: config 78 contains an unexpected descriptor of type 0x2, skipping [ 32.396857][ T24] usb 1-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 32.407409][ T410] usb 3-1: config 78 has an invalid descriptor of length 250, skipping remainder of the config [ 32.417597][ T24] usb 1-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 32.428149][ T410] usb 3-1: config 78 has no interface number 0 [ 32.434075][ T410] usb 3-1: config 78 has no interface number 1 [ 32.440061][ T410] usb 3-1: config 78 interface 27 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1023 [ 32.450128][ T24] usb 1-1: config 78 interface 27 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 32.460610][ T24] usb 1-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 32.471088][ T410] usb 3-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 32.481735][ T24] usb 1-1: config 78 interface 96 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.494648][ T410] usb 3-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 32.505139][ T24] usb 1-1: config 78 interface 27 has no altsetting 0 [ 32.511736][ T410] usb 3-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 32.522802][ T24] usb 1-1: config 78 interface 96 has no altsetting 0 [ 32.529461][ T410] usb 3-1: config 78 interface 27 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 32.539909][ T410] usb 3-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 32.550547][ T410] usb 3-1: config 78 interface 96 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.563576][ T410] usb 3-1: config 78 interface 27 has no altsetting 0 [ 32.570201][ T410] usb 3-1: config 78 interface 96 has no altsetting 0 [ 32.578757][ T24] usb 1-1: New USB device found, idVendor=294b, idProduct=0135, bcdDevice=3c.0e [ 32.587997][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.595858][ T24] usb 1-1: Product: ꦗ囃熢뵝䎤뷰ﻙ憵፼ꚬꄉ㌟庤➋뭿灎兤 [ 32.604721][ T24] usb 1-1: Manufacturer:  [ 32.609368][ T24] usb 1-1: SerialNumber: ဌ [ 32.614068][ T410] usb 3-1: New USB device found, idVendor=294b, idProduct=0135, bcdDevice=3c.0e [ 32.623319][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.631592][ T410] usb 3-1: Product: ꦗ囃熢뵝䎤뷰ﻙ憵፼ꚬꄉ㌟庤➋뭿灎兤 [ 32.640122][ T410] usb 3-1: Manufacturer:  [ 32.640187][ T403] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 32.644632][ T410] usb 3-1: SerialNumber: ဌ [ 32.657192][ T421] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 32.805172][ T6] rtl8150 4-1:0.0: couldn't reset the device [ 32.811602][ T6] rtl8150: probe of 4-1:0.0 failed with error -5 [ 32.825282][ T6] usb 4-1: USB disconnect, device number 2 [ 33.410357][ T425] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.870320][ T425] usb 5-1: Using ep0 maxpacket: 32 [ 33.883655][ T425] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 33.898052][ T425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.906468][ T425] usb 5-1: Product: syz [ 33.914481][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 33.914499][ T28] audit: type=1400 audit(1737270412.096:134): avc: denied { ioctl } for pid=458 comm="syz.3.32" path="socket:[15256]" dev="sockfs" ino=15256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.982890][ T297] EXT4-fs (loop0): unmounting filesystem. [ 33.989312][ T295] EXT4-fs (loop2): unmounting filesystem. [ 33.998163][ T410] usb 3-1: USB disconnect, device number 2 [ 34.005686][ T24] usb 1-1: USB disconnect, device number 2 [ 34.008190][ T425] usb 5-1: Manufacturer: syz [ 34.017972][ T425] usb 5-1: SerialNumber: syz [ 34.024436][ T28] audit: type=1400 audit(1737270412.096:135): avc: denied { read write } for pid=458 comm="syz.3.32" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.048742][ T425] usb 5-1: config 0 descriptor?? [ 34.053604][ T28] audit: type=1400 audit(1737270412.096:136): avc: denied { open } for pid=458 comm="syz.3.32" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.112517][ T28] audit: type=1400 audit(1737270412.096:137): avc: denied { create } for pid=458 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.132622][ T28] audit: type=1400 audit(1737270412.096:138): avc: denied { connect } for pid=458 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.169711][ T28] audit: type=1400 audit(1737270412.246:139): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 34.272895][ T28] audit: type=1400 audit(1737270412.456:140): avc: denied { create } for pid=458 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.306152][ T463] fuse: Bad value for 'fd' [ 34.687391][ T425] rtl8150 5-1:0.0: couldn't reset the device [ 34.695252][ T425] rtl8150: probe of 5-1:0.0 failed with error -5 [ 34.723040][ T425] usb 5-1: USB disconnect, device number 3 [ 34.780315][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.970271][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 34.977696][ T24] usb 2-1: config 78 has an invalid interface number: 27 but max is 1 [ 35.013544][ T24] usb 2-1: config 78 has an invalid interface number: 96 but max is 1 [ 35.043521][ T24] usb 2-1: config 78 contains an unexpected descriptor of type 0x2, skipping [ 35.081180][ T24] usb 2-1: config 78 has an invalid descriptor of length 250, skipping remainder of the config [ 35.112535][ T24] usb 2-1: config 78 has no interface number 0 [ 35.118564][ T24] usb 2-1: config 78 has no interface number 1 [ 35.153776][ T24] usb 2-1: config 78 interface 27 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1023 [ 35.184651][ T24] usb 2-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 35.197294][ T24] usb 2-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 35.214659][ T24] usb 2-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 35.225620][ T24] usb 2-1: config 78 interface 27 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 35.228937][ T28] audit: type=1400 audit(1737270413.406:141): avc: denied { map } for pid=485 comm="syz.4.39" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.236983][ T24] usb 2-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 35.273298][ T24] usb 2-1: config 78 interface 96 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.292467][ T24] usb 2-1: config 78 interface 27 has no altsetting 0 [ 35.299533][ T28] audit: type=1400 audit(1737270413.426:142): avc: denied { read write } for pid=485 comm="syz.4.39" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.331654][ T24] usb 2-1: config 78 interface 96 has no altsetting 0 [ 35.341310][ T24] usb 2-1: New USB device found, idVendor=294b, idProduct=0135, bcdDevice=3c.0e [ 35.352874][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.365580][ T24] usb 2-1: Product: ꦗ囃熢뵝䎤뷰ﻙ憵፼ꚬꄉ㌟庤➋뭿灎兤 [ 35.389754][ T24] usb 2-1: Manufacturer:  [ 35.399512][ T24] usb 2-1: SerialNumber: ဌ [ 35.416485][ T478] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 35.468671][ T28] audit: type=1400 audit(1737270413.646:143): avc: denied { write } for pid=490 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.090307][ T301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.340306][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.364023][ T301] usb 3-1: Using ep0 maxpacket: 32 [ 36.376545][ T301] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 36.385607][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.393536][ T301] usb 3-1: Product: syz [ 36.397747][ T301] usb 3-1: Manufacturer: syz [ 36.433948][ T301] usb 3-1: SerialNumber: syz [ 36.443872][ T301] usb 3-1: config 0 descriptor?? [ 36.520364][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 36.532439][ T6] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 36.545070][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.553403][ T6] usb 4-1: Product: syz [ 36.557996][ T6] usb 4-1: Manufacturer: syz [ 36.562715][ T6] usb 4-1: SerialNumber: syz [ 36.812054][ T6] usb 4-1: config 0 descriptor?? [ 37.107227][ T495] 9pnet_fd: Insufficient options for proto=fd [ 37.136431][ T301] rtl8150 3-1:0.0: couldn't reset the device [ 37.142406][ T301] rtl8150: probe of 3-1:0.0 failed with error -5 [ 37.149610][ T301] usb 3-1: USB disconnect, device number 3 [ 37.216092][ T24] usb 2-1: USB disconnect, device number 3 [ 37.446649][ T6] rtl8150 4-1:0.0: couldn't reset the device [ 37.452723][ T6] rtl8150: probe of 4-1:0.0 failed with error -5 [ 37.466831][ T6] usb 4-1: USB disconnect, device number 3 [ 37.474455][ T568] Illegal XDP return value 3091465155 on prog (id 28) dev N/A, expect packet loss! [ 38.600303][ T557] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 38.961821][ T589] fuse: Bad value for 'fd' [ 39.400277][ T318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.430276][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.560325][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.580276][ T318] usb 4-1: Using ep0 maxpacket: 8 [ 39.591793][ T318] usb 4-1: config 78 has an invalid interface number: 27 but max is 1 [ 39.599797][ T318] usb 4-1: config 78 has an invalid interface number: 96 but max is 1 [ 39.625356][ T318] usb 4-1: config 78 contains an unexpected descriptor of type 0x2, skipping [ 39.634202][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 39.652849][ T19] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 39.664893][ T318] usb 4-1: config 78 has an invalid descriptor of length 250, skipping remainder of the config [ 39.678043][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.700293][ T19] usb 2-1: Product: syz [ 39.704324][ T19] usb 2-1: Manufacturer: syz [ 39.708835][ T318] usb 4-1: config 78 has no interface number 0 [ 39.716226][ T19] usb 2-1: SerialNumber: syz [ 39.722632][ T318] usb 4-1: config 78 has no interface number 1 [ 39.728639][ T318] usb 4-1: config 78 interface 27 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 1023 [ 39.739610][ T19] usb 2-1: config 0 descriptor?? [ 39.744705][ T318] usb 4-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 39.755863][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 39.761730][ T318] usb 4-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 39.780554][ T318] usb 4-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 39.802140][ T6] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 39.814537][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.825995][ T318] usb 4-1: config 78 interface 27 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 39.840332][ T6] usb 1-1: Product: syz [ 39.844346][ T6] usb 1-1: Manufacturer: syz [ 39.848816][ T6] usb 1-1: SerialNumber: syz [ 39.870294][ T318] usb 4-1: config 78 interface 27 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 39.881993][ T6] usb 1-1: config 0 descriptor?? [ 39.887554][ T318] usb 4-1: config 78 interface 96 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.910289][ T318] usb 4-1: config 78 interface 27 has no altsetting 0 [ 39.916927][ T318] usb 4-1: config 78 interface 96 has no altsetting 0 [ 39.933650][ T318] usb 4-1: New USB device found, idVendor=294b, idProduct=0135, bcdDevice=3c.0e [ 39.960332][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.969655][ T318] usb 4-1: Product: ꦗ囃熢뵝䎤뷰ﻙ憵፼ꚬꄉ㌟庤➋뭿灎兤 [ 39.981066][ T318] usb 4-1: Manufacturer:  [ 39.988109][ T318] usb 4-1: SerialNumber: ဌ [ 40.000169][ T609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.400344][ T608] 9pnet_fd: Insufficient options for proto=fd [ 40.432671][ T19] rtl8150 2-1:0.0: couldn't reset the device [ 40.438579][ T19] rtl8150: probe of 2-1:0.0 failed with error -5 [ 40.453366][ T19] usb 2-1: USB disconnect, device number 4 [ 40.517251][ T6] rtl8150 1-1:0.0: couldn't reset the device [ 40.523434][ T6] rtl8150: probe of 1-1:0.0 failed with error -5 [ 40.540285][ T6] usb 1-1: USB disconnect, device number 3 [ 41.058502][ T339] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.516024][ T651] fuse: Bad value for 'fd' [ 41.949954][ T318] usb 4-1: USB disconnect, device number 4 [ 42.360287][ T425] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.551619][ T425] usb 2-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91 [ 42.571650][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.601119][ T425] usb 2-1: config 0 descriptor?? [ 42.619889][ T425] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 42.830522][ T425] usb 2-1: USB disconnect, device number 5 [ 43.080313][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.080359][ T559] Bluetooth: hci0: command 0x1003 tx timeout [ 43.092407][ T635] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 43.570308][ T425] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.760303][ T425] usb 1-1: Using ep0 maxpacket: 32 [ 43.767927][ T425] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 43.787297][ T425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.810266][ T425] usb 1-1: Product: syz [ 43.818650][ T425] usb 1-1: Manufacturer: syz [ 43.827814][ T425] usb 1-1: SerialNumber: syz [ 43.842073][ T425] usb 1-1: config 0 descriptor?? [ 43.910334][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.100353][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 44.109584][ T19] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 44.119173][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.127501][ T19] usb 2-1: Product: syz [ 44.131808][ T19] usb 2-1: Manufacturer: syz [ 44.136330][ T19] usb 2-1: SerialNumber: syz [ 44.146615][ T19] usb 2-1: config 0 descriptor?? [ 44.154309][ T19] ================================================================== [ 44.162213][ T19] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 44.169085][ T19] Write of size 8 at addr ffff88811afe0a00 by task kworker/0:1/19 [ 44.176708][ T19] [ 44.178874][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 44.188422][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.198315][ T19] Workqueue: usb_hub_wq hub_event [ 44.203172][ T19] Call Trace: [ 44.206318][ T19] [ 44.209074][ T19] dump_stack_lvl+0x151/0x1b7 [ 44.213589][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 44.218881][ T19] ? _printk+0xd1/0x111 [ 44.222876][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 44.227822][ T19] print_report+0x158/0x4e0 [ 44.232170][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 44.237111][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 44.243184][ T19] ? enqueue_timer+0xa6/0x480 [ 44.247703][ T19] kasan_report+0x13c/0x170 [ 44.252045][ T19] ? enqueue_timer+0xa6/0x480 [ 44.256556][ T19] ? device_add+0xb60/0xf10 [ 44.260899][ T19] __asan_report_store8_noabort+0x17/0x20 [ 44.266454][ T19] enqueue_timer+0xa6/0x480 [ 44.270797][ T19] __mod_timer+0x8d3/0xcf0 [ 44.275053][ T19] ? timerqueue_add+0x250/0x270 [ 44.279744][ T19] ? mod_timer_pending+0x30/0x30 [ 44.284506][ T19] ? hrtimer_start_range_ns+0xa35/0xb70 [ 44.289891][ T19] schedule_timeout+0x187/0x380 [ 44.294577][ T19] ? console_conditional_schedule+0x10/0x10 [ 44.300301][ T19] ? update_process_times+0x1b0/0x1b0 [ 44.306030][ T19] ? kasan_save_alloc_info+0x1f/0x30 [ 44.311153][ T19] ? usb_control_msg+0x185/0x4c0 [ 44.315927][ T19] wait_for_common+0x39a/0x640 [ 44.320522][ T19] ? bus_for_each_drv+0x183/0x200 [ 44.325518][ T19] ? __device_attach+0x312/0x510 [ 44.330295][ T19] ? wait_for_completion+0x20/0x20 [ 44.335235][ T19] ? usb_submit_urb+0x118c/0x1840 [ 44.340100][ T19] wait_for_completion_timeout+0xe/0x10 [ 44.345485][ T19] usb_start_wait_urb+0x177/0x350 [ 44.350347][ T19] ? usb_api_blocking_completion+0xb0/0xb0 [ 44.355986][ T19] ? __kasan_check_write+0x14/0x20 [ 44.360926][ T19] usb_control_msg+0x2ad/0x4c0 [ 44.365527][ T19] ? usb_anchor_empty+0x40/0x40 [ 44.370224][ T19] ? memcpy+0x56/0x70 [ 44.374033][ T19] usb_control_msg_send+0xbd/0x110 [ 44.378979][ T19] rtl8150_reset+0xdc/0x200 [ 44.383322][ T19] ? rx_fixup+0x4c0/0x4c0 [ 44.387490][ T19] ? __kasan_check_write+0x14/0x20 [ 44.392436][ T19] rtl8150_probe+0x3da/0x570 [ 44.396862][ T19] usb_probe_interface+0x5b6/0xa90 [ 44.401809][ T19] ? usb_register_driver+0x440/0x440 [ 44.406929][ T19] really_probe+0x2b8/0x920 [ 44.411268][ T19] __driver_probe_device+0x1a0/0x310 [ 44.416389][ T19] driver_probe_device+0x54/0x3d0 [ 44.421248][ T19] ? __device_attach_driver+0x2cd/0x490 [ 44.426629][ T19] __device_attach_driver+0x2e3/0x490 [ 44.431836][ T19] ? coredump_store+0x90/0x90 [ 44.436354][ T19] bus_for_each_drv+0x183/0x200 [ 44.441037][ T19] ? subsys_find_device_by_id+0x310/0x310 [ 44.446591][ T19] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 44.452242][ T19] __device_attach+0x312/0x510 [ 44.456835][ T19] ? kobject_uevent_env+0x511/0x720 [ 44.461869][ T19] ? device_attach+0x20/0x20 [ 44.466299][ T19] device_initial_probe+0x1a/0x20 [ 44.471173][ T19] bus_probe_device+0xbe/0x1e0 [ 44.475753][ T19] device_add+0xb60/0xf10 [ 44.479922][ T19] usb_set_configuration+0x190f/0x1e80 [ 44.485222][ T19] usb_generic_driver_probe+0x8b/0x150 [ 44.490508][ T19] usb_probe_device+0x144/0x260 [ 44.495195][ T19] ? usb_register_device_driver+0x240/0x240 [ 44.500923][ T19] really_probe+0x2b8/0x920 [ 44.505266][ T19] __driver_probe_device+0x1a0/0x310 [ 44.510386][ T19] driver_probe_device+0x54/0x3d0 [ 44.515244][ T19] ? __device_attach_driver+0x2cd/0x490 [ 44.520626][ T19] __device_attach_driver+0x2e3/0x490 [ 44.525836][ T19] ? coredump_store+0x90/0x90 [ 44.530345][ T19] bus_for_each_drv+0x183/0x200 [ 44.535035][ T19] ? subsys_find_device_by_id+0x310/0x310 [ 44.540588][ T19] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 44.546234][ T19] __device_attach+0x312/0x510 [ 44.550829][ T19] ? __kasan_slab_free+0x11/0x20 [ 44.555604][ T19] ? __kmem_cache_free+0x21d/0x410 [ 44.560555][ T19] ? device_attach+0x20/0x20 [ 44.564980][ T19] ? kfree+0x7a/0xf0 [ 44.568710][ T19] ? kobject_uevent_env+0x511/0x720 [ 44.573746][ T19] device_initial_probe+0x1a/0x20 [ 44.578607][ T19] bus_probe_device+0xbe/0x1e0 [ 44.583220][ T19] device_add+0xb60/0xf10 [ 44.587377][ T19] usb_new_device+0xf2f/0x1820 [ 44.591968][ T19] ? kfree+0x7a/0xf0 [ 44.595707][ T19] ? usb_disconnect+0x890/0x890 [ 44.600392][ T19] hub_event+0x2db1/0x4830 [ 44.604673][ T19] ? led_work+0x590/0x590 [ 44.608818][ T19] ? _raw_spin_unlock+0x4c/0x70 [ 44.613497][ T19] ? finish_task_switch+0x167/0x7b0 [ 44.618534][ T19] ? __kasan_check_read+0x11/0x20 [ 44.623391][ T19] ? read_word_at_a_time+0x12/0x20 [ 44.628337][ T19] ? strscpy+0x9c/0x260 [ 44.632416][ T19] process_one_work+0x73d/0xcb0 [ 44.637110][ T19] worker_thread+0xa60/0x1260 [ 44.641654][ T19] kthread+0x26d/0x300 [ 44.645544][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 44.650383][ T19] ? kthread_blkcg+0xd0/0xd0 [ 44.654809][ T19] ret_from_fork+0x1f/0x30 [ 44.659154][ T19] [ 44.662013][ T19] [ 44.664182][ T19] Allocated by task 635: [ 44.668270][ T19] kasan_set_track+0x4b/0x70 [ 44.672694][ T19] kasan_save_alloc_info+0x1f/0x30 [ 44.677636][ T19] __kasan_kmalloc+0x9c/0xb0 [ 44.682063][ T19] __kmalloc+0xb4/0x1e0 [ 44.686052][ T19] hci_alloc_dev_priv+0x27/0x1c00 [ 44.690914][ T19] hci_uart_tty_ioctl+0x401/0xa70 [ 44.695776][ T19] tty_ioctl+0x903/0xc50 [ 44.699856][ T19] __se_sys_ioctl+0x114/0x190 [ 44.704369][ T19] __x64_sys_ioctl+0x7b/0x90 [ 44.708794][ T19] x64_sys_call+0x98/0x9a0 [ 44.713047][ T19] do_syscall_64+0x3b/0xb0 [ 44.717302][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.723080][ T19] [ 44.725205][ T19] Freed by task 635: [ 44.728932][ T19] kasan_set_track+0x4b/0x70 [ 44.733367][ T19] kasan_save_free_info+0x2b/0x40 [ 44.738217][ T19] ____kasan_slab_free+0x131/0x180 [ 44.743164][ T19] __kasan_slab_free+0x11/0x20 [ 44.747766][ T19] __kmem_cache_free+0x21d/0x410 [ 44.752548][ T19] kfree+0x7a/0xf0 [ 44.756096][ T19] hci_release_dev+0x14d3/0x1640 [ 44.760872][ T19] bt_host_release+0x83/0xa0 [ 44.765297][ T19] device_release+0x95/0x1c0 [ 44.769726][ T19] kobject_put+0x178/0x260 [ 44.773976][ T19] put_device+0x1f/0x30 [ 44.777970][ T19] hci_dev_cmd+0x2be/0x9b0 [ 44.782221][ T19] hci_sock_ioctl+0x415/0x7f0 [ 44.786740][ T19] sock_do_ioctl+0x152/0x450 [ 44.791162][ T19] sock_ioctl+0x455/0x740 [ 44.795330][ T19] __se_sys_ioctl+0x114/0x190 [ 44.799842][ T19] __x64_sys_ioctl+0x7b/0x90 [ 44.804267][ T19] x64_sys_call+0x98/0x9a0 [ 44.808519][ T19] do_syscall_64+0x3b/0xb0 [ 44.812773][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.818504][ T19] [ 44.820674][ T19] Last potentially related work creation: [ 44.826229][ T19] kasan_save_stack+0x3b/0x60 [ 44.830739][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 44.835945][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 44.841589][ T19] insert_work+0x56/0x310 [ 44.845853][ T19] __queue_work+0x9b6/0xd70 [ 44.850184][ T19] queue_work_on+0x105/0x170 [ 44.854609][ T19] __hci_cmd_sync_sk+0xc2a/0xf70 [ 44.859453][ T19] hci_cmd_sync_status+0x52/0x130 [ 44.864512][ T19] hci_dev_cmd+0x39e/0x9b0 [ 44.868754][ T19] hci_sock_ioctl+0x415/0x7f0 [ 44.873267][ T19] sock_do_ioctl+0x152/0x450 [ 44.877697][ T19] sock_ioctl+0x455/0x740 [ 44.881862][ T19] __se_sys_ioctl+0x114/0x190 [ 44.886377][ T19] __x64_sys_ioctl+0x7b/0x90 [ 44.890799][ T19] x64_sys_call+0x98/0x9a0 [ 44.895053][ T19] do_syscall_64+0x3b/0xb0 [ 44.899309][ T19] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.905037][ T19] [ 44.907208][ T19] Second to last potentially related work creation: [ 44.913630][ T19] kasan_save_stack+0x3b/0x60 [ 44.918142][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 44.923351][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 44.928991][ T19] insert_work+0x56/0x310 [ 44.933156][ T19] __queue_work+0x9b6/0xd70 [ 44.937499][ T19] queue_work_on+0x105/0x170 [ 44.941925][ T19] hci_cmd_timeout+0x199/0x200 [ 44.946523][ T19] process_one_work+0x73d/0xcb0 [ 44.951211][ T19] worker_thread+0xa60/0x1260 [ 44.955724][ T19] kthread+0x26d/0x300 [ 44.959629][ T19] ret_from_fork+0x1f/0x30 [ 44.963884][ T19] [ 44.966052][ T19] The buggy address belongs to the object at ffff88811afe0000 [ 44.966052][ T19] which belongs to the cache kmalloc-8k of size 8192 [ 44.979941][ T19] The buggy address is located 2560 bytes inside of [ 44.979941][ T19] 8192-byte region [ffff88811afe0000, ffff88811afe2000) [ 44.993219][ T19] [ 44.995389][ T19] The buggy address belongs to the physical page: [ 45.001640][ T19] page:ffffea00046bf800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11afe0 [ 45.011706][ T19] head:ffffea00046bf800 order:3 compound_mapcount:0 compound_pincount:0 [ 45.019864][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 45.025780][ T19] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 45.034197][ T19] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 45.042603][ T19] page dumped because: kasan: bad access detected [ 45.048875][ T19] page_owner tracks the page as allocated [ 45.054499][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 635, tgid 633 (syz.2.68), ts 41057552756, free_ts 41041381957 [ 45.076549][ T19] post_alloc_hook+0x213/0x220 [ 45.081140][ T19] prep_new_page+0x1b/0x110 [ 45.085569][ T19] get_page_from_freelist+0x2f41/0x2fc0 [ 45.090950][ T19] __alloc_pages+0x234/0x610 [ 45.095377][ T19] alloc_slab_page+0x6c/0xf0 [ 45.099803][ T19] new_slab+0x90/0x3e0 [ 45.103709][ T19] ___slab_alloc+0x6f9/0xb80 [ 45.108132][ T19] __slab_alloc+0x5d/0xa0 [ 45.112301][ T19] __kmem_cache_alloc_node+0x207/0x2a0 [ 45.117597][ T19] __kmalloc+0xa3/0x1e0 [ 45.121592][ T19] hci_alloc_dev_priv+0x27/0x1c00 [ 45.126450][ T19] hci_uart_tty_ioctl+0x401/0xa70 [ 45.131309][ T19] tty_ioctl+0x903/0xc50 [ 45.135386][ T19] __se_sys_ioctl+0x114/0x190 [ 45.139902][ T19] __x64_sys_ioctl+0x7b/0x90 [ 45.144330][ T19] x64_sys_call+0x98/0x9a0 [ 45.148677][ T19] page last free stack trace: [ 45.153206][ T19] free_unref_page_prepare+0x83d/0x850 [ 45.158475][ T19] free_unref_page+0xb2/0x5c0 [ 45.162992][ T19] __free_pages+0x61/0xf0 [ 45.167161][ T19] __free_slab+0xce/0x1a0 [ 45.171322][ T19] __unfreeze_partials+0x165/0x1a0 [ 45.176268][ T19] put_cpu_partial+0xa9/0x100 [ 45.180780][ T19] __slab_free+0x1c8/0x280 [ 45.185036][ T19] ___cache_free+0xc6/0xd0 [ 45.189288][ T19] qlist_free_all+0xc5/0x140 [ 45.193808][ T19] kasan_quarantine_reduce+0x15a/0x180 [ 45.199093][ T19] __kasan_slab_alloc+0x24/0x80 [ 45.203781][ T19] slab_post_alloc_hook+0x53/0x2c0 [ 45.208816][ T19] kmem_cache_alloc+0x175/0x320 [ 45.213503][ T19] getname_flags+0xba/0x520 [ 45.217844][ T19] user_path_at_empty+0x2d/0x1a0 [ 45.222625][ T19] __x64_sys_umount+0xf0/0x170 [ 45.227222][ T19] [ 45.229386][ T19] Memory state around the buggy address: [ 45.234862][ T19] ffff88811afe0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.242757][ T19] ffff88811afe0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.250666][ T19] >ffff88811afe0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.258553][ T19] ^ [ 45.262460][ T19] ffff88811afe0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.270357][ T19] ffff88811afe0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.278252][ T19] ================================================================== [ 45.286259][ T19] Disabling lock debugging due to kernel taint [ 45.292472][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 45.304007][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 45.312250][ C0] CPU: 0 PID: 19 Comm: kworker/0:1 Tainted: G B 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 45.323275][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.333169][ C0] Workqueue: usb_hub_wq hub_event [ 45.338030][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 45.343233][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 45.362949][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 45.362984][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a8000 [ 45.362999][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 45.363013][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 45.363027][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811afe09c8 [ 45.363042][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811afe09e0 [ 45.363056][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.363073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.363087][ C0] CR2: 000000110c272691 CR3: 0000000115528000 CR4: 00000000003506b0 [ 45.363106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.363119][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.363132][ C0] Call Trace: [ 45.363138][ C0] [ 45.363146][ C0] ? __die_body+0x62/0xb0 [ 45.363174][ C0] ? die_addr+0x9f/0xd0 [ 45.363196][ C0] ? exc_general_protection+0x317/0x4c0 [ 45.363230][ C0] ? ttwu_do_wakeup+0xe5/0x430 [ 45.363253][ C0] ? asm_exc_general_protection+0x27/0x30 [ 45.363282][ C0] ? __queue_work+0x28b/0xd70 [ 45.363307][ C0] ? __queue_work+0x4f1/0xd70 [ 45.363332][ C0] ? __queue_work+0x29c/0xd70 [ 45.363367][ C0] delayed_work_timer_fn+0x61/0x80 [ 45.363393][ C0] ? queue_work_node+0x1d0/0x1d0 [ 45.363416][ C0] call_timer_fn+0x3b/0x2d0 [ 45.363445][ C0] ? queue_work_node+0x1d0/0x1d0 [ 45.363469][ C0] __run_timers+0x756/0xa10 [ 45.363501][ C0] ? calc_index+0x270/0x270 [ 45.363531][ C0] ? sched_clock+0x9/0x10 [ 45.363559][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 45.363584][ C0] run_timer_softirq+0x69/0xf0 [ 45.363612][ C0] handle_softirqs+0x1db/0x650 [ 45.363637][ C0] ? irqtime_account_irq+0xdc/0x260 [ 45.363670][ C0] __irq_exit_rcu+0x52/0xf0 [ 45.363693][ C0] irq_exit_rcu+0x9/0x10 [ 45.363715][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 45.363742][ C0] [ 45.363748][ C0] [ 45.363755][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 45.363782][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 45.363809][ C0] Code: f5 0d 87 e8 fc fc 9a fc 48 83 3d d4 f5 eb 01 00 74 34 48 89 df e8 6e 0f 00 00 90 41 f7 c6 00 02 00 00 74 01 fb bf 01 00 00 00 95 9e 2d fc 65 8b 05 56 6e e0 7a 85 c0 74 05 5b 41 5e 5d c3 e8 [ 45.363826][ C0] RSP: 0018:ffffc90000136740 EFLAGS: 00000206 [ 45.363844][ C0] RAX: 0000000000000001 RBX: ffff8881f6e27b80 RCX: dffffc0000000000 [ 45.363860][ C0] RDX: ffffc9000de41000 RSI: 0000000000000246 RDI: 0000000000000001 [ 45.363873][ C0] RBP: ffffc90000136750 R08: ffffffff8166c2d6 R09: ffffed103edc4f77 [ 45.363889][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e27b80 [ 45.363904][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffc90000136820 [ 45.363921][ C0] ? enqueue_timer+0x1a6/0x480 [ 45.363952][ C0] __mod_timer+0x903/0xcf0 [ 45.363978][ C0] ? timerqueue_add+0x250/0x270 [ 45.364002][ C0] ? mod_timer_pending+0x30/0x30 [ 45.364029][ C0] ? hrtimer_start_range_ns+0xa35/0xb70 [ 45.364064][ C0] schedule_timeout+0x187/0x380 [ 45.364086][ C0] ? console_conditional_schedule+0x10/0x10 [ 45.364109][ C0] ? update_process_times+0x1b0/0x1b0 [ 45.364138][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 45.364158][ C0] ? usb_control_msg+0x185/0x4c0 [ 45.364178][ C0] wait_for_common+0x39a/0x640 [ 45.364207][ C0] ? bus_for_each_drv+0x183/0x200 [ 45.364225][ C0] ? __device_attach+0x312/0x510 [ 45.364250][ C0] ? wait_for_completion+0x20/0x20 [ 45.364280][ C0] ? usb_submit_urb+0x118c/0x1840 [ 45.364314][ C0] wait_for_completion_timeout+0xe/0x10 [ 45.364344][ C0] usb_start_wait_urb+0x177/0x350 [ 45.364385][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 45.364408][ C0] ? __kasan_check_write+0x14/0x20 [ 45.364429][ C0] usb_control_msg+0x2ad/0x4c0 [ 45.364448][ C0] ? usb_anchor_empty+0x40/0x40 [ 45.364467][ C0] ? memcpy+0x56/0x70 [ 45.364487][ C0] usb_control_msg_send+0xbd/0x110 [ 45.364508][ C0] rtl8150_reset+0xdc/0x200 [ 45.364536][ C0] ? rx_fixup+0x4c0/0x4c0 [ 45.364563][ C0] ? __kasan_check_write+0x14/0x20 [ 45.364584][ C0] rtl8150_probe+0x3da/0x570 [ 45.364611][ C0] usb_probe_interface+0x5b6/0xa90 [ 45.364636][ C0] ? usb_register_driver+0x440/0x440 [ 45.364658][ C0] really_probe+0x2b8/0x920 [ 45.364683][ C0] __driver_probe_device+0x1a0/0x310 [ 45.364707][ C0] driver_probe_device+0x54/0x3d0 [ 45.364729][ C0] ? __device_attach_driver+0x2cd/0x490 [ 45.364753][ C0] __device_attach_driver+0x2e3/0x490 [ 45.364776][ C0] ? coredump_store+0x90/0x90 [ 45.364798][ C0] bus_for_each_drv+0x183/0x200 [ 45.364817][ C0] ? subsys_find_device_by_id+0x310/0x310 [ 45.364837][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 45.364862][ C0] __device_attach+0x312/0x510 [ 45.364883][ C0] ? kobject_uevent_env+0x511/0x720 [ 45.364908][ C0] ? device_attach+0x20/0x20 [ 45.364932][ C0] device_initial_probe+0x1a/0x20 [ 45.364953][ C0] bus_probe_device+0xbe/0x1e0 [ 45.364973][ C0] device_add+0xb60/0xf10 [ 45.365003][ C0] usb_set_configuration+0x190f/0x1e80 [ 45.365033][ C0] usb_generic_driver_probe+0x8b/0x150 [ 45.365065][ C0] usb_probe_device+0x144/0x260 [ 45.365085][ C0] ? usb_register_device_driver+0x240/0x240 [ 45.365109][ C0] really_probe+0x2b8/0x920 [ 45.365133][ C0] __driver_probe_device+0x1a0/0x310 [ 45.365157][ C0] driver_probe_device+0x54/0x3d0 [ 45.365179][ C0] ? __device_attach_driver+0x2cd/0x490 [ 45.365203][ C0] __device_attach_driver+0x2e3/0x490 [ 45.365227][ C0] ? coredump_store+0x90/0x90 [ 45.365248][ C0] bus_for_each_drv+0x183/0x200 [ 45.365268][ C0] ? subsys_find_device_by_id+0x310/0x310 [ 45.365288][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 45.365314][ C0] __device_attach+0x312/0x510 [ 45.365335][ C0] ? __kasan_slab_free+0x11/0x20 [ 45.365369][ C0] ? __kmem_cache_free+0x21d/0x410 [ 45.365392][ C0] ? device_attach+0x20/0x20 [ 45.365413][ C0] ? kfree+0x7a/0xf0 [ 45.365438][ C0] ? kobject_uevent_env+0x511/0x720 [ 45.365462][ C0] device_initial_probe+0x1a/0x20 [ 45.365485][ C0] bus_probe_device+0xbe/0x1e0 [ 45.365504][ C0] device_add+0xb60/0xf10 [ 45.365534][ C0] usb_new_device+0xf2f/0x1820 [ 45.365557][ C0] ? kfree+0x7a/0xf0 [ 45.365581][ C0] ? usb_disconnect+0x890/0x890 [ 45.365606][ C0] hub_event+0x2db1/0x4830 [ 45.365644][ C0] ? led_work+0x590/0x590 [ 45.365667][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 45.365689][ C0] ? finish_task_switch+0x167/0x7b0 [ 45.365720][ C0] ? __kasan_check_read+0x11/0x20 [ 45.365739][ C0] ? read_word_at_a_time+0x12/0x20 [ 45.365759][ C0] ? strscpy+0x9c/0x260 [ 45.365778][ C0] process_one_work+0x73d/0xcb0 [ 45.365812][ C0] worker_thread+0xa60/0x1260 [ 45.365847][ C0] kthread+0x26d/0x300 [ 45.365869][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 45.365896][ C0] ? kthread_blkcg+0xd0/0xd0 [ 45.365918][ C0] ret_from_fork+0x1f/0x30 [ 45.365946][ C0] [ 45.365952][ C0] Modules linked in: [ 45.365965][ C0] ---[ end trace 0000000000000000 ]--- [ 45.365974][ C0] RIP: 0010:__queue_work+0x4f1/0xd70 [ 45.366000][ C0] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 45.366017][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 45.366034][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a8000 [ 45.366049][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 45.366063][ C0] RBP: ffffc90000007d00 R08: ffffffff814b186b R09: 0000000000000007 [ 45.366077][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811afe09c8 [ 45.366093][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811afe09e0 [ 45.366108][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.366125][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.366140][ C0] CR2: 000000110c272691 CR3: 0000000115528000 CR4: 00000000003506b0 [ 45.366160][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.366172][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.366187][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 45.366449][ C0] Kernel Offset: disabled [ 46.165487][ C0] Rebooting in 86400 seconds..