last executing test programs:

19m53.124028009s ago: executing program 32 (id=136):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000002, &(0x7f0000000800)={[{@nodelalloc}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq}, {@uid_eq}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @local}, 0x10)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)

19m29.618910751s ago: executing program 33 (id=170):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c0000000000119078ac1414aae000000100004e200008907839c171b453b681bc9ead78d509d46586a871c8353655e944f1"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
eventfd2(0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x16, 0xfffffffffffffffd, 0x3, 0x6, 0x3, 0xe}, 0x0, &(0x7f00000000c0)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = dup(0xffffffffffffffff)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}})

19m27.577343451s ago: executing program 34 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@llx}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYBLOB="e17cbe578e9b281bae5d16339fb61d4bdc13d44bc3fc80cacd60eb0a96d3cf770aaa7f4c3982215901fd48c9d571e7179f84a483eddea0cd12f4ee8e9950744bc55ab74b8a819005bde5d760ebf06ffb1cc4cf9eb1eb508bc0c0928dd925f8f8bebafa57", @ANYBLOB="5c13e54d0404f3182f72321cbbe0e75ac28edcfbafcf32dd7bee70edc3", @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

14m42.756710625s ago: executing program 35 (id=1503):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
close(0x3)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

12m6.607432043s ago: executing program 36 (id=2396):
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@private2}, &(0x7f0000000280)=0x14)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$AUDIT_SET(r3, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f00000000c0)='FROZEN\x00', 0x7)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="021640efe4f0090a00000025bd7000fedbdf250800120002000300bd6b6e000300000006003c000d280000ffffffff00000000ac1414bb000000000000000000000000ff020000000080000000000000000001"], 0x50}}, 0x20048000)
ioctl$VT_RESIZE(r5, 0x5609, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

10m19.004238742s ago: executing program 9 (id=3027):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c6000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000aee74312000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008fba0000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

10m18.095063119s ago: executing program 9 (id=3035):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
socketpair(0x6, 0x6, 0x5, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x80)
r4 = socket(0x10, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x80, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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")
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xf3f, 0x3, 0x4, 0x5, 0x8, 0xb})
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)

10m18.094518349s ago: executing program 9 (id=3036):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f757469303030303030303032303030303030303030312c756d61736b3d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6469736361726461736b3d30303030303030303030303030303030303030303235332c646973636172642c6e616d65636173653d312c757466382c696f636861727365743d6973c0df3835392d392c6572726f72733d72656d6f756e742d726f2c00"], 0x1, 0x1549, &(0x7f0000002940)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZIkITGEJA1JSC5DEkNILhPSuN/vl4QmSZMkISGV9f8M5uftrffe+3r/7zzfz2d/Zj1nn2ftZ+/nnDl775nP+abbsFpNaldvRETwL8ELPxIBIBYABgFAXgAIAKB8XPm4zPU5JSb+axthf6z7Uy53BewyCi53Aezy4vd/9sb9/5+x9Z9J4v5nb9z/7I37n71x/7M37j9j2dmW6YWuurAgXhrzkl2WP+b+v/i/Ed////8Jf/7/D8koM+6LdWWu6Q4Q8/emcP+zN+7//6y/62973P/sjfufXcVe7gLYfwF+/2cHOf7iGu5/9sb9Zyw7u9z3ny/3ApH/smNwNOeFxvzfY8G/ZTvqcr/wGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlK2f8JQoAssaXuy7GGGOMMcYYY4z9cXyOy10BY4wxxhhjjDHG/v0QBEhQEEAM5IBYyAm5QADAlZAH8kIEroI4uBrywTWQHwpAQSgE8VAYioAGAxYIQigKxSAK10JxuA5KQEkoBaXBQRlIgOuhLNwA5eBGKA83QQW4GSpCJagMVeAWqAq3QjW4DarD7VADakItqA13QB24E+rCXVAP7ob6cA80gHuhIdwHjeB+aAwPQBN4EJrCQ9AMmkMLaAmtMvN7q4v78vfmPwe94HnoDX0gEfpCP3gB+sMAGAgvwiB4CQbDyzAEXoEkGArD4FUYDq/BCHgdRsIoGA1vwBh4E8bCOBgPEyAZJsIkeAsmw9swBd6BqTANUmA6zIB3YSbMgtnwHsyB92EuzIP5sABS4QNYCItgMXwIS+AjSIOlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu+Bj2A2fwB7YC/vgU0iHz/56fs6sHmfln/6z/O4ICChQoEKFMRiDsRiLuTAX5sbcmAfzYAQjGIdxmA/zYX7MjwWxIMZjPBbBImjQICFhUSyKUYxicSyOJbAElsJS6NBhAiZgWbwBy2E5LI/lsQJWwIpYCSthFayCVbEqVsNqWB2rYw2sgbWwFt6Bd2BfrIt1sR7Ww/pYP+v2FDbCRtgYG2MTbIJNsSk2w2bYAltgK2yFrbE1tsE22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xa7YDbthd+yBPTKeywH4PD6PfbCG6Iv9sB/2x6QcA/FFfBFfwsH4Mr6Mr2ASDsVh+Cq+iq/hCDyFI3EUjsbRWFW8iWNxHJKYgMmYjJNwEk7GyZhZ6Ds4DVNwOs7AGTgTZ+EsfA/n4Pv4Ps7DebgAUzEVF+IiXIyLcQmexjRcistwOa7AlbgCV+MaXI3rcD2uw424ETfjZtyKW3E7bseduBM/RgWAn+Be3ItJmI7puB/34wE8gAfxIGZgBh7CQ3gYD+MRPIJH8Sgew+N4Ao/jSTyJp/A0ennhgP6Mz8R/1fjjkmuTQGRSQokYESNiRazIJXKJ3CK3yCPyiIiIiDgRJ/KJfCK/yC8KioIiXsSLIqKIMMIIEmEMAIioiIriorgoIUqIUqKUcMKJBJEgyoqyopwoJ8qLm0QFcbOoKCqJtq6KqCKqinaumrhNVBfVRQ1RU9QStUVtUUfUEXVF3dh6op6oL+qLBuJe0VD0xYF4v8jsTBMxFJuKYdhMNBcXdwVaixHYRrQV7cSjYhSOxA6itesonhCdxFjsLJ4S4/Bp0VVMwG7iWdFd9BA9xXOil2jjeos+Ygr2Ff3ENOwvBoiB4kUxE2uK93BOzlriFZEkhoph4lWxAF8TI8TrYqQYJUaLN8QY8aYYK8aJ8WKCSBYTxSTxlpgs3hZTxDtiqpgmUsR0MUO8K2aKWWK2eE/MEe+LuWKemC8WiFTxgVgoFonF4kOxRHwk0sRSsUwsFyvESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBc7xE6xS3wsdotPxB6xV+wTn4p08ZnYLz4XB8QX4qD4UmSIr8Qh8bU4LL4RR8S34qj4ThwTx8UJ8b04KX4Qp8RpcUb8KM6Kn8TP4hdxTngBEqWQUioZyBiZQ8bKnDKXvELmlsHFo3uVjJNXy3zyGplfFpAFZSEZLwvLIlJLI60kGcqispiMymtlcXmdLCFLylKytHSyjEyQ18uy8gZZTt4oy8ubZAV5s6woK8nKsoq8RVaVt0qIXNhGDVlT1pK15R0yEe6UdeVdsp68W9aX98gG8l7ZUN4nG8n7ZWP5gGwiH5RN5UOymWwuW8iWspV8WLaWj8g2sq1sJx+V7eVjsoN8XHaUT8hOMuvV/rTsKp+R3eSzsrvsIXvKX+Q56WVv2UdCX5D95AuyvxwgB8YCgHxJDpYvyyHyFZkkh8ph8lU5XL4mR8jX5Ug5So6Wb8gx8k05Vo6T4+UEmSwnyknyLTlZvi2nyHfkVDlNpsjpcqAcdH6m2VL+zfy3fid/yPmtb5Zb5Fa5TW6XO+ROuUt+LHfL3XKP3CP3yX0yXabL/XK/PCAPyIPyoMyQGfKQPCQPy8PyiDwij8qj8pg8Ln+U38uT8gd5Sp6Wp+WP8qw8K3++eAxAoRJKKqUCFaNyqFiVU+VSV6jc6kqVR+VVEXWVilNXq3zqGpVfFVAFVSEVrwqrIkoro6wiFaqiqpiKqmvx4gtGlVKllVNlVIK6/h/JV8XVdaqEKvmr/Kz6Ev9Cfa1UK9VatVZtVBvVTrVT7VV71UF1UB1VR9VJdVKdVWfVRXVRXVVX1U11U91Vd9VT9VS9VC/VW/VWiSpR9VMvqP5qgBqoXlSD1EtqsBqshqghKkklqWFqmBquhqsRaoQaqUaq0Wq0GqPGqLFqrBqvxqtklawmqUlqspqspqgpaqqaqlJUipqhZqiZaqaarWarOWqOmqvmqvlqvkpVqWqhWqgWn/XeqyUqTS1VS9VytVytVCvVarVarVVr1Xq1Xm1UG1Wa2qK2qG1qm9qhdqhdapfarXarPWqP2qf2qXSVrvar/eqAOqAOqoMqQ2WoQ+qQOqwOqyPqiDqqjqpj6pg6oU6ok+qkOqVOqTPqjDqrzqqf1c/qnDqXedoXiEAEKlBBTBATxAaxQa4gV5A7yB3kCfIEkSASxAVxQb7gmiB/UCAoGBQK4oPCQZFAByawgbjY9GhwbVA8uC4oEZQMSgWlAxeUCRKC64OywQ1BueDGoHxwU1AhuDmoGFQKKgdVgluCqsGtQbXgtqB6cHtQI6gZ1ApqB3cEdYI7g7rBXUG94O6gfnBP0CC4N2gY3Bc0Cu4PGgcPBE2CB4OmwUNBs6B50CJoGbT6Q+f3/lSBR1xv3Ucn6r66n35B99cD9ED9oh6kX9KD9ct6iH5FJ+mheph+VQ/Xr+kR+nU9Uo/So/Ubeox+U4/V4/R4PUEn64l6kn5LT9Zv6yn6HT1VT9Mperqeod/VM/UsPVu/p+fo9/VcPU/P1wt0qv5AL9SL9GL9oV6iP9JpeqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x16p96lP9a79Sd6j96r9+lPdbr+TO/Xn+sD+gt9UH+pM/RX+pD+Wh/W3+gj+lt9VH+nj+nj+oT+Xp/UP+hT+rQ+o3/UZ3XsxW76zJP7zI93o4wyMSbGxJpYk8vkMrlNbpPH5DEREzFxJs7kM/lMfpPfFDQFTbyJN0VMEZOJDJmiJq+JmqgpboqbEqaEKWVKGWecSTAJpqwpa8qZcqa8KW8qmAqmoqloKpvK5hZzi7nV3GpuM7eZ283tpqapaWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRafTUlReKNk1NU9PMNDMtTAvTyrQyrU1r08a0Me1MO9PetDcdjPfnzv93cyfT2XQ2XUwX09V0Nd1MN9PddDc9TU/Ty/QyvU1vk2gSTT/Tz/Q3/c1AM9AMMoPMYDPYDDFDTJJJMsPMMDPcDDcjzAgz0owyozNPVM2bZqwZZ8abCSbZJJtJZpKZbCabKWaKmWqmmhSTYmaYGWammWlmm9lmjplj5pq5Zr6Zb1JNqlloFprFZrFZYpaYNJNmlpllZoVZYVaZVWaNWWPWmXVmA2wwm8wms8VsMdvMNrPD7DC7zC6z2+w2e8wes8/sM+km3ew3+80Bc8AcNAdNhskwh8whc9gcNkfMEXPUHDXHzDFzwpwwJ81Jc8qcMmfMGXPWFLj4eelNrM1pc9krbG57pc1j89o/jwvaQjbeFrZFrLb5bYFfxcZaW8KWtKVsaetsGZtgr/9NXNFWspVtFXuLrWpvtdV+E9exd9q69i5bz95ta9s7fhXXt/fYBvZB2xARwDa3jW1L28Q+aJvah2wz29y2sC1te/uY7WAftx3tE7aTffI38UK7yK6xa+06u97usXvtGfujPWy/sWftT7a37WMH2ZfsYPuyHWJfsUl26G/i0fYNO8a+acfacXa8nfCbeKqdZlPsdDvDvmtn2lm/iVPtB3aOXWzn2nl2vl1wPs6sabH90C6xH9k0G8Ayu9yusCvtKrs6q1af1260m+xmu9t+YrfZ7XaH3Wl3ZZ0I2712n/3UptvP7CH7tT1gv7AH7RGbYb86H2fu3xH7rT1qv7PH7HF7wn5vT9ofsi6ez+/79/YXe856C4QEJElRQDGUg2IpJ+WiKyg3XUl5KC9F6CqKo6spH11D+akAFaRCFE+FqQhpMmSJKKSiVIyidC1llVeKSpOjMpRA11NZuoHK0Y1Unm6iCnQzVaRKVJmq0C1UlW6lanQbVafbqQbVpFpUm+6gOnQn1aW7qB7dTfXpHmpA91JDuo8a0f3UmB6gJvQgNaWHqBk1pxbUklrRw9SaHqE21Jba0aPUnh6jDvQ4daQnqBM9SZ3pKepCT1NXeoa60bPUnXpQT3qOetHz1Jv6UCL1pX70AvWnATSQXqRB9BINppdpCL1CSTSUhtGrNJxeoxH0Oo2kUTSa3qAx9CaNpXE0niZQMk2kSfQWTaa3aQq9Q1NpGqXQdJpB79JMmkWz6T2aQ+/TXJpH82kBpdIHtJAW0WL6kJbQR5RGS2kZLacVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttpx20k3bRx7SbPqE9tJf20aeUTp/RfvqcDtAXdJC+pAz6ig7R13SYvqEj9K3vQ9/RMTpOJ+h7Okk/0ClKv/gr9Cf6mX6hc+QJQgxFKEMVBmFMmCOMDXOGucIrwtzhlWGeMG8YCa8K48Krw3zhNWH+sEBYMCwUxoeFwyKhDk1oQwrDsGhYLIyG14bFw+vCEmHJsFRYOnRhmTAhvD4sG94QlgtvDMuHN4UVwpvDimGl8MG7q4S3hFXDW8Nq4W1h9fD2sEZYM6wV1g7vCOuEd4Z1w7vCeuHdYbnwnrBBeG/YMLwvbBTeHzYOHwibhA+GTcOHwmZh87BF2DJsFT4ctg4fCduEbcN24aNh+/CxsEP4eNgxfCLsFD55fv09i/7y+sSwb9gvfCF8IfT+Ljk/uiCaGv0gujC6KLo4+mF0SfSjaFp0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHPU+9o5wKETTjrlAhfjcrhYl9Plcle43O5Kl8fldRF3lYtzV7t87hqX3xVwBV0hF+8KuyJOO+OsIxe6oq6Yi7prXXF3nSvhSrpSrrRzroxLcC1dK9fKtXaPuDaurWvnHnWPusfcY+5x97h7wnVyT7rO7inXxT3turpn3DPuWdfd9XA93XOul5uY50LHE10/18/1d/3dQDfQDXKD3GA32A1xQ1ySS3LD3DA33A13I9wIN9KNdKPdaDfGjXFj3Vg33o13yS7ZTXKT3GQ32U1xU9xUN9WluBQ3w81wM91MV3XWha3MdXPdfDffpbpUt9BlnjMudkvcEpfm0twyt8ytcCvcKrfKrXFr3Dq3zm1wG9wmt8ltcVvcNrfN7XA73C63y+12u90en/fCpC7d7Xf73QF3wB10X7oM95U75L52h9037oj71h1137lj7rg74b53J90P7pQ77c64H91Z95P72f3izjnvkiMTI5Mib0UmR96OTIm8E5kamRZJiUyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJDXyQWRhZFFkceTDyJLIR5G0yNLIssjyyIrIyoj3hbeFvqgv5qP+Wl/cX+dL+JK+lC/tnS/jE/z1vqy/wZfzN/ry/iZfwd/sK/pKvrJ/yDfzzX0L39K38g/71v4R38a39e38o769f8x38I/7jv4J38k/6Tv7p3wX/7Tv6p/x3fyzvrvv4Xv653wv/7zv7fv4RN/X9/Mv+P5+gB/oX/SD/Et+sH/ZD/Gv+CQ/1A/zr/rh/jU/wr/uR/pRfnTMG35M1iUyTPDJfqKf5N/yk/3bfop/x0/103yKn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf6j/wC/0iv9h/6Jf4j3yaX5p1w9Gv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/T7/If+93+E7/H7/X7/Kc+3X/m9/vP/QH/hT/ov/QZ/it/yH/tD/tv/BH/rT/qv/PH/HF/wn/vT/of/Cl/2p/xP/qz/if/s//l/HndP37vmzHGGGMs+5l4aSh+vebC7fy+v5Mj/uTJ/QDgyu2FMi6tzQGZZ5Qb8l+Isr5P4Ik+3e7PWmrUSExMvPjsNAlBsXkAWX8JyhQDl+Kl0A4eg47QFsr+bv0DRI+zBAB/bf7oTQC5/iQnFi7Fl+b/HAATf2f+hx8dvbBCeCbur8w/D6BEsUs5OeFSvBTanb+/0hbK/YX6C7T+G/Xn/CIZoM2f5OSGS/Gl+hPgEXgSOv7qmb/j24y/vp4xxhhjjDHG2P+kAaJyl6zrz6z/+Py96/N4dSknB1yK/9b1OWOMMcYYY4wxxi6/p3v0fPzhjh3bdvnHB9X+qay/e9AU/l0z8+B3B94DZD2iAOBfnBAgcyD/k3ux9T+yraSLb50/X7XiRx/Af0cr/4jBZf7FxBhjjDHGGPvDXTrp//Xj6nIVxBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZUP/ia8Tu9z7yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1u/y8AAP//sLn8Ew==")
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r6, 0x400454cc, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x10003, 0x0, 0x8})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendto$inet(r4, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[])
syz_emit_ethernet(0x6c, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503003700650000002fd78dd0c3535cadd78998646790780000000000000000248088a80000000000ff0003100008000006000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558fffffffd"], 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = dup2(r7, r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10)
rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0)

10m14.679551436s ago: executing program 9 (id=3039):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffff88)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="894c30fb5122ac9ae60472085c5eb6b962703b92a4a44145cf2fd736c4b47b795b4823325f829c2eabdb40f4fde26859141c4279df7757e03608fa24520d35703738e2582ef65c7406918832bf250b5f402a648b283ce538ce8d5caf040afae5a8c122", 0x63}, {&(0x7f0000000540)="cf1bc28aadca347e9bd776ff2ba676bd7deb2c55de79bd03ed339844d4223ac29fb5467ff15f1e494882252c17635ba93db72f54bf8c55f4534910ff515eea5cb3d78d06045f19d9a59c8fe3cf8fde9b966f89146b31d98c3b7df45d7a02a58ef4a8590c2fa1758a57ce31c7930304792618de37c2cd33754bfe3fa8a6e1e1465a7229", 0x83}, {&(0x7f0000000c80)="fef3c12300e93d0f65593bc76c30d2f909b163817c02e0e17b7b67b80b42cc821d1c21687939dd689cee5f487dd368f848d6e3e837460c4d1bc753b0dd0e308fca021420ef86eda34a5c7761a0724f13af6df3c393730be2e748097139a49634fd530927b9df831d471d07ea93372cece6cf8b7e7a015299607f93cf7aad94dd199b0a12355d609ceaeef5a78cd0f385f36138db02d9", 0x96}, {&(0x7f0000000740)="cd4f4f1201bfd4ca2029b5c0d4d4188d8dbe670dade5ea47f55c5694aea13389ff00c612b5f66c65fbed213fd4f3f3b7a9139999e6df29c1daa59e868527b3e6f1053c62eb74f1bb1ac40e48", 0x4c}, {&(0x7f00000007c0)="94b4231bbfc5b4da1b316b2d1ecb5d82ce74e617249415f5e7fcfefc45e460b2ea3de667a1e693c02fdf93a65a7eb57f4d7b96d6a8befea5fbf10e440935b2261668c5becac4753e6f2da0f3d83892a9043d894a0c0f33a1ed0aa201f3d6426aea346dd6b5e291157e5774c1c1733052c64689954c22c686054592e727486602d4b470c8b790512e2595b79274e9dbd540f3b8eeee0540884a9c89eeefb6", 0x9e}, {&(0x7f0000000280)="a1c562ff51e459919515655a5990bf1e861da082cdc4f1685cbb4cf745535012a4ad85570d2611e1ff9160eea22d030eea02c5f895dfa50f53549d81f939", 0x3e}, {&(0x7f0000000880)="37ce546e65fa7660e095e362ef987687c5d62347b013a75cb21b9eb22c9d7063dd3191406531f5a84d5d521de7a961346a699bb025d32363b3905a352fb82b0b2b156ce4216aea3a450ffb96424a0f9d15746ea645ac99d47b22892a0e931ae4eb20ea13f0d831366f02a2833857", 0x6e}, {&(0x7f0000000300)="1fcbf965ebc8c7fcd1bb6b3b97222a56", 0x10}, {&(0x7f0000000b40)="dd66173908e2a99ab723b144a796a962788f093f7b74abfe8296ac010df6c61f1cd03769c70fe90829e17e3b6c7c0b83136f4a46fd31cb515278c39f3c35c157fe885e2d84c134fb03afbe9152a27030e1ae5ba6b505ec48fdda1c95e8be13d2e1735f5c204ebf03273b991c15e62aee412365eb274a4072c0742116d496fd2482c5749bd1cf9ed4939949023eb27ce94b7e96807216f344feda866c2f52a617cca475df38b5f50f4c786ac0b3f03350152f521e5d0e3227357536209b7716809a6dc97fba483ffb68b8b72bd23dcb", 0xcf}], 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r5, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x10}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r6, 0x0, 0x22)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'})

10m13.635533977s ago: executing program 9 (id=3050):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)
personality(0x500006)

10m6.583551965s ago: executing program 9 (id=3066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x7, 0x0, 0xd2, r0, 0x7, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0x9}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_robust_list(&(0x7f0000000300)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x7, &(0x7f00000001c0)}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x80)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x36)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

10m6.466665097s ago: executing program 37 (id=3066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x7, 0x0, 0xd2, r0, 0x7, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0x9}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_robust_list(&(0x7f0000000300)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x7, &(0x7f00000001c0)}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x80)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x36)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7m13.275074151s ago: executing program 7 (id=4164):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)

7m12.505605526s ago: executing program 7 (id=4169):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000600)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
close(r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r7, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRES8=r3, @ANYBLOB="bc694e04d337379ff5718a757992c30f395ceb34aa13b032d0357f3451a60e0a92c745a47e406b44479372a847e0bb621de95d8fcbaaf5d920f755cdf712beb3757e54ada16c55fec27452701046694d487836696720a99402d2b2116e51201cf6009ba9c06c1049e5b383822e803c1a795cf34df2d5d0e0d7bd2e137f8e2b831d0fc1562f153e66e25fc34e4029e1963991b11bf0de7234b82e1e91ea144229e93f300183be4e20331d3a986a6b11a6cf78d4b37df2b3375a8c221fc85f633c5576649c5eae59e997a7121a402b16c8a53ecc8acb5b37d3b31797bf26", @ANYRES8=r0, @ANYRES16=r1], 0x0)

7m12.419845777s ago: executing program 7 (id=4171):
symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setregid(0x0, 0x0)
r0 = fsopen(&(0x7f0000000480)='sysfs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
io_setup(0x3, &(0x7f0000000340))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x82)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000080)=""/234, 0xea)
lseek(r5, 0x3, 0x1)
getdents64(r5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)

7m11.194927761s ago: executing program 7 (id=4172):
r0 = getpid()
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
ppoll(&(0x7f0000000540)=[{r5, 0x6000}], 0x1, 0x0, 0x0, 0x0)
shutdown(r5, 0x0)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0)
r6 = syz_pidfd_open(r0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000001c0))
setns(r6, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x940020, &(0x7f00000066c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="735f6e46fee1844ad4695ba1f85f5371aa4e7749437e67fc581a8d8983a4f95cc4471ae8a76cf365c4512dd81215cd5e4153586ad440d6403f7da30c61dbfe55d4fdbefbdceda57aaefe6580b8a9bb883042c20075e444bff2f7ef6834b3de98c9d04374735e6ae92874f0d05c6ae5f6b87d0c35081e3eec0e2fc893bc95e8568d709411c676efed00626dbb1875f613cfca3f0b58657c5d223c7137c2ef032583e8217cdd2e799b7e8890dc20b93089", @ANYRES64, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x5, 0x0, &(0x7f0000000000))

7m10.918235157s ago: executing program 7 (id=4175):
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@private2}, &(0x7f0000000280)=0x14)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc)
sendmsg$AUDIT_SET(r3, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="021640efe4f0090a00000025bd7000fedbdf250800120002000300bd6b6e000300000006003c000d280000ffffffff00000000ac1414bb000000000000000000000000ff020000000080000000000000000001"], 0x50}}, 0x20048000)
ioctl$VT_RESIZE(r6, 0x5609, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

7m10.552574904s ago: executing program 7 (id=4176):
symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)

7m10.349928108s ago: executing program 38 (id=4176):
symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)

41.633519434s ago: executing program 5 (id=5529):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_create(0x5, &(0x7f00000001c0)={0x0, 0xa, 0x2, @thr={&(0x7f0000000780)="a59b9bc6eeabc5ba52be3f550fd90a00182d03e903d79651b03cc6902ba18cee419880ce5ab3203649853b9d96a77772f4e4bd1e21e82a2350fe9777534866f2ee4711ead011af8c06ce549fe0ddfbee79f66a51134dd662d801c3ac356653414eee55b9d7209d2adcd183832dd26531bfaa13317560d8cf09b5ed62ff016481b39583a1900f6136b4910d98947be35b834537fc50b073d676a8472a5835a9831e38eed1f01917be5dc21e60de76f5aada44b1aba28effc7a08629ca8cefae76181f173d908cb25ee2cfce6c5133c1086a3bf074279785f13e7af4210a126d91e542e969db367d51b08f41eddfe597eb623dbc0e781b24fe2806a1550c5a6f7959c51a5da83d191a167a84c2b9809b4b2738b7dc1a0a219766d6dfc120cb1e596824d5c5c39e0b426972abd95d69198f295e8e8c4b12c38ec0ddec7ec3b38cb3f1a97c0d151bb3da8a920261c2228da4e5bca0388ff36ec099d3f59a0aa6bb510c131d82b2023c6d4bc6846600e5ef820f4d981977bf1d85ffcd63c24c36b39aebcfbc6b7132ad9a31047037c293181bc2dd5c644de502032ca4aa2cefc9c3a6baa3f5cb8164e0633211e3f9c9b4b254c0037701cf076fa42ae328cd5e50ffb5627d276f4990ed8c47eef2b096ddee8923ffb6a48da2dfecfa06cfb587ff6f34dc2dce71143c2210fcd19eb0576e8f1d46cd126a465538081a8836d57588343d1d2d86f5dfd505b38ea8eab7d961c8946c77b93a03c2fe73ec3e61ecb73b0f0b97e7f73b64e5374e75b9e1879a4d5e3e75aeef605dbd31f732579ab60cb5d19669f5b1dd43f852812764e7432639622bc213e1f07d9d3b27714cc110ef441c324081838ee454aec07ed929057415a7d37e10fc20594854eca91256af078dd3311b8f1bf2cc97f6660b3a6bf96ac3a8a77ea8eedd539c56fe99c97bc47f28850663d4c82d75fc7208d281448a09eab73d9d24f4081957c6b865f5be185f1df6014216bd4e226d324b75ae66569fc481be6076ae9ccf225ff7423450f1b1fa5fa11fa7a047b4eed9937e079f63316a5af37a142a1e21881298b844fcf6e600f2ae55349f02835d1395ca38e9144c6b320e82cfd92983df9da53ab77376a688d8e1b384b549c7b620e143bbabb31f78447a47885b1fd3ead675c86adaeb9908df43805e17cb96da0ee28773447a9ba3a034d4250429f968f67b88c9baf49e95b2bbf0dd708a2d97b852a1f50f7b918b90446af85e9d9806eb15965d9b49d0926e10f854d5bfbe658abd5f55ebb418201cfd8fa91c67059026b744f7b92fadf6769951fbb603f90776e0919b2b3ee70ccd6bc3030d5720e4bc0cdcc71c4e30c43cc450baa6a70b55c4127ee95bbffe4ea0054eda30350d40f33119d971b28c525f6d8e1de120cf7dbc91fbb36c1384c915217f7b0bee2db7f2053728348e2cf51114966fe0ab8202eb44aa9c3dc5ab9955b3b2cc366f0af2023e78f30648654b20958baa3f22b9716be4932d6809549512fce06a2943eca7a31ae7137132b38fad21a816fa705bf5fad247671b325a2925251193c95d20cfe2286bbd49ba02cfe1bd615a1be3fffe1b85237280945667291f32aa17744c2c0ba59003e2c6b7a197282b6234c282d05460ce78e435972ed1e4bfe8b4327df05cbd14f90bf869eab786f340875f5f57124e1b2b3bdf680f2139ad33eb34a1342ee72d52ac1a83033e0dec4691f1accfa43ae506cc9063d898bbd54cda00f05f426e25d598634cd17fbb956accfdcc04a6fe6c84d2db7635fadd157cfb35bc257c565a7777ec3b0ad078f648a881ea9fbfc5877cb23d79e433ae398b78f90349ba503969b59ce3a19a97c96f1b59dc3c3e78ecdf49a50ce70a810b3a470f441968ad19e41f1a03b33631a381b1dd31c53a21228776a39c0e822735d2351bf86e8eb316435e01334dd87b59b0964cbb3464ad6154d2952534de648d3a849fc29ca4563d96e9271c2e49dda3e8f3df2b6d0d4e613bb7023efc1bdeb1878107ac59451dcba9647e3e76725242d6b34b0d8cd2e4305974a69c091e8cabf76a80c856d29b17d620da751aca12161ebd19cb5986cfdd3cce3da61347a9064ae42af897e43b9881509d23d2e9910faa0c99657b1da1c31089b18469cf0f65b1d2d28ef3bbeaf625b47fd2eccf4cd9cc80f43c32050df285b55ef80976947c03a0c965a7ac9c8ca3cbe302b5a98369df33834fc85b393a9528b3ea83a7e872faa42999d06e57515d91d5f86b54999eec5a168c01aa646086f7a3e419d5b6adaf70df9424cb72495615a299ad231896167db71ee4b2394f5309099a88008a48901fa03fbd73dda0679c37e146ca6a0ecc5d3d102e813783a6a03dbc2f2a2a47cc2bdf86ce87f561d26d6b91eb1dc4f4abf7ddfda72b8c85e6dbbfa7649c83e50b34d41bf0b53da17a1476767dc780e6c6da697fe4dcf60e986a76429f39fdbc2e930945d6ff17d3bf0285df3d3c730b3a0c67fa4cf8b3b47db7e7cbf4b6a879c4dd898ac238329bce09f29c3befc24fec113229a142d71632051c8ef4267c7fc40021296a1933609ea03862371762da0df54c9809e192a259332ebc9b707ecf44df24e39236800ed2f875856a3e3c533ff7712d40cedadc2339070bf3496a159922173c085704dbd87233aeb592cbfe55305a7f54e952eefb938f87cc5b5ca40e0f8101d835eca205efecab3420c9fa63e9fcdd7e355fbce90da81eecc7d5a455dba15778db9a1ca2c0a3f1f361ceabf9aa5da5c1f0a97cd87609791313539629c7f04b8b5a42cfe3e70f0c7fdff6337b58ef097f9d1692740f39ab54e154bb6a659d06243a198df7c087a58b7ddde5b00dbe77532560528bc14181fa1bedfa8d41b9c0406ac35c19fbf55e3e46f97f2d10eb155ca6698c0f74a5fbbbc89bbab96dd988fc3c5aad370c7b3759063c9b3dddcb7bb03af66f2edc464caae11dadbf38ede47d457a13f2f75601a52c8029dbdd459f0133f99198847dde5579a3ee25118665e82ac50090a30bf4da402236958e5e494216498a90366b3c24490ecf9e1e95012bf176f5b9df9644304fc43cd8925f495c126f82cab9da6f531d92c49f8c82cc4bd587bd4ebf0614728566c1ff6b68a301dd3c201346a5bdc6aa0e7d1cd93f8170333900927b0fb79c2ca96914e1e5d4fec5aa95d9ed82970c0a2786521b98ad7c5d3d7e2eacf17f75bff02118a876cb875bbdbf2d357db6d0b5c4aa1090948cfe488733c0f6522d9fbe1098f26a3f60ecccefaa38d8a359fbc12b05b3022bdbca9a48e3a085ea23c23bae629523edbd65f24af318ae4f1b7156c36a2e4723a17ac70eb672b3bb83881dec57ba263339dc30f9f7cadac34ab74ea64406656707d833cec79a8a20b8ce18c890ff573a27a8bf41f705ad32ff1a57bfe736b7b8c8637576e82ac999a25387241cc4ebb79fe3bd93d029e89b31b5ae1f081cfc76f17fdd21427b403f44ae9071d1bc11b9c29b25b1aaf756cafa5ddd9b00e416a771fa06b8159346f55a4f92a963ad7658946ac22235942102db13f8d0b87995e3be09eb67af85c599b7b8d6048b704ff916e3dc1a278cd7cbdd464a6345fdbaffefa722785f80d12671179e61be546d35557da8c55fa9ca6f6540f2553a5fe2b6cabb2e9cd39147e42339f1f5a65ea30cab78e12cbdf3d9313f0417f719c8322911f87e7f42b39f53da984e3b7377ecbe76c6da1a9978b335b69f7618799973e773a4a08d12f2c0390190b0cdd455f27ac4ae41bfde3b4086db806ad282fdd9e03663026d790480e48b0657f2fcc5013268035ae4a4c5711543847134e354b1cf35e45ed086c77fe9405e35d8fbe6619c7725786fb9c6f81f94bd517e97e24276a2ed6025424e024ba53a8013308e4260e9874490494cfe831aa35d61478243788385e1b7dc142a66332ad734a94bd9df40d0786d32685f35ecd54a9aa317f31b44ec6a9a68e793eb3d63ac0c63b0665d01cce4438ba6268eed1b261b7d9794efa589b6a857dab8810c91ea5b6a1c45b7b49065c475c014dff12d607748c2f6508809b6605b69e558a6fef43910c23ffeb06db53ead77315623905df84c030c79bcbf4e0eda90cae0d575b00e0be4d8d4d340944ac6eb961a34c3bcb580d780cd455ff7255f64266348172fcd67a5eb974529adf58627539b56e1c9c12044e8a3ac301110565881f49e6070c9ee0a87ebac66de559b608acaa18e057adf604e6974aaf43f0a43e7b1eeac86e27eef1d691e622f582bef800265fcfa6849e8460bc35ffd2cbb12e5a1d7a1c87925333ae25c4119b1e0c5af5c1ce249e050a5c1cb5e1df1bae872a7a4e37c471c56b5d1b6b66a9e1591beb28d491bfeacf07a58d7580884f9d6d29b80dd80c489c8f4f0295a67abec3d79dd93940462a2d5ffff03c09ff815493b5acc97c832ece797bb0d346523deec3234c39ff1623a36cac22ea5d2e515bf7e9ea26ec1f11b4dba3961f66585adb7a5ff3020c7caea6eee9aa39001dc67dc0dd0b95325b8631423e32c45278cb41839956667600f49969acefc8fc4a8f0a9257b2e34a41d3d390c025f69874aab88098e37941479ea6262f1fb8f4df3f1485b998b5b525bd9d0d1db1317b56ad27b4ac9c332587e08df57cf54cc21d0a85cacd40c08bdeef72d4a1aaf0e1d43a2f22c28282548d6abced70270c7bb119f7860aef0ba52ba44c7b24138f0d78daa81e1923c6135fbdeff992b73a3168fe064940957c7c92e2f3b33da425f9c98ce45d456b5243ae20c0c0c6d74ae3b1f880067e011be6c390cedaede3fd4390d2a7ea97047a1e262d503dab200fa9fff8bc57f1d72264cfec6eb9c28c3fa8a1671bce50c8cbe94dd6fb3e1a9deebad0edd8870260bc20b233406b4a54f33f6c55228f1edc1e6b49d00250b746c35fc87e71dfe923c655c991f0cd5987f6a45035567da7c9fbe919d6a414586be1fb895253b53ea63ac442384cf3b37c43b2498b9dcde76cd4e1707dcb0509e20720edaca37a2ad12db6126e6aecbef157d7a1756d0b0482aeed27e0e3b16edc7df1f2e9afa7321c6899611c5b555c2aed6a611adff032b507fbfcc99a5151bb5e3e51797ee689280e8e71779cd1c024ad6d36ebbcfe4976f53c1327717823e9da15dc953e02a752d57ecb3083f47eecab5c8ed004db0c3fcf3074d8ab2ae793d5dc6f4f69d264d53c4e9feb98ad591686a98b59149770d668d25f9ee40437481cb7f83ec445766ea0c821ea663a40a044697994b566603bb1025adf93406b865ee2b0b0f8d83bd848918a08598e118a9d158da741951c1322dc797d0eace033e52505bc3d4067deb61b0adea247aa77c24a4654dca3b840b2b772f92736adfc7c6188c74c7ad97c9f3077b1b00947de447fec3f303cc091573eaabbc817dc87fda266ac07c4bdf7ccf0b0fb71b3d76574e2acab6a388aab5da02817428a65152fcca975909998e86a2db999c6a8028336b4db892e1b82cc4d867f0f7d19d71cf6ba67ccb67a4f19f2c42b95fc232314cbbe5ffbb8008539a752d9881df42b7b685c7676561fca17e4eae4c143cf3e76a14ea7075d72f62af88bfc7fe52b648357ffa78192553cfd530bb5435221b86d41e644dc9c19a0d8a24ee8f2bb2d118b940651f9ab33677c1284a319ba713458c9ffc568ab8fdca5f66eceea4604ae11348d1e3a0f436c4e87e2b8d826d1392fec968c117a8e1923b7f3e1f60ccce5992293281eebdf14747164eab354618b913be8b6ab566b46e7e7e9008a0267400b2e0cfe5e0f195086e720c0ab7", &(0x7f0000000180)="fc32c4dd7cd29bf8ea9d0d6c7551fda1fc950fe44f050a8eec57"}}, &(0x7f0000000340)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)

41.586286965s ago: executing program 5 (id=5530):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000280)='%pi6   \x00'}, 0xfffffffffffffe1d)
rt_sigsuspend(0xfffffffffffffffc, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000380)={0x8080000, 0x34000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x2000, 0x1})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000e80)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffc89)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100002800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe93)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xff)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000001c0))
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x10, 0x20000008, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @local, @multicast1}}}})
socket$inet6_tcp(0xa, 0x1, 0x0)

39.598102264s ago: executing program 5 (id=5540):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

39.549898225s ago: executing program 5 (id=5541):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000001c40)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r6}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
close(r4)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0)

38.938914557s ago: executing program 8 (id=5543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
syz_open_dev$tty20(0xc, 0x4, 0x0)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x2, "e8b353f9"}, @main=@item_012={0x1, 0x0, 0x8, '&'}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)

38.239117431s ago: executing program 5 (id=5546):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
unshare(0x2040600)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3000000, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r8=>0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20)
io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000140)="2a22cab1fd28", 0x6}])
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_NMI(r11, 0xae9a)
ioctl$KVM_SET_CLOCK(r10, 0x4030ae7b, &(0x7f00000001c0)={0x3, 0x4, 0x80, 0x4, 0x8001})
pipe2$9p(&(0x7f0000000240), 0x0)

37.186649972s ago: executing program 5 (id=5550):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703200000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000000001010400000000000000000200000014001080080002400000000308000140fffffbff240001801400018008000100e000000108000200e00000010c0002807b1aceb55a75c5717e0500010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x129c00, 0x0)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x6, 0x7, 0x3, 0x30000000}, {0x7, 0x1, 0x7, 0x8}, {0x40, 0xf9, 0xb8, 0x9}, {0x3, 0x7, 0xf9, 0x100}, {0x3c4f, 0x10}]})
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

35.560970894s ago: executing program 8 (id=5560):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
pause()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ftruncate(r6, 0xc17a)
fsync(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1d, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4abf54b6, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x3, 0x4, 0x2, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x7fff, 0x93, &(0x7f0000000a40)=""/147, 0x1f00, 0x67, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000080)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0xfff, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0x6}, {0x1, 0x3, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x6}, {0x1, 0x2, 0x1, 0x7}, {0x3, 0x4, 0xb, 0xc}, {0x3, 0x4, 0x6, 0x1}, {0x3, 0x1, 0x1, 0x9}], 0x10, 0x14}, 0x94)

34.766750609s ago: executing program 8 (id=5563):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000009f00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c6e66732c726f6469722c6e6f6e756d7461696c3d302c757466383d312c757466383d302c696f636861727365743d6d616363656e746575726f2c726f6469722c636865636b3d7374726963742c757466383d312c757466383d302c726f6469722c636f6465706167653d3835322c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d55492fc57461696c3d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d312c73686f72746e616d653d6c6f7765722c75746638"], 0x6, 0x2d7, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0x1000000, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

34.668535741s ago: executing program 8 (id=5564):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xc, 0x4, 0x2c0, 0xffffffff, 0x188, 0x0, 0xf0, 0x98, 0xffffffff, 0x228, 0x228, 0x220, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x2}}, @common=@addrtype={{0x30}, {0x60, 0x0, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@empty, @private=0xa010101, 0xff, 0xff000000, 'pim6reg0\x00', 'ip6_vti0\x00', {}, {}, 0x11, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x1}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4013, 0x0, 0x1, 0x0, 0x0)

34.571000963s ago: executing program 8 (id=5565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
syz_open_dev$tty20(0xc, 0x4, 0x0)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x2, "e8b353f9"}, @main=@item_012={0x1, 0x0, 0x8, '&'}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0)

34.570736423s ago: executing program 8 (id=5566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
prlimit64(r2, 0xe, &(0x7f0000000140)={0x1, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000426ff906fc2b139d1c344a3454c9c406006f2f16af8fbd76f883cecb73a8bae9e02dc78cd9370f647298d0a840b6033971c026bb803632cc2b"], 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

34.520502844s ago: executing program 39 (id=5566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
prlimit64(r2, 0xe, &(0x7f0000000140)={0x1, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000426ff906fc2b139d1c344a3454c9c406006f2f16af8fbd76f883cecb73a8bae9e02dc78cd9370f647298d0a840b6033971c026bb803632cc2b"], 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

23.272260164s ago: executing program 40 (id=5550):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703200000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000000001010400000000000000000200000014001080080002400000000308000140fffffbff240001801400018008000100e000000108000200e00000010c0002807b1aceb55a75c5717e0500010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x129c00, 0x0)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x6, 0x7, 0x3, 0x30000000}, {0x7, 0x1, 0x7, 0x8}, {0x40, 0xf9, 0xb8, 0x9}, {0x3, 0x7, 0xf9, 0x100}, {0x3c4f, 0x10}]})
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.198656059s ago: executing program 2 (id=5734):
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000003c0)={0x10000, 0xe4, 0x3, 0x101, 0x6, "0200000000002000000000000000fcffffff00", 0x0, 0x3})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r0, 0x101, 0x3)

8.19829773s ago: executing program 2 (id=5737):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0x9a)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)

8.131075431s ago: executing program 2 (id=5739):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x802, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103", @ANYBLOB], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002219000000832d"], &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x3a1}}}}, 0x0)
r3 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
timer_create(0x8, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
syz_open_dev$evdev(0x0, 0x0, 0x0)

7.017332323s ago: executing program 0 (id=5748):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x1d8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)

6.945369324s ago: executing program 3 (id=5749):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00')
close_range(r1, r1, 0x0)
syz_usb_connect(0x0, 0xf9, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102c80bf308ba152a00ef2e010203011e02e70002036140070904010a00ff4d6624052406000105240001000d240f019cf70000100007007f06241ab2503804240203082407040500593d0f03b21d6af5e4a015ed3eaf91da4c0904eb0804e29e93080a24060000892bfe5bfa05240006000d240f010900000001090100c0072414060005000c241b07000600780300000f0524010209052415010106240600001705240008000d240f01030000007a000400800624070e0100052415040009050902100009b498020b09050a00200002010709041390fb61b70a610231090501002000090c02090503000002080263072501030e0500"], &(0x7f0000000b80)={0x0, 0x0, 0x19, &(0x7f0000000c00)=ANY=[], 0x2, [{0xe1, 0x0}, {0x0, 0x0}]})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x44011)
fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000080)=@sha1={0x1, "22fc65d76b850a72d79cd7188c10fa62194f3f6e"}, 0x15, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x57, 0x0, 0x8, {0x80c, 0x1}, {0x48, 0x400}, @rumble={0xe0, 0x5}})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

6.879148975s ago: executing program 0 (id=5750):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0xb, 0x7fff, 0x0, 0x6995f007, 0x7fffffffffffffff, 0x4, 0xc5, 0x3, 0x81, 0x7, 0x800, 0x9, 0x3, 0xeb, 0x9, 0xfffffffffffffd], 0x5000, 0x385f40})
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.855429686s ago: executing program 0 (id=5751):
socket$inet6(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18)

6.105223341s ago: executing program 0 (id=5753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
getuid()
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, &(0x7f0000000140)=ANY=[])
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)

6.105097021s ago: executing program 0 (id=5754):
mlockall(0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000001880)={0x80801000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)

6.080997511s ago: executing program 0 (id=5755):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r4, r3, 0x0, 0xffffffff)

6.035656132s ago: executing program 41 (id=5755):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r4, r3, 0x0, 0xffffffff)

5.699024489s ago: executing program 3 (id=5761):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
listen(r7, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)

5.62105633s ago: executing program 3 (id=5763):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75e, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f0000000d80)=[{&(0x7f0000000000)="e2289dab92aa45dc3906879e775dfe7ef50126b56ee29621567357f59ae2bf5277ec4591bb1eb0a7bffdf7560db41bce0e739dad6df85d92539c04410980e3bdc35ac0ab424c6f3cb61f224d256bc226168c0d46ff0e7f724cf7c0f807a776c9ff9a03f37b87ea2b37aebb23bf540980bda86a97092a795169eaf01ee729e8e952d0", 0x82}, {&(0x7f00000006c0)="98e4919cb210ff25852416aa02fd217ae3de16c3de00ffd188523f23c3990df0460f59e6ed8d80fba8d349e465d8d712c42988aa007ae0ff4129fb0b69695d4472a79a5177f735ddad0cfc44e7505d69c209ed88b5e1fd85a11b039265418949300b42da3ec33c80db5d4efe28201360022dc3234410cd6934707ab6f74ef9a811b842836b8585f1b7e3bbcc5cc55a378e8a1d1f4f2f31be926a149c0d82649601095035c82f9030ad0eb73194efd05bce978f70f6691027d33d5571290000000000", 0xc2}, {&(0x7f0000000180)="a4ba22023ec7c71f4ae06cd6b81fa5f3b79befcc8cbfba9121c749f6003b40b46f7eadcffc054a72987e02cb38ec087301e6d89b336a0c16780a71a690e4587503a7564d707c2e5ba96979f3b2a9a33dbddc0764112151dbd975b548f2a5c3e7408cceaaaec3a4fb5ab25cccf4ad3746e52ff5de67d7d76c3d04a4b12d332ae8bfb4f4c4fca13a9c0292b0d4f4593fd5ddc0f30b550e5a6721a906a03b0912f954e8132930d643b7e75a6d44e9f791eb4761ac6dd9055165aa590c2b", 0xbc}, {&(0x7f00000003c0)="797f50a38cbfdb9a96f76d846770faf1d1b960ef2fdaac3a79f7f879111fa18fc35728cb33ab7cc019270a5526ad50be8319d866f9a1fadabb847e25a7cccc23fe69bf92b4008fdf8a28ed01362ea41eec5deaffae8258cd7b2b5d315b6789b2e8422765ed506cc5e47fd00924566b9e70ead8a886fd6b4e0b9fecc347", 0x7d}, {&(0x7f0000000240)="c9d8660131b353", 0x7}, {&(0x7f0000000e40)="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", 0x10a}, {&(0x7f0000000440)="a373f124e0b8ff9886fcd2f5c8446a3133c6fda7f7c948e2f5a0ca9eea13c9a24be8e19605ecf6b468bae9d960d6b82e75af2ef47fe3a4", 0x37}, {&(0x7f0000000ac0)="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", 0x1ad}, {&(0x7f0000000f80)="ffffb6140d2df83ba900d22290a9433245ad5f34d9c673a4fd5d3c2babb27839fa3683d4137a12e9401dafe6e9d3b80109fdf97422143bb809d324cafa86f8607bda48901be3cca7ed8e708ddb6544a9bf70b76a23efe759715984d8dc7acea46d1178249167d41d2d61d8884b53242141f5d5b3b1a5dc9fcda380adacadcfcde201eaa6ac4108a003024ca9f77c0cdd5f7f93ae0f6bdce8ea7346d9e14ff43e97a9", 0xa2}, {0x0}], 0xa, 0xbec, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)

5.475088113s ago: executing program 3 (id=5764):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002100)=ANY=[@ANYBLOB="12010000000000107d1e502d00000000000109022400010000400009040000020300000009210400000122030009058103000000000024b8b5c483a2df0de24806ff5e184a2bfc57320eb09d755086e70fe72b5a5872389fad0e4c2e1c332c1d119d3440878ef8505b28063fa1786bc33972b63f3b4816b25f4eac33dea22c15d0423f994dda52acfe0d4b83"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000021c0)=ANY=[@ANYBLOB="402285000000850e88"], 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r1, 0x0, 0x40000003)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

5.357604176s ago: executing program 2 (id=5766):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}], 0x1, 0x4000001)
r2 = dup(r1)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
read$FUSE(r2, &(0x7f00000075c0)={0x2020}, 0x2020)
shutdown(r2, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

4.511099522s ago: executing program 2 (id=5770):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x5, 0xc, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x101})
r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f701020301090224"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001300)={"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"})

2.710082547s ago: executing program 3 (id=5779):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x13, @string={0x13, 0x3, "9a000000000000000000000000000000cc"}}, 0x0, 0x0}, 0x0)

2.255009876s ago: executing program 1 (id=5782):
socket(0x1e, 0x5, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}])
io_destroy(r2)
close(0x4)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)

2.06614995s ago: executing program 1 (id=5784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r3, 0x603, 0x70bd26, 0x25df5bfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10)

2.014969211s ago: executing program 1 (id=5786):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.941420942s ago: executing program 1 (id=5787):
syz_open_dev$usbfs(0x0, 0x7, 0x2000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000031c0)={0x2020}, 0x2020)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000920000401103754f2f28b7ec12f800"])

1.799148095s ago: executing program 1 (id=5789):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff}}}}}]}}]}}, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x55c, 0x20100)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400412000000bc79f172210100"/23], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)

1.684604977s ago: executing program 2 (id=5790):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="601606000000dbcda7673d"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0xc0040, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[], 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xe, {[@local=@item_012={0x2, 0x2, 0x4, "a704"}, @main=@item_4={0x3, 0x0, 0x8, "5d484c80"}, @global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0xb, "f5673a41"}]}}, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x5, 0x1e, "f2f2a4056cefb370a8890e7369f73feeb9bee8eef55821b4801143f3abaf"}, 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(0xffffffffffffffff)

1.419446332s ago: executing program 6 (id=5792):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.079061359s ago: executing program 6 (id=5793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r0, 0x0, r0, 0x0, 0x0)
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0)

1.055875829s ago: executing program 6 (id=5794):
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x122110, 0xffffffffffffffff, 0xffffc000)
socket$netlink(0x10, 0x3, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xfc3, 0x0, 0x8000000000000000, 0xfa4d, 0x9, 0x4, 0x8, 0x3}, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x110, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffffff, 0xff000000, 0x3, 0x4, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="4fa46846e54e", {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xff01, 0x6ef, 0xf6, 0x4, 0x2, 0x4, 'ip6gre0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x30}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @broadcast, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0xffffff00, 0xf, 0x3, {@empty, {[0x1fe, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="e493865a79a6", {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x3, 0x3, 0x100, 0x4, 0x3, 'syzkaller0\x00', 'wg0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0xd7}}}}, {{@arp={@broadcast, @remote, 0xff, 0xffffff00, 0xc, 0x8, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x47, 0x16, 0xc37, 0x3, 0x8, 0x3, 'bridge0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@multicast, @private=0xa010101, @broadcast, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))

715.722116ms ago: executing program 4 (id=5797):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

644.784388ms ago: executing program 3 (id=5798):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x11, 0x3, {0x3, 0xe, "88"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
ptrace$cont(0x20, r1, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/39, 0x27}], 0x1}, 0x40000003)
sched_setscheduler(0x0, 0x2, 0x0)

591.157008ms ago: executing program 4 (id=5799):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000920000401103754f2f28b7ec12f800"])

536.17842ms ago: executing program 4 (id=5800):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

349.699903ms ago: executing program 4 (id=5801):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
setuid(0xee01)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmsg(r3, 0x0, 0x11)
socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000940)={0xbc, 0x0, 0x1})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

296.796994ms ago: executing program 1 (id=5802):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905811c00020000000904010000020d00000904010102020d00", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xcc2, 0x10, 0x6, 0x80, 0x7, 0x1, 0x724, 0x1, 0x9, 0xcff1, 0x1ff, 0x7fff}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)

205.237686ms ago: executing program 6 (id=5803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

204.706826ms ago: executing program 4 (id=5804):
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0)
unshare(0x62040200)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

170.416847ms ago: executing program 6 (id=5805):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001880)={"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"})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

93.307638ms ago: executing program 4 (id=5806):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6e6f646973636172642c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6e6f666c7573685f6d657267652c64697361626c655f726f6c6c5f666f72776172642c696e6c696e655f646174612c6673796e635f6d6f64653d706f7369782c686561702c6e6f696e6c696e655f646174612c6e6f657874656e745f63616368652c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c757365725f78617474722c00779cd4f02894cf964d909c186aac251e773b07a2a2349d810b3ec41107242d9e37b999afd91d5fe52bdddd57868a70f0b28523203ce742ef793e984a3e5c4fb9fa37eec6c48714f05711f8f7206ba61dcb3d975e8b544ca8aae49633e3cf0d015e32276cf811c1900db5f8e56ba59a7ec100"/320], 0x1, 0x5505, &(0x7f0000002480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)

0s ago: executing program 6 (id=5807):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_create(0x5, &(0x7f00000001c0)={0x0, 0xa, 0x2, @thr={&(0x7f0000000780)="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", &(0x7f0000000180)="fc32c4dd7cd29bf8ea9d0d6c7551fda1fc950fe44f050a8eec57"}}, &(0x7f0000000340)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10)

kernel console output (not intermixed with test programs):

for  pid=18733 comm="syz.5.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1161.604305][   T28] audit: type=1400 audit(2000524757.252:27582): avc:  denied  { mounton } for  pid=18739 comm="syz.8.5181" path="/90/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1161.627295][   T28] audit: type=1400 audit(2000524757.285:27583): avc:  denied  { bpf } for  pid=18733 comm="syz.5.5180" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1161.648390][   T28] audit: type=1400 audit(2000524758.052:27584): avc:  denied  { write } for  pid=18739 comm="syz.8.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1161.998879][T12694] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1162.440552][T18773] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1163.406407][T12694] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1163.440583][T12694] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1163.466187][T12694] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1163.483884][T12694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.514529][T18758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1163.731763][   T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1164.345638][T12694] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[ 1164.370282][T12694] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input126
[ 1164.671448][T12694] usb 4-1: USB disconnect, device number 41
[ 1164.671493][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1164.686498][   T24] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1164.697778][   T24] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1164.716234][   T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1164.726263][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.744915][T18776] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1165.304050][T18799] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5194'.
[ 1165.402930][   T24] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[ 1165.412631][   T24] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input127
[ 1165.442740][    C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1165.462117][   T24] usb 6-1: USB disconnect, device number 75
[ 1165.749139][   T28] kauditd_printk_skb: 240 callbacks suppressed
[ 1165.749157][   T28] audit: type=1400 audit(2000524764.238:27825): avc:  denied  { bpf } for  pid=18800 comm="syz.3.5198" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1165.817437][   T28] audit: type=1400 audit(2000524764.238:27826): avc:  denied  { map_create } for  pid=18800 comm="syz.3.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1165.869507][   T28] audit: type=1400 audit(2000524764.238:27827): avc:  denied  { map_read map_write } for  pid=18800 comm="syz.3.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1165.896526][   T28] audit: type=1400 audit(2000524764.303:27828): avc:  denied  { bpf } for  pid=18800 comm="syz.3.5198" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1165.917326][   T28] audit: type=1400 audit(2000524764.303:27829): avc:  denied  { prog_load } for  pid=18800 comm="syz.3.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1165.938402][   T28] audit: type=1400 audit(2000524764.303:27830): avc:  denied  { bpf } for  pid=18800 comm="syz.3.5198" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1165.992135][   T28] audit: type=1400 audit(2000524764.303:27831): avc:  denied  { perfmon } for  pid=18800 comm="syz.3.5198" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1166.013849][   T28] audit: type=1400 audit(2000524764.303:27832): avc:  denied  { prog_run } for  pid=18800 comm="syz.3.5198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1166.861224][   T28] audit: type=1400 audit(2000524764.573:27833): avc:  denied  { create } for  pid=18804 comm="syz.1.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1166.880560][T18809] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1166.882936][   T28] audit: type=1400 audit(2000524764.573:27834): avc:  denied  { getopt } for  pid=18804 comm="syz.1.5199" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1166.962191][T18820] tipc: Failed to remove unknown binding: 66,1,1/2886997162:260649486/260649488
[ 1168.569043][T18844] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1169.662461][T18288] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[ 1170.265096][T18860] overlayfs: failed to clone upperpath
[ 1170.992474][   T28] kauditd_printk_skb: 172 callbacks suppressed
[ 1170.992492][   T28] audit: type=1400 audit(2000524768.900:28007): avc:  denied  { bpf } for  pid=18849 comm="syz.0.5214" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1171.109084][   T28] audit: type=1400 audit(2000524768.900:28008): avc:  denied  { prog_load } for  pid=18849 comm="syz.0.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1171.128851][   T28] audit: type=1400 audit(2000524768.900:28009): avc:  denied  { perfmon } for  pid=18849 comm="syz.0.5214" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1171.153182][   T28] audit: type=1400 audit(2000524768.900:28010): avc:  denied  { prog_run } for  pid=18849 comm="syz.0.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1171.180430][   T28] audit: type=1400 audit(2000524769.019:28011): avc:  denied  { bpf } for  pid=18848 comm="syz.1.5215" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1171.213303][   T28] audit: type=1400 audit(2000524769.030:28012): avc:  denied  { prog_load } for  pid=18848 comm="syz.1.5215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1171.342718][T18876] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1171.349284][T18876] audit: audit_lost=454 audit_rate_limit=0 audit_backlog_limit=64
[ 1171.357141][T18876] audit: backlog limit exceeded
[ 1171.365875][T18876] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1172.166072][T18288] usb 4-1: device not accepting address 42, error -71
[ 1172.285860][T18894] overlayfs: failed to resolve './file0': -2
[ 1172.330417][T18894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1172.337671][T18894] IPv6: NLM_F_CREATE should be set when creating new route
[ 1174.268414][T18963] overlayfs: failed to resolve './file0': -2
[ 1174.275187][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[ 1174.291747][T18963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1174.299039][T18963] IPv6: NLM_F_CREATE should be set when creating new route
[ 1174.809333][T18969] overlayfs: failed to clone upperpath
[ 1174.842515][T18969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1175.105163][T18989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5253'.
[ 1175.213971][T18993] xt_hashlimit: size too large, truncated to 1048576
[ 1176.088827][   T28] kauditd_printk_skb: 493 callbacks suppressed
[ 1176.102805][   T28] audit: type=1400 audit(2000524775.135:28495): avc:  denied  { bpf } for  pid=18999 comm="syz.8.5261" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1176.154245][   T28] audit: type=1400 audit(2000524775.135:28496): avc:  denied  { map_create } for  pid=18999 comm="syz.8.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1176.223633][   T28] audit: type=1400 audit(2000524775.135:28497): avc:  denied  { map_read map_write } for  pid=18999 comm="syz.8.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1176.282297][   T28] audit: type=1400 audit(2000524775.135:28498): avc:  denied  { prog_load } for  pid=18999 comm="syz.8.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1176.319622][   T28] audit: type=1400 audit(2000524775.146:28499): avc:  denied  { bpf } for  pid=18999 comm="syz.8.5261" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1176.341399][   T28] audit: type=1400 audit(2000524775.146:28500): avc:  denied  { perfmon } for  pid=18999 comm="syz.8.5261" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1176.364116][   T28] audit: type=1400 audit(2000524775.157:28501): avc:  denied  { prog_run } for  pid=18999 comm="syz.8.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1176.386420][   T28] audit: type=1400 audit(2000524775.340:28502): avc:  denied  { bpf } for  pid=18999 comm="syz.8.5261" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1176.415105][   T28] audit: type=1400 audit(2000524775.491:28503): avc:  denied  { map_create } for  pid=19004 comm="syz.3.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1176.435807][   T28] audit: type=1400 audit(2000524775.491:28504): avc:  denied  { map_read map_write } for  pid=19004 comm="syz.3.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1177.840248][  T340] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1178.008784][  T340] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1178.020130][  T340] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1178.062823][  T565] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1178.072324][  T340] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1178.087029][  T340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.146670][T19050] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1178.242626][  T565] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1178.254067][  T565] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1178.269368][  T565] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1178.317774][  T565] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1178.331414][  T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.474789][  T565] usb 4-1: config 0 descriptor??
[ 1178.657215][  T340] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[ 1178.665402][  T340] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input130
[ 1178.686261][  T340] usb 6-1: USB disconnect, device number 76
[ 1178.686299][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1179.014166][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5284'.
[ 1179.330745][T19085] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1179.535494][T19087] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5289'.
[ 1179.574647][  T340] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1179.752393][  T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.763462][  T340] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00
[ 1179.772564][  T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.783210][  T340] usb 1-1: config 0 descriptor??
[ 1179.979300][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1179.999922][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1180.188166][  T565] usbhid 4-1:0.0: can't add hid device: -71
[ 1180.201722][  T565] usbhid: probe of 4-1:0.0 failed with error -71
[ 1180.215665][  T340] usbhid 1-1:0.0: can't add hid device: -71
[ 1180.223969][  T340] usbhid: probe of 1-1:0.0 failed with error -71
[ 1180.235657][  T340] usb 1-1: USB disconnect, device number 27
[ 1180.248296][  T565] usb 4-1: USB disconnect, device number 44
[ 1180.285641][T19103] overlayfs: failed to resolve './file1': -2
[ 1180.324581][T19103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1181.048862][   T28] kauditd_printk_skb: 333 callbacks suppressed
[ 1181.048951][   T28] audit: type=1400 audit(2000524780.580:28838): avc:  denied  { bpf } for  pid=19104 comm="syz.3.5295" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1181.133115][   T28] audit: type=1400 audit(2000524780.580:28839): avc:  denied  { map_create } for  pid=19104 comm="syz.3.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1181.140535][T19114] xt_bpf: check failed: parse error
[ 1181.179983][   T28] audit: type=1400 audit(2000524780.580:28840): avc:  denied  { perfmon } for  pid=19104 comm="syz.3.5295" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1181.225788][   T28] audit: type=1400 audit(2000524780.580:28841): avc:  denied  { map_read map_write } for  pid=19104 comm="syz.3.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1181.266838][   T28] audit: type=1400 audit(2000524780.677:28842): avc:  denied  { prog_load } for  pid=19104 comm="syz.3.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1181.289574][   T28] audit: type=1400 audit(2000524780.677:28843): avc:  denied  { prog_run } for  pid=19104 comm="syz.3.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1181.317777][   T28] audit: type=1400 audit(2000524780.979:28844): avc:  denied  { map } for  pid=19104 comm="syz.3.5295" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1181.352581][   T28] audit: type=1400 audit(2000524780.979:28845): avc:  denied  { read } for  pid=19104 comm="syz.3.5295" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1181.377685][   T28] audit: type=1400 audit(2000524781.001:28846): avc:  denied  { ioctl } for  pid=19104 comm="syz.3.5295" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1181.405331][   T28] audit: type=1400 audit(2000524781.001:28847): avc:  denied  { set_context_mgr } for  pid=19104 comm="syz.3.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1181.612758][T19125] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1182.835346][T19137] can0: slcan on ptm0.
[ 1183.787315][T19131] can0 (unregistered): slcan off ptm0.
[ 1183.898985][T19149] netlink: 'syz.5.5309': attribute type 12 has an invalid length.
[ 1186.079111][   T28] kauditd_printk_skb: 277 callbacks suppressed
[ 1186.079175][   T28] audit: type=1400 audit(2000524785.560:29125): avc:  denied  { bpf } for  pid=19185 comm="syz.1.5323" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1186.109841][   T28] audit: type=1400 audit(2000524785.840:29126): avc:  denied  { bpf } for  pid=19170 comm="syz.3.5317" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1186.134706][T19188] x_tables: duplicate underflow at hook 2
[ 1186.163156][   T28] audit: type=1400 audit(2000524785.840:29127): avc:  denied  { prog_load } for  pid=19170 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1186.189860][   T28] audit: type=1400 audit(2000524785.840:29128): avc:  denied  { bpf } for  pid=19170 comm="syz.3.5317" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1186.211933][   T28] audit: type=1400 audit(2000524785.840:29129): avc:  denied  { perfmon } for  pid=19170 comm="syz.3.5317" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1186.295438][   T28] audit: type=1400 audit(2000524785.840:29130): avc:  denied  { prog_run } for  pid=19170 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1186.377355][   T28] audit: type=1400 audit(2000524786.379:29131): avc:  denied  { module_request } for  pid=19170 comm="syz.3.5317" kmod="netdev-veth1_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1186.574447][   T28] audit: type=1400 audit(2000524786.390:29132): avc:  denied  { read write } for  pid=19170 comm="syz.3.5317" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1186.599121][   T28] audit: type=1400 audit(2000524786.390:29133): avc:  denied  { open } for  pid=19170 comm="syz.3.5317" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1186.664259][   T28] audit: type=1400 audit(2000524786.390:29134): avc:  denied  { mounton } for  pid=19170 comm="syz.3.5317" path="/449/file0" dev="tmpfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1186.945350][T19213] xt_bpf: check failed: parse error
[ 1187.061817][ T1653] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1187.219699][ T1653] usb 4-1: device descriptor read/64, error -71
[ 1187.228378][T19217] netlink: 'syz.0.5331': attribute type 1 has an invalid length.
[ 1187.628739][ T1653] usb 4-1: device descriptor read/64, error -71
[ 1189.797606][ T1653] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1189.966836][ T1653] usb 4-1: device descriptor read/64, error -71
[ 1190.241746][ T1653] usb 4-1: device descriptor read/64, error -71
[ 1190.335888][T19258] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1190.418984][T19257] FAULT_INJECTION: forcing a failure.
[ 1190.418984][T19257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1190.433052][T19257] CPU: 1 PID: 19257 Comm: syz.5.5341 Not tainted syzkaller #0
[ 1190.440527][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1190.450610][T19257] Call Trace:
[ 1190.453892][T19257]  <TASK>
[ 1190.456827][T19257]  __dump_stack+0x21/0x24
[ 1190.461207][T19257]  dump_stack_lvl+0xee/0x150
[ 1190.465855][T19257]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1190.470886][T19257]  ? release_firmware_map_entry+0x194/0x194
[ 1190.476814][T19257]  dump_stack+0x15/0x24
[ 1190.480974][T19257]  should_fail_ex+0x3d4/0x520
[ 1190.485648][T19257]  should_fail+0xb/0x10
[ 1190.489837][T19257]  should_fail_usercopy+0x1a/0x20
[ 1190.494853][T19257]  copyin+0x20/0xa0
[ 1190.498652][T19257]  _copy_from_iter+0x3e2/0xfd0
[ 1190.503409][T19257]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[ 1190.509495][T19257]  ? __cfi__copy_from_iter+0x10/0x10
[ 1190.514774][T19257]  ? check_stack_object+0x81/0x140
[ 1190.519891][T19257]  ? __check_object_size+0x45a/0x600
[ 1190.525179][T19257]  netlink_sendmsg+0x72c/0xbc0
[ 1190.529954][T19257]  ? irqentry_exit+0x37/0x40
[ 1190.534554][T19257]  ? sysvec_reschedule_ipi+0x78/0x80
[ 1190.539848][T19257]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 1190.545121][T19257]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 1190.550394][T19257]  ? __cfi_netlink_sendmsg+0x10/0x10
[ 1190.555671][T19257]  ____sys_sendmsg+0x5a9/0x990
[ 1190.560431][T19257]  ? __sys_sendmsg_sock+0x40/0x40
[ 1190.565457][T19257]  ? import_iovec+0x7c/0xb0
[ 1190.569978][T19257]  ___sys_sendmsg+0x21c/0x290
[ 1190.574671][T19257]  ? __sys_sendmsg+0x270/0x270
[ 1190.579436][T19257]  ? __fdget+0x19c/0x220
[ 1190.583675][T19257]  __x64_sys_sendmsg+0x1f0/0x2c0
[ 1190.588614][T19257]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[ 1190.594074][T19257]  ? __kasan_check_write+0x14/0x20
[ 1190.599185][T19257]  ? fpregs_restore_userregs+0x128/0x260
[ 1190.604814][T19257]  ? switch_fpu_return+0xe/0x10
[ 1190.609673][T19257]  x64_sys_call+0x171/0x9a0
[ 1190.614182][T19257]  do_syscall_64+0x4c/0xa0
[ 1190.618604][T19257]  ? clear_bhb_loop+0x30/0x80
[ 1190.623287][T19257]  ? clear_bhb_loop+0x30/0x80
[ 1190.627984][T19257]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1190.633877][T19257] RIP: 0033:0x7f163ab8eec9
[ 1190.638298][T19257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1190.657892][T19257] RSP: 002b:00007f163ba7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1190.666298][T19257] RAX: ffffffffffffffda RBX: 00007f163ade5fa0 RCX: 00007f163ab8eec9
[ 1190.674263][T19257] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1190.682234][T19257] RBP: 00007f163ba7a090 R08: 0000000000000000 R09: 0000000000000000
[ 1190.690227][T19257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1190.698188][T19257] R13: 00007f163ade6038 R14: 00007f163ade5fa0 R15: 00007ffe619fd148
[ 1190.706154][T19257]  </TASK>
[ 1190.709478][ T1653] usb usb4-port1: attempt power cycle
[ 1190.790698][   T28] kauditd_printk_skb: 223 callbacks suppressed
[ 1190.790713][   T28] audit: type=1400 audit(2000524791.508:29358): avc:  denied  { bpf } for  pid=19260 comm="syz.0.5342" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1190.896820][   T28] audit: type=1400 audit(2000524791.508:29359): avc:  denied  { map_create } for  pid=19260 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1190.926515][T19269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1190.933759][T19269] IPv6: NLM_F_CREATE should be set when creating new route
[ 1191.137134][   T28] audit: type=1400 audit(2000524791.508:29360): avc:  denied  { prog_load } for  pid=19260 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1191.237139][   T28] audit: type=1400 audit(2000524791.551:29361): avc:  denied  { bpf } for  pid=19261 comm="syz.5.5344" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1191.273536][   T28] audit: type=1400 audit(2000524791.551:29362): avc:  denied  { map_create } for  pid=19261 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1191.300027][   T28] audit: type=1400 audit(2000524791.551:29363): avc:  denied  { map_read map_write } for  pid=19261 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1191.320549][   T28] audit: type=1400 audit(2000524791.562:29364): avc:  denied  { bpf } for  pid=19261 comm="syz.5.5344" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1191.408293][   T28] audit: type=1400 audit(2000524791.562:29365): avc:  denied  { prog_load } for  pid=19261 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1191.471607][   T28] audit: type=1400 audit(2000524791.562:29366): avc:  denied  { create } for  pid=19261 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1191.832015][T19276] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1192.301912][T19291] syz.5.5350[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1192.301988][T19291] syz.5.5350[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1194.950796][T19318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1194.969430][T19318] IPv6: NLM_F_CREATE should be set when creating new route
[ 1195.099822][T19329] netlink: 'syz.3.5361': attribute type 4 has an invalid length.
[ 1195.452257][   T28] kauditd_printk_skb: 236 callbacks suppressed
[ 1195.452272][   T28] audit: type=1400 audit(2000524796.474:29601): avc:  denied  { execmem } for  pid=19334 comm="syz.0.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1195.453344][  T340] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1195.492015][   T28] audit: type=1400 audit(2000524796.571:29602): avc:  denied  { ioctl } for  pid=19330 comm="syz.1.5362" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1195.522143][   T28] audit: type=1400 audit(2000524796.603:29603): avc:  denied  { execmem } for  pid=19336 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1195.904450][   T28] audit: type=1400 audit(2000524796.635:29604): avc:  denied  { bpf } for  pid=19334 comm="syz.0.5363" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1195.926208][   T28] audit: type=1400 audit(2000524796.635:29605): avc:  denied  { map_create } for  pid=19334 comm="syz.0.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1195.949008][   T28] audit: type=1400 audit(2000524796.635:29606): avc:  denied  { bpf } for  pid=19334 comm="syz.0.5363" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1196.251762][  T340] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.262056][  T340] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1196.271921][  T340] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1196.284800][  T340] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d
[ 1196.294017][  T340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.339885][   T28] audit: type=1400 audit(2000524796.635:29607): avc:  denied  { map_read map_write } for  pid=19334 comm="syz.0.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1196.360452][  T340] snd-usb-audio: probe of 2-1:27.0 failed with error -2
[ 1196.398942][T19352] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1196.405361][T18610] udevd[18610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1196.406340][T19352] audit: audit_lost=460 audit_rate_limit=0 audit_backlog_limit=64
[ 1196.423833][   T28] audit: type=1400 audit(2000524796.635:29608): avc:  denied  { prog_load } for  pid=19334 comm="syz.0.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1196.695364][T19361] device wg2 entered promiscuous mode
[ 1198.190781][T19378] netlink: 612 bytes leftover after parsing attributes in process `syz.8.5374'.
[ 1198.720856][T19389] FAULT_INJECTION: forcing a failure.
[ 1198.720856][T19389] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1198.752428][T19389] CPU: 0 PID: 19389 Comm: syz.3.5376 Not tainted syzkaller #0
[ 1198.759915][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1198.769990][T19389] Call Trace:
[ 1198.773271][T19389]  <TASK>
[ 1198.776212][T19389]  __dump_stack+0x21/0x24
[ 1198.780560][T19389]  dump_stack_lvl+0xee/0x150
[ 1198.785156][T19389]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1198.790189][T19389]  dump_stack+0x15/0x24
[ 1198.794355][T19389]  should_fail_ex+0x3d4/0x520
[ 1198.799090][T19389]  should_fail+0xb/0x10
[ 1198.803260][T19389]  should_fail_usercopy+0x1a/0x20
[ 1198.808297][T19389]  _copy_from_user+0x1e/0xc0
[ 1198.812895][T19389]  kvm_vm_ioctl+0x235/0xa80
[ 1198.817403][T19389]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[ 1198.822428][T19389]  ? ioctl_has_perm+0x3e8/0x4c0
[ 1198.827275][T19389]  ? has_cap_mac_admin+0x330/0x330
[ 1198.832402][T19389]  ? security_file_permission+0x94/0xb0
[ 1198.837941][T19389]  ? vfs_write+0x9d6/0xca0
[ 1198.842357][T19389]  ? slab_free_freelist_hook+0xc2/0x190
[ 1198.847902][T19389]  ? selinux_file_ioctl+0x377/0x480
[ 1198.853095][T19389]  ? __cfi_selinux_file_ioctl+0x10/0x10
[ 1198.858656][T19389]  ? mutex_unlock+0x89/0x220
[ 1198.863238][T19389]  ? __cfi_mutex_unlock+0x10/0x10
[ 1198.868267][T19389]  ? __fget_files+0x2d5/0x330
[ 1198.872936][T19389]  ? security_file_ioctl+0x95/0xc0
[ 1198.878037][T19389]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[ 1198.883092][T19389]  __se_sys_ioctl+0x12f/0x1b0
[ 1198.887757][T19389]  __x64_sys_ioctl+0x7b/0x90
[ 1198.892336][T19389]  x64_sys_call+0x58b/0x9a0
[ 1198.896945][T19389]  do_syscall_64+0x4c/0xa0
[ 1198.901353][T19389]  ? clear_bhb_loop+0x30/0x80
[ 1198.906023][T19389]  ? clear_bhb_loop+0x30/0x80
[ 1198.910705][T19389]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1198.916591][T19389] RIP: 0033:0x7fe1c8b8eec9
[ 1198.920994][T19389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1198.940587][T19389] RSP: 002b:00007fe1c99e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1198.948987][T19389] RAX: ffffffffffffffda RBX: 00007fe1c8de5fa0 RCX: 00007fe1c8b8eec9
[ 1198.956952][T19389] RDX: 0000200000000080 RSI: 000000004068aea3 RDI: 0000000000000004
[ 1198.964926][T19389] RBP: 00007fe1c99e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1198.972972][T19389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1198.980933][T19389] R13: 00007fe1c8de6038 R14: 00007fe1c8de5fa0 R15: 00007ffcafa9a5f8
[ 1198.988899][T19389]  </TASK>
[ 1199.219400][  T339] usb 2-1: USB disconnect, device number 76
[ 1199.255119][T19400] fuse: Unknown parameter 'rkotmnde'
[ 1200.098359][   T28] kauditd_printk_skb: 291 callbacks suppressed
[ 1200.098373][   T28] audit: type=1400 audit(2000524801.535:29875): avc:  denied  { bpf } for  pid=19411 comm="syz.5.5383" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.217961][   T28] audit: type=1400 audit(2000524801.567:29876): avc:  denied  { bpf } for  pid=19411 comm="syz.5.5383" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.250451][   T28] audit: type=1400 audit(2000524801.578:29877): avc:  denied  { map_create } for  pid=19411 comm="syz.5.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1200.276769][   T28] audit: type=1400 audit(2000524801.578:29878): avc:  denied  { map_read map_write } for  pid=19411 comm="syz.5.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1200.303241][T19416] kvm: pic: non byte read
[ 1200.311788][T19416] kvm: pic: non byte read
[ 1200.338402][   T28] audit: type=1400 audit(2000524801.589:29879): avc:  denied  { bpf } for  pid=19411 comm="syz.5.5383" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.360862][   T28] audit: type=1400 audit(2000524801.589:29880): avc:  denied  { prog_load } for  pid=19411 comm="syz.5.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1200.380910][   T28] audit: type=1400 audit(2000524801.589:29881): avc:  denied  { bpf } for  pid=19411 comm="syz.5.5383" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.402524][   T28] audit: type=1400 audit(2000524801.589:29882): avc:  denied  { perfmon } for  pid=19411 comm="syz.5.5383" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.438279][   T28] audit: type=1400 audit(2000524801.589:29883): avc:  denied  { bpf } for  pid=19411 comm="syz.5.5383" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1200.460104][   T28] audit: type=1400 audit(2000524801.600:29884): avc:  denied  { prog_run } for  pid=19411 comm="syz.5.5383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1201.132751][T19433] fuse: Bad value for 'fd'
[ 1202.603352][T19443] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1205.159426][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[ 1205.169543][T19470] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1205.936118][T19473] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1206.547209][   T28] kauditd_printk_skb: 153 callbacks suppressed
[ 1206.547226][   T28] audit: type=1400 audit(2000524805.831:30038): avc:  denied  { bpf } for  pid=19446 comm="syz.3.5392" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.614535][   T28] audit: type=1400 audit(2000524805.831:30039): avc:  denied  { map_create } for  pid=19446 comm="syz.3.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1206.722664][   T28] audit: type=1400 audit(2000524805.831:30040): avc:  denied  { map_read map_write } for  pid=19446 comm="syz.3.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1206.918288][T19488] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1206.924870][T19488] audit: audit_lost=469 audit_rate_limit=0 audit_backlog_limit=64
[ 1206.932724][T19488] audit: backlog limit exceeded
[ 1206.958305][T19488] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1206.964866][T19488] audit: audit_lost=470 audit_rate_limit=0 audit_backlog_limit=64
[ 1206.972710][T19488] audit: backlog limit exceeded
[ 1207.096785][T19489] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1207.239774][T19489] netlink: 'syz.0.5402': attribute type 27 has an invalid length.
[ 1208.626712][T12694] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1208.986495][T12694] usb 1-1: Using ep0 maxpacket: 16
[ 1208.993208][T12694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1209.013345][T12694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.030847][T12694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1209.044702][T12694] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1209.056282][T12694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.075885][T12694] usb 1-1: config 0 descriptor??
[ 1209.529726][T19491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.542228][T19491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.777295][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1209.784767][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1209.888356][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1209.978932][T19491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1210.027236][T19491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1210.048353][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.060990][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.148441][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.155884][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.163295][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.172192][T19529] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1210.195131][T19538] Disabled LAPIC found during irq injection
[ 1210.213209][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.229162][T12694] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0
[ 1210.975574][T12694] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0030/input/input134
[ 1211.358587][   T28] kauditd_printk_skb: 257 callbacks suppressed
[ 1211.358602][   T28] audit: type=1400 audit(2000524813.656:30284): avc:  denied  { bpf } for  pid=19546 comm="syz.5.5418" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1211.402557][T19547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5418'.
[ 1211.427598][T12694] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[ 1211.443164][   T28] audit: type=1400 audit(2000524813.688:30285): avc:  denied  { map_create } for  pid=19546 comm="syz.5.5418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1211.467378][T19547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5418'.
[ 1211.483730][T12694] usb 1-1: USB disconnect, device number 28
[ 1211.510948][   T28] audit: type=1400 audit(2000524813.688:30286): avc:  denied  { bpf } for  pid=19546 comm="syz.5.5418" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1211.586091][T19556] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1211.592759][T19556] audit: audit_lost=476 audit_rate_limit=0 audit_backlog_limit=64
[ 1211.600640][T19556] audit: backlog limit exceeded
[ 1211.606554][T19556] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1211.613118][T19556] audit: audit_lost=477 audit_rate_limit=0 audit_backlog_limit=64
[ 1211.620969][T19556] audit: backlog limit exceeded
[ 1211.625953][T19556] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1212.120016][T19560] fido_id[19560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1212.156340][T19568] SELinux:  Context  is not valid (left unmapped).
[ 1212.202727][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5421'.
[ 1212.256625][T19579] input: syz1 as /devices/virtual/input/input135
[ 1212.301734][T19578] bridge0: port 1(vlan2) entered blocking state
[ 1212.359816][T19578] bridge0: port 1(vlan2) entered disabled state
[ 1213.569318][T19614] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1215.126814][T19637] overlayfs: overlapping lowerdir path
[ 1215.136062][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5441'.
[ 1216.010212][   T28] kauditd_printk_skb: 503 callbacks suppressed
[ 1216.010227][   T28] audit: type=1400 audit(2001049106.665:30740): avc:  denied  { bpf } for  pid=19677 comm="syz.5.5453" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1216.037637][   T28] audit: type=1400 audit(2001049106.665:30741): avc:  denied  { map_create } for  pid=19677 comm="syz.5.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1216.057318][   T28] audit: type=1400 audit(2001049106.665:30742): avc:  denied  { map_read map_write } for  pid=19677 comm="syz.5.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1216.077444][   T28] audit: type=1400 audit(2001049106.698:30743): avc:  denied  { bpf } for  pid=19677 comm="syz.5.5453" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1216.141366][   T28] audit: type=1400 audit(2001049106.698:30744): avc:  denied  { prog_load } for  pid=19677 comm="syz.5.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1216.162059][   T28] audit: type=1400 audit(2001049106.698:30745): avc:  denied  { bpf } for  pid=19677 comm="syz.5.5453" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1216.183934][   T28] audit: type=1400 audit(2001049106.698:30746): avc:  denied  { prog_load } for  pid=19677 comm="syz.5.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1216.203850][   T28] audit: type=1400 audit(2001049106.698:30747): avc:  denied  { perfmon } for  pid=19677 comm="syz.5.5453" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1216.233084][   T28] audit: type=1400 audit(2001049106.698:30748): avc:  denied  { prog_run } for  pid=19677 comm="syz.5.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1216.299190][T19683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5455'.
[ 1216.329290][   T28] audit: type=1400 audit(2001049106.795:30749): avc:  denied  { bpf } for  pid=19680 comm="syz.8.5454" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1216.797361][T19705] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1217.083631][T19715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1217.090897][T19715] IPv6: NLM_F_CREATE should be set when creating new route
[ 1217.774944][T19729] overlayfs: failed to resolve './file1': -2
[ 1220.013227][T19769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1220.057624][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[ 1220.091148][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[ 1220.649998][   T28] kauditd_printk_skb: 365 callbacks suppressed
[ 1220.650041][   T28] audit: type=1400 audit(2001049111.680:31115): avc:  denied  { validate_trans } for  pid=19787 comm="syz.5.5484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1221.071660][   T28] audit: type=1400 audit(2001049111.723:31116): avc:  denied  { bpf } for  pid=19789 comm="syz.3.5485" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.092906][   T28] audit: type=1400 audit(2001049111.723:31117): avc:  denied  { map_create } for  pid=19789 comm="syz.3.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.196211][   T28] audit: type=1400 audit(2001049111.723:31118): avc:  denied  { map_read map_write } for  pid=19789 comm="syz.3.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.250977][   T28] audit: type=1400 audit(2001049111.745:31119): avc:  denied  { prog_load } for  pid=19789 comm="syz.3.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.270621][   T28] audit: type=1400 audit(2001049111.745:31120): avc:  denied  { perfmon } for  pid=19789 comm="syz.3.5485" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.293546][   T28] audit: type=1400 audit(2001049111.745:31121): avc:  denied  { prog_run } for  pid=19789 comm="syz.3.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.324510][T19807] fuse: Unknown parameter 'óâf0x0000000000000004'
[ 1221.331049][   T28] audit: type=1400 audit(2001049112.112:31122): avc:  denied  { bpf } for  pid=19794 comm="syz.1.5486" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.357510][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5489'.
[ 1221.368786][   T28] audit: type=1400 audit(2001049112.112:31123): avc:  denied  { map_create } for  pid=19794 comm="syz.1.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.388813][   T28] audit: type=1400 audit(2001049112.112:31124): avc:  denied  { map_read map_write } for  pid=19794 comm="syz.1.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1221.430435][T19812] FAULT_INJECTION: forcing a failure.
[ 1221.430435][T19812] name failslab, interval 1, probability 0, space 0, times 0
[ 1221.454165][T19812] CPU: 1 PID: 19812 Comm: syz.3.5490 Not tainted syzkaller #0
[ 1221.461655][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1221.471701][T19812] Call Trace:
[ 1221.474970][T19812]  <TASK>
[ 1221.477897][T19812]  __dump_stack+0x21/0x24
[ 1221.482225][T19812]  dump_stack_lvl+0xee/0x150
[ 1221.486810][T19812]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1221.491827][T19812]  ? __stack_depot_save+0x36/0x480
[ 1221.496932][T19812]  dump_stack+0x15/0x24
[ 1221.501082][T19812]  should_fail_ex+0x3d4/0x520
[ 1221.505771][T19812]  __should_failslab+0xac/0xf0
[ 1221.510536][T19812]  ? p9_client_create+0xc4/0x1050
[ 1221.515558][T19812]  should_failslab+0x9/0x20
[ 1221.520049][T19812]  __kmem_cache_alloc_node+0x3d/0x2c0
[ 1221.525415][T19812]  ? p9_client_create+0xc4/0x1050
[ 1221.530428][T19812]  kmalloc_trace+0x29/0xb0
[ 1221.534844][T19812]  p9_client_create+0xc4/0x1050
[ 1221.539688][T19812]  ? __cfi_p9_client_create+0x10/0x10
[ 1221.545060][T19812]  ? kasan_save_alloc_info+0x25/0x30
[ 1221.550348][T19812]  ? __kasan_kmalloc+0x95/0xb0
[ 1221.555106][T19812]  ? v9fs_session_init+0xf7/0x16a0
[ 1221.560247][T19812]  ? memset+0x35/0x40
[ 1221.564249][T19812]  v9fs_session_init+0x1dd/0x16a0
[ 1221.569283][T19812]  ? __cfi_v9fs_session_init+0x10/0x10
[ 1221.574756][T19812]  ? kasan_save_alloc_info+0x25/0x30
[ 1221.580043][T19812]  ? __kasan_kmalloc+0x95/0xb0
[ 1221.584801][T19812]  ? v9fs_mount+0xaf/0xaa0
[ 1221.589211][T19812]  ? kmalloc_trace+0x40/0xb0
[ 1221.593800][T19812]  v9fs_mount+0xc5/0xaa0
[ 1221.598135][T19812]  ? __cfi_v9fs_mount+0x10/0x10
[ 1221.603010][T19812]  ? cap_capable+0x1aa/0x230
[ 1221.607594][T19812]  legacy_get_tree+0xfe/0x1a0
[ 1221.612265][T19812]  ? __cfi_v9fs_mount+0x10/0x10
[ 1221.617113][T19812]  vfs_get_tree+0x9a/0x270
[ 1221.621529][T19812]  do_new_mount+0x25a/0xa20
[ 1221.626029][T19812]  path_mount+0x675/0x1010
[ 1221.630442][T19812]  ? user_path_at_empty+0x161/0x1c0
[ 1221.635630][T19812]  __se_sys_mount+0x318/0x380
[ 1221.640305][T19812]  ? __x64_sys_mount+0xd0/0xd0
[ 1221.645072][T19812]  ? __cfi_ksys_write+0x10/0x10
[ 1221.649930][T19812]  __x64_sys_mount+0xbf/0xd0
[ 1221.654523][T19812]  x64_sys_call+0x65d/0x9a0
[ 1221.659027][T19812]  do_syscall_64+0x4c/0xa0
[ 1221.663471][T19812]  ? clear_bhb_loop+0x30/0x80
[ 1221.668152][T19812]  ? clear_bhb_loop+0x30/0x80
[ 1221.672825][T19812]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1221.678709][T19812] RIP: 0033:0x7fe1c8b8eec9
[ 1221.683112][T19812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1221.702711][T19812] RSP: 002b:00007fe1c99e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1221.711119][T19812] RAX: ffffffffffffffda RBX: 00007fe1c8de5fa0 RCX: 00007fe1c8b8eec9
[ 1221.719088][T19812] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000
[ 1221.727049][T19812] RBP: 00007fe1c99e5090 R08: 00002000000004c0 R09: 0000000000000000
[ 1221.735010][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1221.742970][T19812] R13: 00007fe1c8de6038 R14: 00007fe1c8de5fa0 R15: 00007ffcafa9a5f8
[ 1221.750937][T19812]  </TASK>
[ 1222.105867][T19837] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1222.268602][T12694] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[ 1222.286162][T12694] hid-generic 0000:0000:0000.0031: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1222.342516][T19840] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1223.342651][T19855] 9pnet: p9_errstr2errno: server reported unknown error �@cƒF	S+¼ÿÿÿÿÿÿÿÿ
[ 1223.541151][T19876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1223.548476][T19876] IPv6: NLM_F_CREATE should be set when creating new route
[ 1224.035928][T19882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1224.043298][T19882] IPv6: NLM_F_CREATE should be set when creating new route
[ 1225.297551][   T28] kauditd_printk_skb: 558 callbacks suppressed
[ 1225.297565][   T28] audit: type=1400 audit(2001049116.703:31671): avc:  denied  { map_create } for  pid=19912 comm="syz.0.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1225.331080][   T28] audit: type=1400 audit(2001049116.703:31672): avc:  denied  { bpf } for  pid=19912 comm="syz.0.5521" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1225.354061][   T28] audit: type=1400 audit(2001049116.703:31673): avc:  denied  { map_read map_write } for  pid=19912 comm="syz.0.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1225.374949][   T28] audit: type=1400 audit(2001049116.703:31674): avc:  denied  { prog_load } for  pid=19912 comm="syz.0.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1225.395764][   T28] audit: type=1400 audit(2001049116.703:31675): avc:  denied  { perfmon } for  pid=19912 comm="syz.0.5521" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1225.418513][   T28] audit: type=1400 audit(2001049116.703:31676): avc:  denied  { prog_run } for  pid=19912 comm="syz.0.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1225.438955][   T28] audit: type=1400 audit(2001049116.854:31677): avc:  denied  { read } for  pid=19921 comm="syz.3.5522" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1225.462686][   T28] audit: type=1400 audit(2001049116.854:31678): avc:  denied  { read open } for  pid=19921 comm="syz.3.5522" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1225.518939][   T28] audit: type=1400 audit(2001049116.886:31679): avc:  denied  { ioctl } for  pid=19921 comm="syz.3.5522" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1225.547063][   T28] audit: type=1400 audit(2001049116.940:31680): avc:  denied  { ioctl } for  pid=19921 comm="syz.3.5522" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1225.740775][T19932] bridge: RTM_NEWNEIGH with invalid ether address
[ 1226.259393][T19940] tipc: Started in network mode
[ 1226.264735][T19940] tipc: Node identity 4, cluster identity 4711
[ 1226.270975][T19940] tipc: Node number set to 4
[ 1227.704836][  T565] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1227.945595][  T565] usb 4-1: Using ep0 maxpacket: 32
[ 1227.952361][  T565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1227.980437][T19975] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1228.058929][  T565] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1228.202506][  T565] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1228.231462][T19974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5538'.
[ 1228.240601][T19974] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5538'.
[ 1228.251697][  T565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1228.264962][  T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.286281][  T565] usb 4-1: Product: syz
[ 1228.294613][  T565] usb 4-1: Manufacturer: syz
[ 1228.305459][  T565] usb 4-1: SerialNumber: syz
[ 1228.342597][  T565] cdc_ncm 4-1:1.0: skipping garbage
[ 1228.363378][  T565] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 1228.380479][  T565] cdc_ncm 4-1:1.0: bind() failure
[ 1228.402248][T19983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5539'.
[ 1229.421979][T20000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5544'.
[ 1229.698758][T12694] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1229.709361][  T339] usb 4-1: USB disconnect, device number 48
[ 1229.938344][   T28] kauditd_printk_skb: 314 callbacks suppressed
[ 1229.938360][   T28] audit: type=1400 audit(2001049121.713:31995): avc:  denied  { ioctl } for  pid=20001 comm="syz.1.5545" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1230.330518][   T28] audit: type=1400 audit(2001049121.842:31996): avc:  denied  { bpf } for  pid=20007 comm="syz.3.5547" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1230.330667][T12694] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1230.366851][   T28] audit: type=1400 audit(2001049121.853:31997): avc:  denied  { map_create } for  pid=20007 comm="syz.3.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1230.440697][   T28] audit: type=1400 audit(2001049121.864:31998): avc:  denied  { map_read map_write } for  pid=20007 comm="syz.3.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1230.471071][T12694] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1230.482222][T12694] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[ 1230.492484][   T28] audit: type=1400 audit(2001049122.134:31999): avc:  denied  { bpf } for  pid=20007 comm="syz.3.5547" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1230.513780][T12694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1230.534611][T12694] usb 2-1: config 0 descriptor??
[ 1230.553949][   T28] audit: type=1400 audit(2001049122.134:32000): avc:  denied  { prog_load } for  pid=20007 comm="syz.3.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1230.662924][   T28] audit: type=1400 audit(2001049122.134:32001): avc:  denied  { perfmon } for  pid=20007 comm="syz.3.5547" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1230.736654][   T28] audit: type=1400 audit(2001049122.134:32002): avc:  denied  { ioctl } for  pid=20001 comm="syz.1.5545" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1230.773410][T12489] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1230.787990][T12489] audit: audit_lost=499 audit_rate_limit=0 audit_backlog_limit=64
[ 1231.018682][T12694] usbhid 2-1:0.0: can't add hid device: -71
[ 1231.025200][T12694] usbhid: probe of 2-1:0.0 failed with error -71
[ 1231.055750][T12694] usb 2-1: USB disconnect, device number 77
[ 1231.216096][  T339] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1231.392146][  T339] usb 4-1: Using ep0 maxpacket: 32
[ 1231.402070][  T339] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1231.410161][  T339] usb 4-1: config 0 has no interface number 0
[ 1231.419100][  T339] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1231.429394][  T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.437519][  T339] usb 4-1: Product: syz
[ 1231.442257][  T339] usb 4-1: Manufacturer: syz
[ 1231.446880][  T339] usb 4-1: SerialNumber: syz
[ 1231.461625][  T339] usb 4-1: config 0 descriptor??
[ 1231.473942][  T339] smsc95xx v2.0.0
[ 1231.516672][T20033] overlayfs: failed to clone upperpath
[ 1231.549092][T20033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1231.857825][  T339] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1231.869070][  T339] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1232.297051][  T339] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1232.349990][  T339] smsc95xx: probe of 4-1:0.67 failed with error -32
[ 1232.420055][  T565] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1232.633217][  T565] usb 2-1: Using ep0 maxpacket: 16
[ 1232.641778][  T565] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1232.661041][  T565] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[ 1232.685790][  T565] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.697003][  T565] usb 2-1: config 13 has no interface number 0
[ 1232.703611][  T565] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[ 1232.730219][  T565] usb 2-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1232.741319][  T565] usb 2-1: config 13 interface 50 has no altsetting 0
[ 1232.750621][  T565] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1232.763185][  T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.772866][  T565] usb 2-1: Product: syz
[ 1232.777040][  T565] usb 2-1: Manufacturer: syz
[ 1232.789121][  T565] usb 2-1: SerialNumber: syz
[ 1232.844208][T20040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1233.197153][T20063] overlayfs: failed to clone upperpath
[ 1233.242322][T20063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1233.249621][T20063] IPv6: NLM_F_CREATE should be set when creating new route
[ 1233.365563][T12590] tipc: Left network mode
[ 1233.678985][ T2917] usb 4-1: USB disconnect, device number 49
[ 1233.697490][T20068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1233.720866][T20068] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.736500][T20068] device bridge_slave_0 entered promiscuous mode
[ 1233.747855][T20068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1233.754893][T20068] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.763630][T20068] device bridge_slave_1 entered promiscuous mode
[ 1233.830965][T12590] device veth0_vlan left promiscuous mode
[ 1234.113547][T20087] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1234.393057][  T565] usb 2-1: MIDIStreaming interface descriptor not found
[ 1234.429660][  T565] usb 2-1: USB disconnect, device number 78
[ 1234.476387][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1234.485243][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1234.495528][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1234.504069][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1234.512313][T12590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1234.519408][T12590] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1234.527130][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1234.542007][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1234.551081][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1234.559398][T12590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.566453][T12590] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1234.585152][   T28] kauditd_printk_skb: 2620 callbacks suppressed
[ 1234.585164][   T28] audit: type=1400 audit(2001049126.720:34517): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.621106][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1234.629108][   T28] audit: type=1400 audit(2001049126.720:34518): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.638496][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1234.660858][   T28] audit: type=1400 audit(2001049126.720:34519): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.687286][   T28] audit: type=1400 audit(2001049126.720:34520): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.698981][T19773] udevd[19773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1234.711631][   T28] audit: type=1400 audit(2001049126.720:34521): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.746922][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1234.808223][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1234.830322][T12489] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1234.840358][   T28] audit: type=1400 audit(2001049126.720:34522): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.863736][   T28] audit: type=1400 audit(2001049126.720:34523): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.878088][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1234.887706][   T28] audit: type=1400 audit(2001049126.720:34524): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1234.904452][T12489] audit: audit_lost=535 audit_rate_limit=0 audit_backlog_limit=64
[ 1234.929226][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1234.945253][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1235.107826][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1235.245178][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1235.263088][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1235.282207][T20068] device veth0_vlan entered promiscuous mode
[ 1235.310262][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1235.329236][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1235.351177][T20068] device veth1_macvtap entered promiscuous mode
[ 1235.371647][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1235.381614][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1235.537329][ T3119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1235.550438][ T3119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1235.618682][T20117] netlink: 'syz.1.5579': attribute type 16 has an invalid length.
[ 1235.626499][T20117] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5579'.
[ 1236.662886][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5567'.
[ 1237.738035][T20140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5583'.
[ 1238.111209][ T2917] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[ 1238.566627][ T2917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1238.593457][ T2917] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[ 1238.612103][ T2917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.643033][ T2917] usb 5-1: config 0 descriptor??
[ 1238.982461][  T565] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1239.167776][  T565] usb 4-1: Using ep0 maxpacket: 32
[ 1239.176325][  T565] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1239.489078][   T28] kauditd_printk_skb: 1286 callbacks suppressed
[ 1239.489096][   T28] audit: type=1400 audit(2001049131.715:35810): avc:  denied  { bpf } for  pid=20171 comm="syz.1.5597" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1239.516103][  T565] usb 4-1: config 0 has no interface number 0
[ 1239.522555][   T28] audit: type=1400 audit(2001049131.715:35811): avc:  denied  { map_create } for  pid=20171 comm="syz.1.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1239.542602][   T28] audit: type=1400 audit(2001049131.715:35812): avc:  denied  { perfmon } for  pid=20171 comm="syz.1.5597" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1239.564912][  T565] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1239.581157][  T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.584924][   T28] audit: type=1400 audit(2001049131.715:35813): avc:  denied  { map_read map_write } for  pid=20171 comm="syz.1.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1239.608668][  T565] usb 4-1: Product: syz
[ 1239.612092][   T28] audit: type=1400 audit(2001049131.737:35814): avc:  denied  { prog_load } for  pid=20171 comm="syz.1.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1239.626674][  T565] usb 4-1: Manufacturer: syz
[ 1239.637508][   T28] audit: type=1400 audit(2001049131.737:35815): avc:  denied  { prog_run } for  pid=20171 comm="syz.1.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1239.658025][T20179] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1239.660571][T20180] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1239.664771][  T565] usb 4-1: SerialNumber: syz
[ 1239.671171][T20180] audit: audit_lost=536 audit_rate_limit=0 audit_backlog_limit=64
[ 1239.676329][T20178] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1239.713378][  T565] usb 4-1: config 0 descriptor??
[ 1239.747760][  T565] smsc95xx v2.0.0
[ 1239.893222][ T2917] wacom 0003:056A:00C6.0032: ignoring exceeding usage max
[ 1239.941089][ T2917] wacom 0003:056A:00C6.0032: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0
[ 1240.253228][ T2917] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1240.429331][ T2917] usb 2-1: Using ep0 maxpacket: 32
[ 1240.436971][ T2917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1240.465839][ T2917] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1240.484281][ T2917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.493788][  T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[ 1240.513688][ T2917] usb 2-1: config 0 descriptor??
[ 1240.516364][  T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1240.911388][  T565] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1240.931639][  T565] smsc95xx: probe of 4-1:0.67 failed with error -71
[ 1240.941430][ T2917] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1240.948133][ T2917] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1240.949638][  T565] usb 4-1: USB disconnect, device number 50
[ 1240.973037][ T2917] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1240.994373][ T2917] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1241.002915][ T2917] kye 0003:0458:5013.0033: hidraw1: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[ 1241.032014][ T2917] kye 0003:0458:5013.0033: tablet-enabling feature report not found
[ 1241.040002][ T2917] kye 0003:0458:5013.0033: tablet enabling failed
[ 1241.133316][T12694] usb 2-1: USB disconnect, device number 79
[ 1241.161757][T20193] fido_id[20193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1241.569760][  T565] usb 5-1: USB disconnect, device number 5
[ 1241.731907][T20203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1241.739187][T20203] IPv6: NLM_F_CREATE should be set when creating new route
[ 1241.754722][T12694] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1242.005748][T12694] usb 4-1: Using ep0 maxpacket: 32
[ 1242.015786][T12694] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1242.032932][T12694] usb 4-1: config 0 has no interface number 0
[ 1242.191911][T12694] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1242.201299][T12694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.209317][T12694] usb 4-1: Product: syz
[ 1242.213712][T12694] usb 4-1: Manufacturer: syz
[ 1242.218336][T12694] usb 4-1: SerialNumber: syz
[ 1242.307351][T12694] usb 4-1: config 0 descriptor??
[ 1242.319688][T12694] smsc95xx v2.0.0
[ 1242.697888][T20221] netlink: 'syz.0.5610': attribute type 15 has an invalid length.
[ 1242.705752][T20221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5610'.
[ 1243.295776][T12694] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1243.395591][T12694] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1243.491174][T20230] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1243.594122][T12694] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1243.615515][T12694] smsc95xx: probe of 4-1:0.67 failed with error -32
[ 1244.291891][   T28] kauditd_printk_skb: 2897 callbacks suppressed
[ 1244.306182][   T28] audit: type=1400 audit(2001049136.697:38699): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1244.458934][   T28] audit: type=1400 audit(2001049136.697:38700): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1244.480388][T12489] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1244.495023][T12489] audit: audit_lost=542 audit_rate_limit=0 audit_backlog_limit=64
[ 1244.528386][T12489] audit: backlog limit exceeded
[ 1244.533825][T12489] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1244.550475][T12489] audit: audit_lost=543 audit_rate_limit=0 audit_backlog_limit=64
[ 1244.562161][   T28] audit: type=1400 audit(2001049136.697:38701): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1244.575576][T12694] usb 4-1: USB disconnect, device number 51
[ 1244.587523][   T28] audit: type=1400 audit(2001049136.708:38702): avc:  denied  { setattr } for  pid=12489 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1244.614747][T12489] audit: backlog limit exceeded
[ 1245.215604][T20259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.222724][T20259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.230734][T20259] device bridge_slave_0 entered promiscuous mode
[ 1245.239169][T20259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.246756][T20259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.254861][T20259] device bridge_slave_1 entered promiscuous mode
[ 1245.345857][T20259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.352912][T20259] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1245.360188][T20259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.367226][T20259] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1245.434180][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1245.443827][T12590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.444492][T20275] overlayfs: failed to clone upperpath
[ 1245.559856][T12590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.603669][T20277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1245.610932][T20277] IPv6: NLM_F_CREATE should be set when creating new route
[ 1245.623704][ T3119] tipc: Disabling bearer <udp:s>
[ 1245.630922][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1245.632444][ T3119] tipc: Left network mode
[ 1245.643604][T12590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.650699][T12590] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1245.874364][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1245.898322][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1245.916240][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.923325][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1245.957385][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1245.974985][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1245.983185][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1245.991302][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1246.018651][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1246.027661][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1246.341109][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1246.349147][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1246.360985][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1246.401998][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1246.421561][T20259] device veth0_vlan entered promiscuous mode
[ 1246.440717][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1246.449225][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1247.278320][T20259] device veth1_macvtap entered promiscuous mode
[ 1247.319150][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1247.331823][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1247.361012][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1247.371786][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1247.489979][ T3119] device veth0_vlan left promiscuous mode
[ 1247.721164][T20322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1247.728407][T20322] IPv6: NLM_F_CREATE should be set when creating new route
[ 1248.034321][T12694] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[ 1248.240190][T12694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1248.266661][T12694] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[ 1248.523510][T12694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1248.801610][T12694] usb 3-1: config 0 descriptor??
[ 1248.988251][   T28] kauditd_printk_skb: 379 callbacks suppressed
[ 1248.988266][   T28] audit: type=1400 audit(2001049142.195:39061): avc:  denied  { execmem } for  pid=20341 comm="syz.0.5644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1249.044993][   T28] audit: type=1400 audit(2001049142.270:39062): avc:  denied  { bpf } for  pid=20343 comm="syz.3.5645" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1249.389762][T20350] overlayfs: failed to resolve './file0': -2
[ 1249.769313][   T28] audit: type=1400 audit(2001049142.270:39063): avc:  denied  { prog_load } for  pid=20343 comm="syz.3.5645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1249.838990][   T28] audit: type=1400 audit(2001049142.270:39064): avc:  denied  { perfmon } for  pid=20343 comm="syz.3.5645" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1250.191440][T20357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1250.196802][   T28] audit: type=1400 audit(2001049142.303:39065): avc:  denied  { bpf } for  pid=20345 comm="syz.3.5646" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1250.198695][T20357] IPv6: NLM_F_CREATE should be set when creating new route
[ 1250.237496][   T28] audit: type=1400 audit(2001049142.303:39066): avc:  denied  { prog_load } for  pid=20345 comm="syz.3.5646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1250.259109][T20361] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1250.266001][T20334] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1250.272553][T20334] audit: audit_lost=551 audit_rate_limit=0 audit_backlog_limit=64
[ 1250.280390][T20334] audit: backlog limit exceeded
[ 1250.348452][  T339] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1250.667120][  T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1250.677184][  T339] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[ 1250.686764][  T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1250.698867][  T339] usb 4-1: config 0 descriptor??
[ 1251.067608][T20383] overlayfs: unrecognized mount option "nfs_export=off:/" or missing value
[ 1251.302316][T12694] usbhid 3-1:0.0: can't add hid device: -71
[ 1251.326485][T12694] usbhid: probe of 3-1:0.0 failed with error -71
[ 1251.345949][T12694] usb 3-1: USB disconnect, device number 10
[ 1251.710523][  T339] wacom 0003:056A:00C6.0034: ignoring exceeding usage max
[ 1251.796407][  T339] wacom 0003:056A:00C6.0034: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.3-1/input0
[ 1252.079969][T12694] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1252.180311][T20408] device syzkaller0 entered promiscuous mode
[ 1252.187257][T20408] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[ 1252.256118][T20414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.263289][T20414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.273865][T20414] device bridge_slave_1 left promiscuous mode
[ 1252.280573][T20414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.289993][T20414] device bridge_slave_0 left promiscuous mode
[ 1252.297321][T12694] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1252.302869][T20414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.308409][T12694] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1252.328643][T12694] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1252.338185][T12694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.360241][T12694] usb 2-1: config 0 descriptor??
[ 1252.373941][T12694] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1253.028122][T18288] usb 4-1: USB disconnect, device number 52
[ 1254.187243][T18288] usb 2-1: USB disconnect, device number 80
[ 1254.201351][   T28] kauditd_printk_skb: 369 callbacks suppressed
[ 1254.201363][   T28] audit: type=1400 audit(2001049147.874:39413): avc:  denied  { bpf } for  pid=20455 comm="syz.2.5688" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1254.235431][   T28] audit: type=1400 audit(2001049147.874:39414): avc:  denied  { bpf } for  pid=20455 comm="syz.2.5688" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1254.716500][   T28] audit: type=1400 audit(2001049147.874:39415): avc:  denied  { map_create } for  pid=20455 comm="syz.2.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1255.022674][   T28] audit: type=1400 audit(2001049147.874:39416): avc:  denied  { map_read map_write } for  pid=20455 comm="syz.2.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1255.319712][   T28] audit: type=1400 audit(2001049147.874:39417): avc:  denied  { bpf } for  pid=20455 comm="syz.2.5688" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1255.580556][   T28] audit: type=1400 audit(2001049147.874:39418): avc:  denied  { prog_load } for  pid=20455 comm="syz.2.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1255.802396][   T28] audit: type=1400 audit(2001049147.874:39419): avc:  denied  { perfmon } for  pid=20455 comm="syz.2.5688" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1256.034446][   T28] audit: type=1400 audit(2001049147.874:39420): avc:  denied  { prog_run } for  pid=20455 comm="syz.2.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1256.229378][   T28] audit: type=1400 audit(2001049147.917:39421): avc:  denied  { bpf } for  pid=20454 comm="syz.4.5686" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1256.461447][   T28] audit: type=1400 audit(2001049147.917:39422): avc:  denied  { map_create } for  pid=20454 comm="syz.4.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1256.636303][T20465] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[ 1257.043965][T20505] device syzkaller1 entered promiscuous mode
[ 1257.109263][T20507] incfs: iterate_incfs_dir / -2
[ 1257.122849][T20259] ------------[ cut here ]------------
[ 1257.128438][T20259] WARNING: CPU: 0 PID: 20259 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0
[ 1257.137984][T20259] Modules linked in:
[ 1257.142005][T20259] CPU: 0 PID: 20259 Comm: syz-executor Not tainted syzkaller #0
[ 1257.149732][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1257.159886][T20259] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[ 1257.165550][T20259] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 26 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 bc 60 ff <0f> 0b e9 17 ff ff ff e8 8b bc 60 ff 0f 0b e9 51 ff ff ff 44 89 e1
[ 1257.185294][T20259] RSP: 0018:ffffc90001eefb20 EFLAGS: 00010293
[ 1257.191374][T20259] RAX: ffffffff820f6169 RBX: 1ffff110221e3428 RCX: ffff8881121fbcc0
[ 1257.199435][T20259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1257.207478][T20259] RBP: ffffc90001eefb50 R08: dffffc0000000000 R09: ffffed10223c4978
[ 1257.215541][T20259] R10: ffffed10223c4978 R11: 1ffff110223c4977 R12: ffff888110f1a110
[ 1257.223588][T20259] R13: 0000000000000000 R14: ffff888111e24b18 R15: ffff888110f1a140
[ 1257.231555][T20259] FS:  000055556848e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1257.240530][T20259] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1257.247118][T20259] CR2: 00005555684a94a8 CR3: 0000000123b29000 CR4: 00000000003526b0
[ 1257.255107][T20259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1257.263110][T20259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1257.271090][T20259] Call Trace:
[ 1257.274371][T20259]  <TASK>
[ 1257.277299][T20259]  ovl_do_remove+0x79e/0xba0
[ 1257.281903][T20259]  ? ovl_set_redirect+0x6c0/0x6c0
[ 1257.286936][T20259]  ? selinux_inode_rmdir+0x22/0x30
[ 1257.292083][T20259]  ovl_rmdir+0x1a/0x20
[ 1257.296166][T20259]  vfs_rmdir+0x393/0x500
[ 1257.300441][T20259]  incfs_kill_sb+0x105/0x220
[ 1257.305036][T20259]  deactivate_locked_super+0xb5/0x120
[ 1257.310469][T20259]  deactivate_super+0xaf/0xe0
[ 1257.315180][T20259]  cleanup_mnt+0x45f/0x4e0
[ 1257.319610][T20259]  __cleanup_mnt+0x19/0x20
[ 1257.324024][T20259]  task_work_run+0x1db/0x240
[ 1257.328642][T20259]  ? __cfi_task_work_run+0x10/0x10
[ 1257.333791][T20259]  ? __x64_sys_umount+0x125/0x160
[ 1257.338845][T20259]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1257.344240][T20259]  exit_to_user_mode_loop+0x9b/0xb0
[ 1257.349462][T20259]  exit_to_user_mode_prepare+0x5a/0xa0
[ 1257.354951][T20259]  syscall_exit_to_user_mode+0x1a/0x30
[ 1257.360459][T20259]  do_syscall_64+0x58/0xa0
[ 1257.364904][T20259]  ? clear_bhb_loop+0x30/0x80
[ 1257.369593][T20259]  ? clear_bhb_loop+0x30/0x80
[ 1257.374314][T20259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1257.380429][T20259] RIP: 0033:0x7f93d59901f7
[ 1257.384861][T20259] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1257.404729][T20259] RSP: 002b:00007fff1e4d6d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1257.413302][T20259] RAX: 0000000000000000 RBX: 00007f93d5a11d7d RCX: 00007f93d59901f7
[ 1257.421306][T20259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1e4d6e20
[ 1257.429310][T20259] RBP: 00007fff1e4d6e20 R08: 0000000000000000 R09: 0000000000000000
[ 1257.437289][T20259] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1e4d7eb0
[ 1257.445260][T20259] R13: 00007f93d5a11d7d R14: 000000000013c769 R15: 00007fff1e4d7ef0
[ 1257.453258][T20259]  </TASK>
[ 1257.456329][T20259] ---[ end trace 0000000000000000 ]---
[ 1257.470202][T20259] ------------[ cut here ]------------
[ 1257.475787][T20259] WARNING: CPU: 1 PID: 20259 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0
[ 1257.485374][T20259] Modules linked in:
[ 1257.489265][T20259] CPU: 1 PID: 20259 Comm: syz-executor Tainted: G        W          syzkaller #0
[ 1257.498455][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1257.508580][T20259] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[ 1257.514282][T20259] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e 26 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 bc 60 ff <0f> 0b e9 17 ff ff ff e8 8b bc 60 ff 0f 0b e9 51 ff ff ff 44 89 e1
[ 1257.519153][  T340] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1257.533917][T20259] RSP: 0018:ffffc90001eefb20 EFLAGS: 00010293
[ 1257.533940][T20259] RAX: ffffffff820f6169 RBX: 1ffff110221e3428 RCX: ffff8881121fbcc0
[ 1257.555502][T20259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1257.563513][T20259] RBP: ffffc90001eefb50 R08: dffffc0000000000 R09: ffffed10223c4978
[ 1257.571527][T20259] R10: ffffed10223c4978 R11: 1ffff110223c4977 R12: ffff888110f1a110
[ 1257.579529][T20259] R13: 0000000000000000 R14: ffff888111e24b18 R15: ffff888110f1a140
[ 1257.587518][T20259] FS:  000055556848e500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 1257.596488][T20259] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1257.603132][T20259] CR2: 00007ffee8346d88 CR3: 0000000123b29000 CR4: 00000000003526a0
[ 1257.611112][T20259] Call Trace:
[ 1257.614408][T20259]  <TASK>
[ 1257.617347][T20259]  ovl_do_remove+0x79e/0xba0
[ 1257.621956][T20259]  ? ovl_set_redirect+0x6c0/0x6c0
[ 1257.626993][T20259]  ? selinux_inode_rmdir+0x22/0x30
[ 1257.632117][T20259]  ovl_rmdir+0x1a/0x20
[ 1257.636208][T20259]  vfs_rmdir+0x393/0x500
[ 1257.640469][T20259]  incfs_kill_sb+0x198/0x220
[ 1257.645074][T20259]  deactivate_locked_super+0xb5/0x120
[ 1257.650466][T20259]  deactivate_super+0xaf/0xe0
[ 1257.655152][T20259]  cleanup_mnt+0x45f/0x4e0
[ 1257.659580][T20259]  __cleanup_mnt+0x19/0x20
[ 1257.664011][T20259]  task_work_run+0x1db/0x240
[ 1257.668629][T20259]  ? __cfi_task_work_run+0x10/0x10
[ 1257.673752][T20259]  ? __x64_sys_umount+0x125/0x160
[ 1257.678807][T20259]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1257.684202][T20259]  exit_to_user_mode_loop+0x9b/0xb0
[ 1257.689426][T20259]  exit_to_user_mode_prepare+0x5a/0xa0
[ 1257.694902][T20259]  syscall_exit_to_user_mode+0x1a/0x30
[ 1257.700387][T20259]  do_syscall_64+0x58/0xa0
[ 1257.704807][T20259]  ? clear_bhb_loop+0x30/0x80
[ 1257.706820][  T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1257.709511][T20259]  ? clear_bhb_loop+0x30/0x80
[ 1257.721082][  T340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1257.725016][T20259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1257.735168][  T340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1257.740633][T20259] RIP: 0033:0x7f93d59901f7
[ 1257.754064][  T340] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1257.757921][T20259] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1257.767408][  T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.786576][T20259] RSP: 002b:00007fff1e4d6d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1257.802994][T20259] RAX: 0000000000000000 RBX: 00007f93d5a11d7d RCX: 00007f93d59901f7
[ 1257.810981][T20259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1e4d6e20
[ 1257.819009][T20259] RBP: 00007fff1e4d6e20 R08: 0000000000000000 R09: 0000000000000000
[ 1257.821475][  T340] usb 4-1: config 0 descriptor??
[ 1257.827008][T20259] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1e4d7eb0
[ 1257.827026][T20259] R13: 00007f93d5a11d7d R14: 000000000013c769 R15: 00007fff1e4d7ef0
[ 1257.847935][T20259]  </TASK>
[ 1257.850955][T20259] ---[ end trace 0000000000000000 ]---
[ 1258.122508][T18288] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1258.201520][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5717'.
[ 1258.207508][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.218223][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.226232][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.238594][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.246233][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.253868][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.261332][  T340] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1258.269225][  T340] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving
[ 1258.278861][  T340] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1258.300189][T18288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1258.324557][T18288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1258.335497][T18288] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1258.344670][T18288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.355241][T18288] usb 3-1: config 0 descriptor??
[ 1258.476900][T12694] usb 4-1: USB disconnect, device number 53
[ 1258.711814][T20546] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1258.736190][T18288] cp2112 0003:10C4:EA90.0036: collection stack underflow
[ 1258.743241][T18288] cp2112 0003:10C4:EA90.0036: item 0 0 0 12 parsing failed
[ 1258.750614][T18288] cp2112 0003:10C4:EA90.0036: parse failed
[ 1258.756481][T18288] cp2112: probe of 0003:10C4:EA90.0036 failed with error -22
[ 1258.922552][ T2917] usb 3-1: USB disconnect, device number 11
[ 1258.997708][   T28] kauditd_printk_skb: 201 callbacks suppressed
[ 1258.997740][   T28] audit: type=1400 audit(2001049153.045:39624): avc:  denied  { create } for  pid=20553 comm="syz.3.5726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1259.024741][   T28] audit: type=1400 audit(2001049153.077:39625): avc:  denied  { name_bind } for  pid=20553 comm="syz.3.5726" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1259.046913][   T28] audit: type=1400 audit(2001049153.077:39626): avc:  denied  { node_bind } for  pid=20553 comm="syz.3.5726" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1259.081591][   T28] audit: type=1400 audit(2001049153.131:39627): avc:  denied  { read write } for  pid=20555 comm="syz.3.5727" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.105310][   T28] audit: type=1400 audit(2001049153.131:39628): avc:  denied  { open } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.129149][   T28] audit: type=1400 audit(2001049153.131:39629): avc:  denied  { ioctl } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.154284][   T28] audit: type=1400 audit(2001049153.131:39630): avc:  denied  { ioctl } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.179834][   T28] audit: type=1400 audit(2001049153.131:39631): avc:  denied  { ioctl } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.338948][  T339] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1259.347028][   T28] audit: type=1400 audit(2001049153.411:39632): avc:  denied  { ioctl } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.372113][   T28] audit: type=1400 audit(2001049153.411:39633): avc:  denied  { ioctl } for  pid=20555 comm="syz.3.5727" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1259.507024][  T339] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1259.515050][  T339] usb 4-1: config 0 has no interface number 0
[ 1259.521160][  T339] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1259.532041][  T339] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1259.541818][  T339] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1259.550941][  T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.580735][  T339] usb 4-1: config 0 descriptor??
[ 1259.594625][T20565] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1259.601924][T20565] overlayfs: failed to set xattr on upper
[ 1259.607678][T20565] overlayfs: ...falling back to xino=off.
[ 1259.652552][T20567] device syzkaller0 entered promiscuous mode
[ 1259.808789][T20579] tipc: Started in network mode
[ 1259.816769][T20579] tipc: Node identity 6205e9bf07b7, cluster identity 4711
[ 1259.824359][ T2917] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1259.832021][T20579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1259.839359][T20578] tipc: Resetting bearer <eth:syzkaller0>
[ 1259.851321][T20578] tipc: Disabling bearer <eth:syzkaller0>
[ 1259.968031][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1259.975365][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1259.982589][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1259.989859][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1259.997049][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1259.998229][ T2917] usb 2-1: Using ep0 maxpacket: 32
[ 1260.004285][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1260.004684][  T339] prodikeys 0003:041E:2801.0037: unknown main item tag 0x0
[ 1260.011662][ T2917] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 1260.032340][  T339] prodikeys 0003:041E:2801.0037: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[ 1260.033161][ T2917] usb 2-1: config 0 has no interface number 0
[ 1260.044511][  T339] hid_prodikeys: hid-prodikeys: failed to find output report
[ 1260.044511][  T339] 
[ 1260.050141][T18288] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1260.067296][ T2917] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1260.077643][ T2917] usb 2-1: config 0 interface 196 has no altsetting 0
[ 1260.086399][ T2917] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1260.096614][ T2917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.104692][ T2917] usb 2-1: Product: syz
[ 1260.109004][ T2917] usb 2-1: Manufacturer: syz
[ 1260.113683][ T2917] usb 2-1: SerialNumber: syz
[ 1260.120833][ T2917] usb 2-1: config 0 descriptor??
[ 1260.126225][T20563] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1260.164634][ T1653] usb 4-1: USB disconnect, device number 54
[ 1260.220766][  T340] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[ 1260.249678][T18288] usb 3-1: config index 0 descriptor too short (expected 19492, got 36)
[ 1260.258151][T18288] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[ 1260.266784][T18288] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36
[ 1260.275833][T18288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1260.286856][T18288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1260.296763][T18288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1260.309634][T18288] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[ 1260.318692][T18288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.328087][T18288] usb 3-1: config 0 descriptor??
[ 1260.389373][  T340] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1260.398122][  T340] usb 5-1: config 127 has an invalid interface number: 106 but max is 0
[ 1260.406499][  T340] usb 5-1: config 127 has no interface number 0
[ 1260.412764][  T340] usb 5-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[ 1260.422815][  T340] usb 5-1: config 127 interface 106 has no altsetting 0
[ 1260.431651][  T340] usb 5-1: string descriptor 0 read error: -22
[ 1260.437882][  T340] usb 5-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8
[ 1260.446964][  T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.459552][  T340] ftdi_sio 5-1:127.106: FTDI USB Serial Device converter detected
[ 1260.467684][  T340] usb 5-1: Detected SIO
[ 1260.471873][  T340] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15
[ 1260.480616][  T340] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1260.646491][T12694] usb 5-1: USB disconnect, device number 6
[ 1260.670027][T12694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1260.686435][T12694] ftdi_sio 5-1:127.106: device disconnected
[ 1260.711020][T18288] lg-g15 0003:046D:C225.0038: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0
[ 1260.858644][ T2917] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[ 1260.993958][T20608] overlayfs: upper fs does not support tmpfile.
[ 1261.270647][T18288] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1261.289864][    C0] ipheth 2-1:0.196: ipheth_rcvbulk_callback: urb status: -75
[ 1261.409308][T12694] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1261.446486][T18288] usb 4-1: Using ep0 maxpacket: 8
[ 1261.452979][T18288] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1261.461931][T18288] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[ 1261.471015][T18288] usb 4-1: config 3 has an invalid descriptor of length 120, skipping remainder of the config
[ 1261.479738][   T24] usb 2-1: USB disconnect, device number 81
[ 1261.484109][T18288] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 2
[ 1261.509381][T18288] usb 4-1: language id specifier not provided by device, defaulting to English
[ 1261.531668][T18288] usb 4-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=2e.ef
[ 1261.541031][   T24] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1261.545587][T18288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.560630][T18288] usb 4-1: Product: syz
[ 1261.564899][T18288] usb 4-1: SerialNumber: syz
[ 1261.585805][T12694] usb 5-1: Using ep0 maxpacket: 32
[ 1261.593557][T12694] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1261.602379][T12694] usb 5-1: config 0 has no interface number 0
[ 1261.611301][T12694] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1261.620797][T12694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.629287][T12694] usb 5-1: Product: syz
[ 1261.633964][T12694] usb 5-1: Manufacturer: syz
[ 1261.638606][T12694] usb 5-1: SerialNumber: syz
[ 1261.646424][T12694] usb 5-1: config 0 descriptor??
[ 1261.654198][T12694] smsc95xx v2.0.0
[ 1261.770626][T18288] usb 4-1: USB disconnect, device number 55
[ 1262.056265][T12694] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1262.067661][T12694] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1262.097402][T20651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.114411][T20651] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1262.121949][T20651] device bridge_slave_0 entered promiscuous mode
[ 1262.139546][T20651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.146821][T20651] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1262.157135][T20651] device bridge_slave_1 entered promiscuous mode
[ 1262.262779][T20651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.269891][T20651] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1262.277187][T20651] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.284234][T20651] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1262.352763][T20674] block device autoloading is deprecated and will be removed.
[ 1262.370377][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1262.383863][T12614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1262.392979][T20674] loop6: detected capacity change from 0 to 9
[ 1262.399710][T12614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1262.439607][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1262.448374][T12614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1262.455430][T12614] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1262.486387][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1262.495187][T12614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1262.502250][T12614] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1262.561433][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1262.569451][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1262.578857][  T565] usb 3-1: USB disconnect, device number 12
[ 1262.594122][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1262.609918][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1262.636011][T20679] ------------[ cut here ]------------
[ 1262.641480][T20679] WARNING: CPU: 0 PID: 20679 at arch/x86/kvm/x86.c:11219 kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0
[ 1262.651899][T20679] Modules linked in:
[ 1262.655843][T20679] CPU: 0 PID: 20679 Comm: syz.1.5765 Tainted: G        W          syzkaller #0
[ 1262.664816][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1262.674914][T20679] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0
[ 1262.675386][T20651] device veth0_vlan entered promiscuous mode
[ 1262.681375][T20679] Code: e8 09 7a a4 00 e9 a4 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ef e8 ff ff 4c 89 ff e8 8e 79 a4 00 e9 e2 e8 ff ff e8 b4 10 60 00 <0f> 0b e9 93 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 ef
[ 1262.681395][T20679] RSP: 0018:ffffc90000a37bf8 EFLAGS: 00010283
[ 1262.701192][T20651] device veth1_macvtap entered promiscuous mode
[ 1262.707020][T20679] RAX: ffffffff81100d4c RBX: ffff88813e088000 RCX: 0000000000080000
[ 1262.727323][T20679] RDX: ffffc900026a4000 RSI: 000000000000003f RDI: 0000000000000040
[ 1262.735395][T20679] RBP: ffffc90000a37cb0 R08: dffffc0000000000 R09: ffffed1025830a21
[ 1262.743553][T20679] R10: ffffed1025830a21 R11: 1ffff11025830a20 R12: ffff8881232e4000
[ 1262.751591][T20679] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88813e088078
[ 1262.759600][T20679] FS:  00007f1a849c86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1262.768547][T20679] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1262.775158][T20679] CR2: 0000200000002460 CR3: 000000010dc07000 CR4: 00000000003526b0
[ 1262.783138][T20679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1262.783565][   T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1262.791144][T20679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1262.806668][T20679] Call Trace:
[ 1262.809954][T20679]  <TASK>
[ 1262.812918][T20679]  ? mutex_lock_killable+0x8d/0x1a0
[ 1262.818147][T20679]  ? __cfi_mutex_lock_killable+0x10/0x10
[ 1262.823826][T20679]  kvm_vcpu_ioctl+0x882/0xb70
[ 1262.828534][T20679]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[ 1262.833762][T20679]  ? selinux_file_ioctl+0x377/0x480
[ 1262.838989][T20679]  ? __cfi_do_futex+0x10/0x10
[ 1262.843716][T20679]  ? __cfi_selinux_file_ioctl+0x10/0x10
[ 1262.849325][T20679]  ? __fget_files+0x2d5/0x330
[ 1262.854021][T20679]  ? security_file_ioctl+0x95/0xc0
[ 1262.859164][T20679]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[ 1262.864389][T20679]  __se_sys_ioctl+0x12f/0x1b0
[ 1262.869124][T20679]  __x64_sys_ioctl+0x7b/0x90
[ 1262.873747][T20679]  x64_sys_call+0x58b/0x9a0
[ 1262.878302][T20679]  do_syscall_64+0x4c/0xa0
[ 1262.882741][T20679]  ? clear_bhb_loop+0x30/0x80
[ 1262.887485][T20679]  ? clear_bhb_loop+0x30/0x80
[ 1262.892181][T20679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1262.898119][T20679] RIP: 0033:0x7f1a83b8eec9
[ 1262.902548][T20679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1262.922202][T20679] RSP: 002b:00007f1a849c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1262.930660][T20679] RAX: ffffffffffffffda RBX: 00007f1a83de5fa0 RCX: 00007f1a83b8eec9
[ 1262.938685][T20679] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1262.946690][T20679] RBP: 00007f1a83c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1262.954703][T20679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1262.962701][T20679] R13: 00007f1a83de6038 R14: 00007f1a83de5fa0 R15: 00007ffd7d0e48c8
[ 1262.969282][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 1262.970688][T20679]  </TASK>
[ 1262.977751][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1262.978792][T20679] ---[ end trace 0000000000000000 ]---
[ 1262.998118][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1263.006718][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1263.014823][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1263.015109][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1263.028190][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1263.032936][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1263.045503][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1263.053826][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1263.062336][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.070175][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1263.086717][   T24] usb 4-1: config 0 descriptor??
[ 1263.086823][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1263.099624][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1263.107852][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1263.116375][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1263.124912][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1263.137061][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1263.144791][T12614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1263.200879][T20687] netlink: 'syz.6.5756': attribute type 16 has an invalid length.
[ 1263.209520][T20687] netlink: 'syz.6.5756': attribute type 16 has an invalid length.
[ 1263.448977][T20704] device syzkaller1 entered promiscuous mode
[ 1263.469846][   T24] kovaplus 0003:1E7D:2D50.0039: hidraw0: USB HID v0.04 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[ 1263.528421][T20706] overlayfs: failed to clone upperpath
[ 1263.658766][   T28] kauditd_printk_skb: 542 callbacks suppressed
[ 1263.658781][   T28] audit: type=1400 audit(2001049158.063:40176): avc:  denied  { create } for  pid=20676 comm="syz.3.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1263.693714][  T340] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1263.702124][   T28] audit: type=1400 audit(2001049158.106:40177): avc:  denied  { ioctl } for  pid=20697 comm="syz.2.5770" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1263.823653][   T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1263.831913][T12694] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[ 1263.849690][   T28] audit: type=1400 audit(2001049158.246:40178): avc:  denied  { ioctl } for  pid=20708 comm="syz.1.5774" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1263.874849][T12694] smsc95xx: probe of 5-1:0.67 failed with error -71
[ 1263.880729][  T340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1263.882419][T12694] usb 5-1: USB disconnect, device number 7
[ 1263.898155][   T28] audit: type=1400 audit(2001049158.268:40179): avc:  denied  { ioctl } for  pid=20708 comm="syz.1.5774" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1263.915495][  T340] usb 3-1: config 0 has no interfaces?
[ 1263.924425][   T28] audit: type=1400 audit(2001049158.300:40180): avc:  denied  { ioctl } for  pid=20697 comm="syz.2.5770" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1263.953693][  T340] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1263.954076][   T28] audit: type=1400 audit(2001049158.354:40181): avc:  denied  { ioctl } for  pid=20697 comm="syz.2.5770" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1263.962844][  T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.995787][  T340] usb 3-1: Product: syz
[ 1263.999931][  T340] usb 3-1: Manufacturer: syz
[ 1264.005269][  T340] usb 3-1: SerialNumber: syz
[ 1264.011906][  T340] usb 3-1: config 0 descriptor??
[ 1264.017393][   T28] audit: type=1400 audit(2001049158.440:40182): avc:  denied  { ioctl } for  pid=20697 comm="syz.2.5770" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1264.046563][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1264.055567][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1264.074004][   T28] audit: type=1400 audit(2001049158.483:40183): avc:  denied  { ioctl } for  pid=20708 comm="syz.1.5774" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1264.082602][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1264.108302][   T28] audit: type=1400 audit(2001049158.483:40184): avc:  denied  { ioctl } for  pid=20708 comm="syz.1.5774" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1264.126595][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1264.146419][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1264.147491][   T28] audit: type=1400 audit(2001049158.483:40185): avc:  denied  { ioctl } for  pid=20708 comm="syz.1.5774" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1264.183839][   T24] usb 2-1: config 0 descriptor??
[ 1264.473920][T18288] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1264.565455][   T24] microsoft 0003:045E:07DA.003A: ignoring exceeding usage max
[ 1264.575065][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.582979][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.590267][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.597541][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.604785][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.612026][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.619290][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.626540][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.633786][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.641016][   T24] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[ 1264.642398][T18288] usb 7-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config
[ 1264.656752][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.003A/input/input147
[ 1264.659064][T18288] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1264.681543][  T340] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1264.689101][T18288] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1264.689249][   T24] microsoft 0003:045E:07DA.003A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1264.705075][T18288] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1264.723186][T18288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.737858][T18288] usb 7-1: Product: syz
[ 1264.742066][T18288] usb 7-1: Manufacturer: syz
[ 1264.746846][T18288] usb 7-1: SerialNumber: syz
[ 1264.863823][  T340] usb 5-1: Using ep0 maxpacket: 16
[ 1264.871302][  T340] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1264.880446][  T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.888569][  T340] usb 5-1: Product: syz
[ 1264.892861][  T340] usb 5-1: Manufacturer: syz
[ 1264.897537][  T340] usb 5-1: SerialNumber: syz
[ 1264.905100][  T340] r8152-cfgselector 5-1: config 0 descriptor??
[ 1264.911380][T20720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2943653504 (376787648512 ns) > initial count (160967428992 ns). Using initial count to start timer.
[ 1265.152927][  T565] usb 2-1: USB disconnect, device number 82
[ 1265.229508][ T1653] usb 4-1: USB disconnect, device number 56
[ 1265.284841][  T340] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1265.296027][  T340] r8152-cfgselector 5-1: bad CDC descriptors
[ 1265.303151][  T340] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1265.310067][  T340] r8152-cfgselector 5-1: USB disconnect, device number 8
[ 1265.634702][ T1653] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1265.662964][T20726] overlayfs: statfs failed on './file0'
[ 1265.706443][T18288] cdc_ncm 7-1:1.0: bind() failure
[ 1265.714711][T18288] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1265.721668][T18288] cdc_ncm 7-1:1.1: bind() failure
[ 1265.794305][T20732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1265.822082][ T1653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.836464][ T1653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1265.847078][ T1653] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1265.856209][ T1653] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1265.865029][ T1653] usb 4-1: Manufacturer: syz
[ 1265.870967][ T1653] usb 4-1: config 0 descriptor??
[ 1265.928836][   T24] usb 7-1: USB disconnect, device number 44
[ 1266.190546][   T24] usb 3-1: USB disconnect, device number 13
[ 1266.359093][  T565] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1266.537434][  T565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1266.556626][  T565] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1266.566090][  T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.576606][  T565] usb 2-1: config 0 descriptor??
[ 1266.619440][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1266.629191][ T1653] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003B/input/input148
[ 1266.651505][ T1653] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003B/input/input149
[ 1266.685792][ T1653] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003B/input/input150
[ 1266.714275][ T1653] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003B/input/input151
[ 1266.757350][ T1653] uclogic 0003:256C:006D.003B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0
[ 1266.792631][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1266.817330][ T1653] usb 4-1: USB disconnect, device number 57
[ 1266.833245][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1266.866046][   T24] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1266.890189][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.925506][   T24] usb 3-1: Product: syz
[ 1266.930306][   T24] usb 3-1: Manufacturer: syz
[ 1266.934966][   T24] usb 3-1: SerialNumber: syz
[ 1266.947267][   T24] usb 3-1: config 0 descriptor??
[ 1266.952763][T20752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1266.959988][T20752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1266.968892][  T565] samsung 0003:0419:0600.003C: unknown main item tag 0x7
[ 1267.000316][  T565] samsung 0003:0419:0600.003C: unknown main item tag 0x0
[ 1267.030306][  T565] samsung 0003:0419:0600.003C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0
[ 1267.090016][T20770] fido_id[20770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1267.165121][T20749] binder: 20748:20749 ioctl 4018620d 0 returned -22
[ 1267.172968][  T344] usb 2-1: USB disconnect, device number 83
[ 1267.191450][T20752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1267.198631][T20752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1267.253138][T20775] overlayfs: conflicting lowerdir path
[ 1267.263064][T20775] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[ 1267.362294][T20776] fido_id[20776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1267.580633][   T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1267.588532][  T565] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1267.749136][T20791] overlayfs: invalid origin (0000)
[ 1267.761740][  T565] usb 4-1: Using ep0 maxpacket: 16
[ 1267.768188][  T565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1267.784742][  T565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1267.820548][  T565] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1267.835075][T20795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3622609721 (231847022144 ns) > initial count (79210366720 ns). Using initial count to start timer.
[ 1267.849608][  T565] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1267.871223][  T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.900975][  T344] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1267.909143][  T565] usb 4-1: config 0 descriptor??
[ 1268.124859][  T344] usb 2-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config
[ 1268.135253][  T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1268.152252][   T24] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1268.279301][  T344] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1268.327893][   T28] kauditd_printk_skb: 281 callbacks suppressed
[ 1268.327917][   T28] audit: type=1400 audit(2001049163.080:40467): avc:  denied  { ioctl } for  pid=20777 comm="syz.3.5798" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.360324][  T565] kovaplus 0003:1E7D:2D50.003D: item fetching failed at offset 0/3
[ 1268.369590][   T24] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 9a:46:53:b6:d8:89
[ 1268.378661][   T28] audit: type=1400 audit(2001049163.102:40468): avc:  denied  { ioctl } for  pid=20777 comm="syz.3.5798" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.384005][  T565] kovaplus 0003:1E7D:2D50.003D: parse failed
[ 1268.413564][   T28] audit: type=1400 audit(2001049163.188:40469): avc:  denied  { ioctl } for  pid=20788 comm="syz.1.5802" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.419555][   T24] usb 3-1: USB disconnect, device number 14
[ 1268.442560][   T28] audit: type=1400 audit(2001049163.188:40470): avc:  denied  { ioctl } for  pid=20788 comm="syz.1.5802" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.445860][  T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1268.471000][   T28] audit: type=1400 audit(2001049163.188:40471): avc:  denied  { ioctl } for  pid=20788 comm="syz.1.5802" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.486870][  T565] kovaplus: probe of 0003:1E7D:2D50.003D failed with error -22
[ 1268.522820][  T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.531005][   T24] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[ 1268.565315][   T28] audit: type=1400 audit(2001049163.220:40472): avc:  denied  { ioctl } for  pid=20788 comm="syz.1.5802" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1268.572674][  T344] usb 2-1: Product: syz
[ 1268.595170][   T28] audit: type=1400 audit(2001049163.285:40473): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1268.617010][   T28] audit: type=1400 audit(2001049163.296:40474): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1268.622584][  T344] usb 2-1: Manufacturer: syz
[ 1268.651773][  T344] usb 2-1: SerialNumber: syz
[ 1268.669099][  T565] ==================================================================
[ 1268.677164][  T565] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[ 1268.684982][  T565] Read of size 8 at addr ffff888130ae6cf0 by task kworker/1:8/565
[ 1268.692792][  T565] 
[ 1268.695107][  T565] CPU: 1 PID: 565 Comm: kworker/1:8 Tainted: G        W          syzkaller #0
[ 1268.703942][  T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1268.714002][  T565] Workqueue: events_power_efficient neigh_managed_work
[ 1268.720858][  T565] Call Trace:
[ 1268.724125][  T565]  <TASK>
[ 1268.727053][  T565]  __dump_stack+0x21/0x24
[ 1268.731373][  T565]  dump_stack_lvl+0xee/0x150
[ 1268.735953][  T565]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1268.740973][  T565]  ? _raw_spin_lock_irq+0x8f/0xe0
[ 1268.745996][  T565]  ? __list_del_entry_valid+0xa6/0x130
[ 1268.751442][  T565]  print_address_description+0x71/0x200
[ 1268.756991][  T565]  print_report+0x4a/0x60
[ 1268.761352][  T565]  kasan_report+0x122/0x150
[ 1268.765870][  T565]  ? __list_del_entry_valid+0xa6/0x130
[ 1268.771316][  T565]  __asan_report_load8_noabort+0x14/0x20
[ 1268.776953][  T565]  __list_del_entry_valid+0xa6/0x130
[ 1268.782253][  T565]  process_one_work+0x4b9/0xc40
[ 1268.787095][  T565]  worker_thread+0xa29/0x11f0
[ 1268.791756][  T565]  kthread+0x281/0x320
[ 1268.795808][  T565]  ? __cfi_worker_thread+0x10/0x10
[ 1268.800904][  T565]  ? __cfi_kthread+0x10/0x10
[ 1268.805478][  T565]  ret_from_fork+0x1f/0x30
[ 1268.809881][  T565]  </TASK>
[ 1268.812881][  T565] 
[ 1268.815201][  T565] Allocated by task 24:
[ 1268.819329][  T565]  kasan_set_track+0x4b/0x70
[ 1268.823906][  T565]  kasan_save_alloc_info+0x25/0x30
[ 1268.829016][  T565]  __kasan_kmalloc+0x95/0xb0
[ 1268.833592][  T565]  __kmalloc_node+0xb2/0x1e0
[ 1268.838181][  T565]  kvmalloc_node+0x294/0x480
[ 1268.842751][  T565]  alloc_netdev_mqs+0x8d/0xf90
[ 1268.847501][  T565]  alloc_etherdev_mqs+0x37/0x40
[ 1268.852333][  T565]  usbnet_probe+0x20c/0x2780
[ 1268.856906][  T565]  usb_probe_interface+0x610/0xaf0
[ 1268.861994][  T565]  really_probe+0x2cb/0x960
[ 1268.866473][  T565]  __driver_probe_device+0x198/0x280
[ 1268.871733][  T565]  driver_probe_device+0x54/0x3e0
[ 1268.876736][  T565]  __device_attach_driver+0x2e9/0x4a0
[ 1268.882087][  T565]  bus_for_each_drv+0x183/0x210
[ 1268.886931][  T565]  __device_attach+0x2a2/0x400
[ 1268.891683][  T565]  device_initial_probe+0x1a/0x20
[ 1268.896685][  T565]  bus_probe_device+0xc0/0x1f0
[ 1268.901430][  T565]  device_add+0xb4d/0xef0
[ 1268.905742][  T565]  usb_set_configuration+0x19c2/0x1f10
[ 1268.911184][  T565]  usb_generic_driver_probe+0x91/0x150
[ 1268.916634][  T565]  usb_probe_device+0x159/0x270
[ 1268.921481][  T565]  really_probe+0x2cb/0x960
[ 1268.925963][  T565]  __driver_probe_device+0x198/0x280
[ 1268.931230][  T565]  driver_probe_device+0x54/0x3e0
[ 1268.936234][  T565]  __device_attach_driver+0x2e9/0x4a0
[ 1268.941597][  T565]  bus_for_each_drv+0x183/0x210
[ 1268.946436][  T565]  __device_attach+0x2a2/0x400
[ 1268.951269][  T565]  device_initial_probe+0x1a/0x20
[ 1268.956270][  T565]  bus_probe_device+0xc0/0x1f0
[ 1268.961027][  T565]  device_add+0xb4d/0xef0
[ 1268.965347][  T565]  usb_new_device+0xa70/0x1520
[ 1268.970099][  T565]  hub_event+0x2850/0x4350
[ 1268.974500][  T565]  process_one_work+0x71f/0xc40
[ 1268.979332][  T565]  worker_thread+0xa29/0x11f0
[ 1268.983989][  T565]  kthread+0x281/0x320
[ 1268.988046][  T565]  ret_from_fork+0x1f/0x30
[ 1268.992441][  T565] 
[ 1268.994753][  T565] Freed by task 24:
[ 1268.998550][  T565]  kasan_set_track+0x4b/0x70
[ 1269.003119][  T565]  kasan_save_free_info+0x31/0x50
[ 1269.008145][  T565]  ____kasan_slab_free+0x132/0x180
[ 1269.013239][  T565]  __kasan_slab_free+0x11/0x20
[ 1269.017984][  T565]  slab_free_freelist_hook+0xc2/0x190
[ 1269.023353][  T565]  __kmem_cache_free+0xb7/0x1b0
[ 1269.028185][  T565]  kfree+0x6f/0xf0
[ 1269.031887][  T565]  kvfree+0x35/0x40
[ 1269.035681][  T565]  netdev_freemem+0x3f/0x60
[ 1269.040165][  T565]  netdev_release+0x7f/0xb0
[ 1269.044666][  T565]  device_release+0xa4/0x1d0
[ 1269.049241][  T565]  kobject_put+0x19d/0x280
[ 1269.053645][  T565]  put_device+0x1f/0x30
[ 1269.057799][  T565]  free_netdev+0x392/0x490
[ 1269.062233][  T565]  usbnet_disconnect+0x25a/0x3b0
[ 1269.067157][  T565]  usb_unbind_interface+0x223/0x8d0
[ 1269.072339][  T565]  device_release_driver_internal+0x508/0x820
[ 1269.078384][  T565]  device_release_driver+0x19/0x20
[ 1269.083490][  T565]  bus_remove_device+0x2ee/0x350
[ 1269.088443][  T565]  device_del+0x6a4/0xeb0
[ 1269.092757][  T565]  usb_disable_device+0x3a8/0x750
[ 1269.097779][  T565]  usb_disconnect+0x31e/0x860
[ 1269.102449][  T565]  hub_event+0x1a78/0x4350
[ 1269.106851][  T565]  process_one_work+0x71f/0xc40
[ 1269.111679][  T565]  worker_thread+0xd2e/0x11f0
[ 1269.116351][  T565]  kthread+0x281/0x320
[ 1269.120407][  T565]  ret_from_fork+0x1f/0x30
[ 1269.124814][  T565] 
[ 1269.127127][  T565] Last potentially related work creation:
[ 1269.132837][  T565]  kasan_save_stack+0x3a/0x60
[ 1269.137506][  T565]  __kasan_record_aux_stack+0xb6/0xc0
[ 1269.142875][  T565]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1269.148675][  T565]  insert_work+0x51/0x300
[ 1269.153084][  T565]  __queue_work+0x9b1/0xd30
[ 1269.157590][  T565]  queue_work_on+0xd2/0x140
[ 1269.162083][  T565]  usbnet_link_change+0x189/0x1b0
[ 1269.167099][  T565]  usbnet_probe+0x1d55/0x2780
[ 1269.171768][  T565]  usb_probe_interface+0x610/0xaf0
[ 1269.176863][  T565]  really_probe+0x2cb/0x960
[ 1269.181356][  T565]  __driver_probe_device+0x198/0x280
[ 1269.186628][  T565]  driver_probe_device+0x54/0x3e0
[ 1269.191636][  T565]  __device_attach_driver+0x2e9/0x4a0
[ 1269.196996][  T565]  bus_for_each_drv+0x183/0x210
[ 1269.201834][  T565]  __device_attach+0x2a2/0x400
[ 1269.206602][  T565]  device_initial_probe+0x1a/0x20
[ 1269.211611][  T565]  bus_probe_device+0xc0/0x1f0
[ 1269.216363][  T565]  device_add+0xb4d/0xef0
[ 1269.220684][  T565]  usb_set_configuration+0x19c2/0x1f10
[ 1269.226136][  T565]  usb_generic_driver_probe+0x91/0x150
[ 1269.231582][  T565]  usb_probe_device+0x159/0x270
[ 1269.236422][  T565]  really_probe+0x2cb/0x960
[ 1269.240910][  T565]  __driver_probe_device+0x198/0x280
[ 1269.246174][  T565]  driver_probe_device+0x54/0x3e0
[ 1269.251178][  T565]  __device_attach_driver+0x2e9/0x4a0
[ 1269.256529][  T565]  bus_for_each_drv+0x183/0x210
[ 1269.261368][  T565]  __device_attach+0x2a2/0x400
[ 1269.266122][  T565]  device_initial_probe+0x1a/0x20
[ 1269.271124][  T565]  bus_probe_device+0xc0/0x1f0
[ 1269.275871][  T565]  device_add+0xb4d/0xef0
[ 1269.280191][  T565]  usb_new_device+0xa70/0x1520
[ 1269.284943][  T565]  hub_event+0x2850/0x4350
[ 1269.289352][  T565]  process_one_work+0x71f/0xc40
[ 1269.294188][  T565]  worker_thread+0xa29/0x11f0
[ 1269.298850][  T565]  kthread+0x281/0x320
[ 1269.302902][  T565]  ret_from_fork+0x1f/0x30
[ 1269.307309][  T565] 
[ 1269.309619][  T565] The buggy address belongs to the object at ffff888130ae6000
[ 1269.309619][  T565]  which belongs to the cache kmalloc-4k of size 4096
[ 1269.323665][  T565] The buggy address is located 3312 bytes inside of
[ 1269.323665][  T565]  4096-byte region [ffff888130ae6000, ffff888130ae7000)
[ 1269.337100][  T565] 
[ 1269.339418][  T565] The buggy address belongs to the physical page:
[ 1269.345804][  T565] page:ffffea0004c2b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130ae0
[ 1269.356016][  T565] head:ffffea0004c2b800 order:3 compound_mapcount:0 compound_pincount:0
[ 1269.364318][  T565] flags: 0x4000000000010200(slab|head|zone=1)
[ 1269.370468][  T565] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[ 1269.379030][  T565] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 1269.387588][  T565] page dumped because: kasan: bad access detected
[ 1269.393979][  T565] page_owner tracks the page as allocated
[ 1269.399675][  T565] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 25159182899, free_ts 0
[ 1269.419965][  T565]  post_alloc_hook+0x1f5/0x210
[ 1269.424732][  T565]  prep_new_page+0x1c/0x110
[ 1269.429216][  T565]  get_page_from_freelist+0x2c7b/0x2cf0
[ 1269.434742][  T565]  __alloc_pages+0x1c3/0x450
[ 1269.439312][  T565]  alloc_slab_page+0x6e/0xf0
[ 1269.443891][  T565]  new_slab+0x98/0x3d0
[ 1269.447954][  T565]  ___slab_alloc+0x6bd/0xb20
[ 1269.452523][  T565]  __slab_alloc+0x5e/0xa0
[ 1269.456835][  T565]  __kmem_cache_alloc_node+0x203/0x2c0
[ 1269.462285][  T565]  __kmalloc_node_track_caller+0xa0/0x1e0
[ 1269.467993][  T565]  kmemdup+0x2b/0x60
[ 1269.471875][  T565]  __devinet_sysctl_register+0xad/0x320
[ 1269.477403][  T565]  devinet_sysctl_register+0x169/0x1e0
[ 1269.482846][  T565]  inetdev_init+0x2d1/0x510
[ 1269.487326][  T565]  inetdev_event+0x1f8/0x10e0
[ 1269.491978][  T565]  raw_notifier_call_chain+0xa1/0x110
[ 1269.497350][  T565] page_owner free stack trace missing
[ 1269.502807][  T565] 
[ 1269.505114][  T565] Memory state around the buggy address:
[ 1269.510722][  T565]  ffff888130ae6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1269.518770][  T565]  ffff888130ae6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1269.526809][  T565] >ffff888130ae6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1269.534842][  T565]                                                              ^
[ 1269.542541][  T565]  ffff888130ae6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1269.550584][  T565]  ffff888130ae6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1269.558621][  T565] ==================================================================
[ 1269.566663][  T565] Disabling lock debugging due to kernel taint
[ 1269.633561][   T28] audit: type=1400 audit(2001049163.296:40475): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n25" dev="tmpfs" ino=29280 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1269.655441][   T28] audit: type=1400 audit(2001049163.296:40476): avc:  denied  { open } for  pid=142 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=29280 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1270.528024][   T24] usb 4-1: USB disconnect, device number 58
[ 1270.540367][  T344] cdc_ncm 2-1:1.0: bind() failure
[ 1270.546342][  T344] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1270.553212][  T344] cdc_ncm 2-1:1.1: bind() failure
[ 1270.745408][T18288] usb 2-1: USB disconnect, device number 84