last executing test programs:

15.28789383s ago: executing program 2 (id=11397):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x0)
r3 = eventfd2(0x5, 0x1)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000005c0)={0x4, 0x0, 0x4, r3})
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r4, 0xa})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000580)={0x0, 0x0, 0x2, r4, 0xe})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x60ee, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@nolazytime}, {@resuid={'resuid', 0x3d, r5}}, {@nouser_xattr}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f00000002c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000300)='syzkaller\x00', 0xfffffffe, 0x65, &(0x7f0000000400)=""/101, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0xd, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='ext4_fc_track_range\x00', r6, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r8, 0x0, 0x3)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

12.749782933s ago: executing program 2 (id=11411):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
truncate(0x0, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x40, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}, 0x1, 0x11000000}, 0x0)

12.729320515s ago: executing program 2 (id=11412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3df90000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getrlimit(0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000800851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

11.896754078s ago: executing program 2 (id=11416):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x3fd, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0)

11.799857846s ago: executing program 2 (id=11417):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='cachefiles_vfs_error\x00', r0}, 0xf)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket(0x2, 0x3, 0x9)
bind$inet(r7, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r11 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r12 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r12, r11, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r10, r10, 0x0, 0x0)

11.191952279s ago: executing program 1 (id=11420):
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x0, 0x0, 0xea}, 0x0)

10.95648048s ago: executing program 1 (id=11422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000000680)="$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")

10.84025824s ago: executing program 1 (id=11423):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f00000008c0)='timer_start\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x1, 'ipvlan1\x00', {}, 0x3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01"])
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$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")

9.639916386s ago: executing program 1 (id=11428):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b020004"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x10)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6f7f5e18"}]}}, 0x0}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r7, 0x5)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r6, r7, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
syz_usb_control_io$hid(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10)

8.819834787s ago: executing program 2 (id=11430):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000f8ff000000e4ff000900000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000006000000080000000000000041330000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0400000001000000050000eeff00000000000000000000000400002b9000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000840000000000060000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)

7.209122299s ago: executing program 1 (id=11435):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="e1ffffff00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff0403000008000000bc040000000000008597ce000300000095f45337ed07403f4faabed3493a7cfebf0abf42fc59c125fa825b4537cd81c807b7000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x84000, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a18ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000280)=0x11, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)

6.920999844s ago: executing program 1 (id=11438):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000f8ff000000e4ff000900000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1000000006000000080000000000000041330000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0400000001000000050000eeff00000000000000000000000400002b9000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000840000000000060000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)

4.362635278s ago: executing program 3 (id=11454):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
dup(r3)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

3.563467498s ago: executing program 3 (id=11455):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000160700b2310000f1260000410000000000", @ANYRES32=r0, @ANYBLOB="810400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000000000000700"/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00006d2000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfeffffffffffff, &(0x7f0000000600)=','})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

3.289183582s ago: executing program 4 (id=11456):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0xfff1, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0)

2.879768468s ago: executing program 0 (id=11457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0)

2.620833171s ago: executing program 3 (id=11458):
setgid(0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
socket(0x10, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r0, 0x4)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})

2.461147295s ago: executing program 4 (id=11459):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3df90000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getrlimit(0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000001000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

2.05578251s ago: executing program 0 (id=11460):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="ece2f33e36096d68eee60000000000700000f931", @ANYRES32], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000007809e45f8d1415e4d92149bdef13d9a4871f67d2877f05dacd041fac7f0770cdffff41ffffffff0000000000002000e2efeb", @ANYBLOB="af7a77be37d18a617487182004216397a19488649b40ec8d14d74ee15822e464a1070c80f4fd5c41429b079660fead0323881302fd56056bb708c7fd0147c7acc2541f98b193da15cd3be2586ff8a63a595e12aeb61baf2a272a714f0c9336ed60660308cccfb23410f7cef810ad4f910bf8d2ddc4c467f0da6d2e2b209d0f11b249e788d5b84e18bf83409a48b694acead8f0d5399dc4951842a9694f51dace151bf4d2fb1d951a", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf1}, 0x0, 0x0, 0x76dc, 0x0, 0xfffffffe, 0x10}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lseek(r10, 0x851, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1.626703608s ago: executing program 4 (id=11461):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000001f00)=[{&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/126, 0x7e}], 0x8, &(0x7f0000001f80)=""/4096, 0x1000}, 0x2001)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0)
write(r1, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ff030000000000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kmem_cache_free\x00', r5}, 0x10)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000002000000000000000000000000000000002db5c14e51963e20f9a34e260000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000240)='./file0\x00', r8}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sigaltstack(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x2, [0x0, 0x0]})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r0, 0x38cd3000)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
getpid()
epoll_create1(0x80000)

1.427686856s ago: executing program 4 (id=11462):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3df90000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000f0000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1.251960701s ago: executing program 0 (id=11463):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de858001000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
dup2(r7, r5) (async)
r8 = dup2(r7, r5)
sendto$inet(r8, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) (async)
sendto$inet(r8, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) (async)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x4000000000010046)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)

1.214659614s ago: executing program 0 (id=11464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x0, 0x7, 0x3, 0x5, 0xa, [{0x81, 0xffffffffffff0001, 0xffffffffffffffff, '\x00', 0x2}, {0x3, 0x8, 0x4}, {0x97ed, 0x6, 0x2, '\x00', 0xa00}, {0xd, 0x8000000000000000, 0x81, '\x00', 0x201}, {0xd9b, 0xfffffffffffffeff, 0xfffffffffffffff9, '\x00', 0x100d}, {0x80000001, 0x100000000, 0x1a6585b, '\x00', 0x800}, {0x1, 0x5, 0xff}, {0x7, 0x3, 0x7, '\x00', 0x2000}, {0x95, 0x4eea, 0x9}, {0x3b, 0x4c, 0x9, '\x00', 0x404}]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="0aa829d4beddeb5afad061b83e725d8991a4b4b126dc6df5b52126b5eb07f60f35534bf646dcc0eb0f46eb4acebbd13975fbec5009fabaff1301c6c89a541f6db14fbdb1e96c357aa7fcd77dfbdc44"], 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0)

846.146966ms ago: executing program 3 (id=11465):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
truncate(0x0, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x40, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}, 0x1, 0x41000000}, 0x0)

704.041769ms ago: executing program 3 (id=11466):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x40, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r4, 0x0, 0x8010)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
linkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file3\x00', 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

459.83108ms ago: executing program 4 (id=11467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000001340), 0x2931990f, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = dup2(r3, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
timerfd_create(0x9, 0x0)

459.28905ms ago: executing program 4 (id=11468):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000600000078000000e604000000200400", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000050000000f0000000000000000e4ff0000000000656d58b22ced9442bc31bc0a"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES64=r0, @ANYRES64=r2, @ANYBLOB="d38d7dccbb4bab8f8291108984fcc1b2a4054af9baed4a6ceca28bd8c3371f7feace89ee4cc8b5926e4fc42a53e376c934feb804043c80c1c30429a01a5636e85a434246a4612c281f1e76b2c64801f343778687daf75839a2850af47bec940f9ce58d0d752f51", @ANYBLOB="9d3e21134bc80e922f8e40917657ccf4b9cc3115e9578771567b9fe58891cd6d1f2a54af3a39a1de00b3e11f55a274fe6cbe054a33c07bca27b6c2ab7b9dcde0867b50a3155599c7271322a8dfbc73605f479f9139aa4407731f7b896b02495168cfc55c318bedc31444af4326946d14051155917a9fa37f98172313ac7e1ee64e119e4199687f31303ec150e55b2cc5c473e91b62903e7a6d848d9b60ca306b75659f540b186950eb234cdbcebc50b4caf672169a0fe18296cc0c0ddf12559cbed8aab9c18a04ae7de480a79b643458dd0e5f3c807b1f4d5e7be688d8acb72dc675bc376a15f0d343f7fa29"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000dc0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYRESOCT=r2, @ANYBLOB="e1839c2cf669c14c1c1c13df0878ffb5b384f590be0fe75f361bd3030000004a9f1145c738f8971fd0f14cc1855de471a4510ea7fd8167888672980a65b96ccd1795938d7311ff8ee4dc889ae609f927b9b70bd2eb3f3bfcf1e8e2856a38de2af84ed9a345fb5c59029d0c45525ac9aa189312f1bee5ce394d7ae5ab1c91fa788489720f32fac46659f704377fbbe6b72a8ae911954c9bfa3759de14914067769d979643cb8df0326f611f2f3adb28d6985d6f97f3e8638707d204b0e63f8f4d3ec7", @ANYRES32=r1, @ANYRES32=r2], 0x0)
ioctl$EVIOCRMFF(r5, 0x4004550e, 0x0)
r6 = openat$sysfs(0xffffff9c, 0x0, 0x8042, 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f00000001c0)={0x1, 0xff, 0x8})
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = dup(r9)
sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xd805, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x90, 0x4)

394.564426ms ago: executing program 0 (id=11469):
setgroups(0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async)
getpid() (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32)
r7 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

300.954624ms ago: executing program 0 (id=11470):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x8, [@volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @func_proto, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @struct={0x3ff, 0x7, 0x0, 0x4, 0x1, 0x8, [{0xc, 0x4, 0xffffff7f}, {0x5, 0x5, 0xe2}, {0xf, 0x2, 0x3}, {0xe, 0x2, 0xf0c}, {0x7, 0x4}, {0x4, 0x1, 0xfffffffb}, {0xa, 0x5, 0xb211}]}]}, {0x0, [0x41, 0x0, 0x30, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/182, 0xbc, 0xb6, 0x0, 0x100, 0x0, @void, @value}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000000)="eaaed68fcf0331ec939344cc3737581902", &(0x7f0000000540)=""/123}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000500)={r0})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(r7, 0x0, 0x8, &(0x7f00000005c0)='U', 0x1)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r8 = dup(r7)
sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x60000000)
recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendfile(0xffffffffffffffff, r9, 0x0, 0x20000023893)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=11471):
pipe2$9p(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000fed000/0x11000)=nil, 0x11000)
madvise(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x9)
munlockall()
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0))
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
munlockall()
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f000000cf00)=""/102387, 0x18ff3}], 0x1, 0x1, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f00000079c0)="$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")
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000000000000000001618110000", @ANYRES32, @ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000500000036000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00'}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1000, &(0x7f0000000080)={[{}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c})

kernel console output (not intermixed with test programs):

, idProduct=07da, bcdDevice= 0.00
[ 2199.739011][T32532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2199.750657][T32532] usb 4-1: config 0 descriptor??
[ 2199.838527][T12162] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 2200.008561][ T8609] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8609 comm=syz.3.10964
[ 2200.462080][T12162] usb 5-1: device descriptor read/64, error -71
[ 2200.671632][ T8652] netlink: 'syz.1.10976': attribute type 4 has an invalid length.
[ 2201.007934][T12162] usb 5-1: device descriptor read/64, error -71
[ 2201.122373][T12162] usb usb5-port1: attempt power cycle
[ 2201.960576][T20313] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 2202.084685][T32532] usbhid 4-1:0.0: can't add hid device: -71
[ 2202.090485][T32532] usbhid: probe of 4-1:0.0 failed with error -71
[ 2202.342964][T32532] usb 4-1: USB disconnect, device number 93
[ 2202.408153][T20313] usb 3-1: device descriptor read/64, error -71
[ 2202.793566][T20313] usb 3-1: device descriptor read/64, error -71
[ 2203.084585][T20313] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 2203.105433][ T8706] netlink: 'syz.0.10991': attribute type 4 has an invalid length.
[ 2203.370233][T20313] usb 3-1: device descriptor read/64, error -71
[ 2203.389225][T32532] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2203.694084][T32532] usb 5-1: device descriptor read/64, error -71
[ 2203.741795][T20313] usb 3-1: device descriptor read/64, error -71
[ 2203.785943][   T24] kauditd_printk_skb: 67 callbacks suppressed
[ 2203.785953][   T24] audit: type=1400 audit(2000000559.933:12696): avc:  denied  { sys_admin } for  pid=8716 comm="syz.0.10996" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 2203.932338][T32531] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 2203.957841][T20313] usb usb3-port1: attempt power cycle
[ 2203.967222][ T8720] fuse: Bad value for 'user_id'
[ 2203.974542][   T24] audit: type=1400 audit(2000000560.132:12697): avc:  denied  { relabelfrom } for  pid=8719 comm="syz.0.10997" name="" dev="pipefs" ino=228926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2204.075476][T32532] usb 5-1: device descriptor read/64, error -71
[ 2204.313201][T32531] usb 4-1: Using ep0 maxpacket: 16
[ 2204.360901][T20313] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 2204.408491][T32532] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2204.448756][T32531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2204.459585][T32531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2204.469227][T32531] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2204.482102][T32531] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2204.491024][T32531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2204.514296][T32531] usb 4-1: config 0 descriptor??
[ 2204.560925][T20313] usb 3-1: device descriptor read/8, error -71
[ 2204.745347][   T24] audit: type=1326 audit(2000000560.941:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.11000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac3542ef9 code=0x0
[ 2204.769551][T20313] usb 3-1: device descriptor read/8, error -71
[ 2204.799046][T32532] usb 5-1: device descriptor read/64, error -71
[ 2205.027928][ T8742] binder: BINDER_SET_CONTEXT_MGR already set
[ 2205.033783][ T8742] binder: 8739:8742 ioctl 4018620d 20000040 returned -16
[ 2205.042774][ T8742] binder: 8739:8742 ioctl c0306201 0 returned -14
[ 2205.050103][ T8742] binder: 8739:8742 ioctl c0306201 200002c0 returned -14
[ 2205.228429][   T24] audit: type=1400 audit(2000000561.455:12699): avc:  denied  { mount } for  pid=8710 comm="syz.3.10994" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2205.251874][ T8744] overlayfs: unrecognized mount option "uuid=off" or missing value
[ 2205.260770][   T24] audit: type=1400 audit(2000000561.476:12700): avc:  denied  { mounton } for  pid=8710 comm="syz.3.10994" path="/47/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 2205.283972][   T24] audit: type=1400 audit(2000000561.476:12701): avc:  denied  { mounton } for  pid=8710 comm="syz.3.10994" path="/47/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2205.322397][ T8746] device pim6reg1 entered promiscuous mode
[ 2205.323503][T32532] usb 5-1: device descriptor read/64, error -71
[ 2205.575994][T32532] usb usb5-port1: attempt power cycle
[ 2205.878976][ T8757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11006'.
[ 2206.052956][   T24] audit: type=1400 audit(2000000562.316:12702): avc:  denied  { create } for  pid=8766 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2206.179627][ T8769] xt_bpf: check failed: parse error
[ 2206.466137][T20313] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 2206.759718][   T24] audit: type=1400 audit(2000000563.051:12703): avc:  denied  { unmount } for  pid=7776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 2207.019367][T32531] usbhid 4-1:0.0: can't add hid device: -71
[ 2207.025429][T32531] usbhid: probe of 4-1:0.0 failed with error -71
[ 2207.039047][T32531] usb 4-1: USB disconnect, device number 94
[ 2207.062506][ T8790] hub 6-0:1.0: USB hub found
[ 2207.067387][ T8790] hub 6-0:1.0: 1 port detected
[ 2207.152186][T20313] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 2207.289317][T20313] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2207.302218][T20313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2207.311368][T20313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2207.364136][T20313] usb 1-1: config 0 descriptor??
[ 2207.400106][T20313] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2207.751976][T32531] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 2208.162075][T32531] usb 4-1: device descriptor read/64, error -71
[ 2208.269901][   T24] audit: type=1400 audit(2000000564.647:12704): avc:  denied  { read } for  pid=8766 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2208.289271][   T24] audit: type=1400 audit(2000000564.647:12705): avc:  denied  { create } for  pid=8766 comm="syz.0.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2208.390178][T20313] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 2208.561647][T32531] usb 4-1: device descriptor read/64, error -71
[ 2208.618818][T20313] usb 3-1: Using ep0 maxpacket: 8
[ 2208.733149][T20313] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2208.742137][T20313] usb 3-1: config 1 has no interface number 1
[ 2208.748186][T20313] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2208.828428][T32531] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 2208.924161][T20313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2208.933984][T20313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2208.941980][T20313] usb 3-1: Product: syz
[ 2208.946763][T20313] usb 3-1: Manufacturer: syz
[ 2208.951348][T20313] usb 3-1: SerialNumber: syz
[ 2209.180835][T32531] usb 4-1: device descriptor read/64, error -71
[ 2209.223793][ T8808] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc
[ 2209.243355][ T8808] binder: 8807:8808 unknown command 1313738452
[ 2209.247995][T12200] usb 1-1: USB disconnect, device number 2
[ 2209.255569][ T8808] binder: 8807:8808 ioctl c0306201 200003c0 returned -22
[ 2209.323185][ T8819] binder: 8818:8819 ioctl c0306201 20000380 returned -14
[ 2209.330210][   T24] kauditd_printk_skb: 5 callbacks suppressed
[ 2209.330221][   T24] audit: type=1400 audit(2000000565.738:12711): avc:  denied  { call } for  pid=8818 comm="syz.0.11024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 2209.363574][   T24] audit: type=1400 audit(2000000565.791:12712): avc:  denied  { shutdown } for  pid=8827 comm="syz.1.11027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2209.383898][T20313] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[ 2209.393584][   T24] audit: type=1400 audit(2000000565.791:12713): avc:  denied  { read } for  pid=8827 comm="syz.1.11027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2209.420511][ T8831] hub 6-0:1.0: USB hub found
[ 2209.425056][ T8831] hub 6-0:1.0: 1 port detected
[ 2209.429794][T20313] usb 3-1: 2:1: cannot set freq 5590914 to ep 0x82
[ 2209.461760][T20313] usb 3-1: USB disconnect, device number 116
[ 2209.489116][   T24] audit: type=1400 audit(2000000565.927:12714): avc:  denied  { write } for  pid=8832 comm="syz.0.11029" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 2209.512247][   T24] audit: type=1400 audit(2000000565.927:12715): avc:  denied  { ioctl } for  pid=8832 comm="syz.0.11029" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 2209.606669][T32531] usb 4-1: device descriptor read/64, error -71
[ 2209.723851][ T8838] binder: BINDER_SET_CONTEXT_MGR already set
[ 2209.729740][ T8838] binder: 8834:8838 ioctl 4018620d 20000040 returned -16
[ 2209.739338][ T8838] binder: 8834:8838 ioctl c0306201 0 returned -14
[ 2209.746834][ T8838] binder: 8834:8838 ioctl c0306201 200002c0 returned -14
[ 2209.864842][T32531] usb usb4-port1: attempt power cycle
[ 2210.267411][   T24] audit: type=1400 audit(2000000566.736:12716): avc:  denied  { block_suspend } for  pid=8832 comm="syz.0.11029" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2210.926580][ T8865] hub 6-0:1.0: USB hub found
[ 2210.931710][ T8865] hub 6-0:1.0: 1 port detected
[ 2211.133866][T32531] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 2211.219695][T32531] usb 4-1: Using ep0 maxpacket: 16
[ 2211.267896][ T8871] hub 6-0:1.0: USB hub found
[ 2211.272576][ T8871] hub 6-0:1.0: 1 port detected
[ 2211.352743][T32531] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 2211.361817][T32531] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 2211.371815][T32531] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 2211.381632][T32531] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024
[ 2211.391263][T20313] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2211.667169][T32531] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024
[ 2211.677071][T32531] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2211.683435][T32531] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 2211.692528][T32531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.700148][ T8882] xt_bpf: check failed: parse error
[ 2211.719167][   T24] audit: type=1400 audit(2000000568.268:12717): avc:  denied  { read } for  pid=8885 comm="syz.2.11044" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2211.722474][T23707] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2211.747323][   T24] audit: type=1400 audit(2000000568.268:12718): avc:  denied  { open } for  pid=8885 comm="syz.2.11044" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2211.772647][T32531] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[ 2211.772673][   T24] audit: type=1400 audit(2000000568.268:12719): avc:  denied  { bind } for  pid=8885 comm="syz.2.11044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2211.803579][   T24] audit: type=1400 audit(2000000568.289:12720): avc:  denied  { ioctl } for  pid=8885 comm="syz.2.11044" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2211.914770][T20313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2211.925595][T20313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2211.935329][T20313] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 2211.944190][T20313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.952542][T20313] usb 5-1: config 0 descriptor??
[ 2211.971893][T32534] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 2212.039402][T32531] scsi host1: usb-storage 4-1:1.0
[ 2212.244045][T12162] usb 4-1: USB disconnect, device number 97
[ 2212.257596][T32534] usb 1-1: device descriptor read/64, error -71
[ 2212.638840][T32534] usb 1-1: device descriptor read/64, error -71
[ 2212.829860][T20313] hid-led: probe of 0003:27B8:01ED.00CA failed with error -32
[ 2213.021818][T32534] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 2213.062056][T20313] usb 5-1: USB disconnect, device number 14
[ 2213.324496][T32534] usb 1-1: device descriptor read/64, error -71
[ 2213.667381][T32531] Bluetooth: hci0: command 0x1003 tx timeout
[ 2213.673699][ T2906] Bluetooth: hci0: sending frame failed (-49)
[ 2213.856863][T32534] usb 1-1: device descriptor read/64, error -71
[ 2213.864910][ T8905] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11049'.
[ 2213.981789][T32534] usb usb1-port1: attempt power cycle
[ 2214.181796][T12162] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2214.393859][T32534] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 2214.409551][   T24] kauditd_printk_skb: 1 callbacks suppressed
[ 2214.409562][   T24] audit: type=1400 audit(2000000571.082:12722): avc:  denied  { getopt } for  pid=8912 comm="syz.3.11051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2214.543820][T12162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2214.562187][T12162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2214.581492][T12162] usb 5-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00
[ 2214.591374][T32534] usb 1-1: device descriptor read/8, error -71
[ 2214.598942][T12162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2214.622889][T12162] usb 5-1: config 0 descriptor??
[ 2215.087780][ T8923] syz.3.11052[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2215.088191][ T8923] syz.3.11052[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2215.477348][T32534] usb 1-1: device descriptor read/8, error -71
[ 2215.632289][   T24] audit: type=1326 audit(2000000572.373:12723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.0.11055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8037eaeef9 code=0x0
[ 2215.655377][T20313] Bluetooth: hci0: command 0x1001 tx timeout
[ 2215.661458][ T2906] Bluetooth: hci0: sending frame failed (-49)
[ 2215.763054][T32535] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2215.832593][ T8939] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11059'.
[ 2215.956007][   T24] audit: type=1400 audit(2000000572.709:12724): avc:  denied  { create } for  pid=8941 comm="syz.1.11060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2215.979089][ T8942] tipc: Started in network mode
[ 2215.983833][ T8942] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711
[ 2215.993438][ T8942] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2216.003424][   T24] audit: type=1400 audit(2000000572.762:12725): avc:  denied  { bind } for  pid=8941 comm="syz.1.11060" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2216.023849][   T24] audit: type=1400 audit(2000000572.762:12726): avc:  denied  { node_bind } for  pid=8941 comm="syz.1.11060" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 2216.045750][   T24] audit: type=1400 audit(2000000572.772:12727): avc:  denied  { connect } for  pid=8941 comm="syz.1.11060" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2216.325105][T32535] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 2216.335178][T32535] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2216.347898][T32535] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2216.356722][T32535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.365712][T32535] usb 4-1: config 0 descriptor??
[ 2216.411359][T32535] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2216.519308][T12162] usb 5-1: USB disconnect, device number 15
[ 2217.620510][T12162] Bluetooth: hci0: command 0x1009 tx timeout
[ 2217.639600][T32535] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2217.963450][T32535] usb 5-1: device descriptor read/64, error -71
[ 2217.992022][T12162] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 2218.249239][T12162] usb 2-1: device descriptor read/64, error -71
[ 2218.363631][T32535] usb 5-1: device descriptor read/64, error -71
[ 2218.370543][T32531] usb 4-1: USB disconnect, device number 98
[ 2218.396162][   T24] audit: type=1400 audit(2000000575.271:12728): avc:  denied  { wake_alarm } for  pid=8961 comm="syz.3.11065" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2218.434149][   T24] audit: type=1400 audit(2000000575.313:12729): avc:  denied  { watch watch_reads } for  pid=8965 comm="syz.3.11067" path="/61" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 2218.620697][T12162] usb 2-1: device descriptor read/64, error -71
[ 2218.639893][T32535] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2218.877923][T12162] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 2218.925559][T32535] usb 5-1: device descriptor read/64, error -71
[ 2219.135118][T12162] usb 2-1: device descriptor read/64, error -71
[ 2219.316485][T32535] usb 5-1: device descriptor read/64, error -71
[ 2219.430848][T32535] usb usb5-port1: attempt power cycle
[ 2219.506634][T12162] usb 2-1: device descriptor read/64, error -71
[ 2219.621092][T12162] usb usb2-port1: attempt power cycle
[ 2219.973367][T32535] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2220.020938][T12162] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 2220.135980][T32535] usb 5-1: device descriptor read/8, error -71
[ 2220.182953][T12162] usb 2-1: device descriptor read/8, error -71
[ 2220.335418][T32535] usb 5-1: device descriptor read/8, error -71
[ 2220.448621][T12162] usb 2-1: device descriptor read/8, error -71
[ 2220.709623][T12162] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2221.030748][T12162] usb 2-1: device descriptor read/8, error -71
[ 2221.362271][T12162] usb 2-1: device descriptor read/8, error -71
[ 2221.456643][   T24] audit: type=1400 audit(2000000578.483:12730): avc:  denied  { mounton } for  pid=8995 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 2221.478604][T12162] usb usb2-port1: unable to enumerate USB device
[ 2221.523879][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2221.531159][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.538604][ T8995] device bridge_slave_0 entered promiscuous mode
[ 2221.545958][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2221.552913][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.560396][ T8995] device bridge_slave_1 entered promiscuous mode
[ 2221.618653][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2221.625636][ T8995] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2221.632794][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2221.639617][ T8995] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2221.665641][T12162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.688846][T12162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.696202][T12162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2221.703505][T12162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2221.722889][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2221.732963][T32535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2221.739805][T32535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2221.757875][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2221.773100][T32535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2221.779970][T32535] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2221.787775][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2221.800167][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2221.819573][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2221.835983][ T8995] device veth0_vlan entered promiscuous mode
[ 2221.846852][T32533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2221.855832][T32533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2221.863157][T32533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2221.902767][ T8995] device veth1_macvtap entered promiscuous mode
[ 2221.915191][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2221.998127][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2222.006455][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2222.020854][   T24] audit: type=1400 audit(2000000579.071:12731): avc:  denied  { mounton } for  pid=8995 comm="syz-executor" path="/root/syzkaller.A2lza9/syz-tmp" dev="sda1" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 2222.046912][   T24] audit: type=1400 audit(2000000579.092:12732): avc:  denied  { mount } for  pid=8995 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 2222.075045][   T24] audit: type=1400 audit(2000000579.092:12733): avc:  denied  { mount } for  pid=8995 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2222.115163][   T24] audit: type=1400 audit(2000000579.102:12734): avc:  denied  { mounton } for  pid=8995 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 2222.152323][ T9002] SELinux:  Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped).
[ 2222.161851][   T24] audit: type=1400 audit(2000000579.218:12735): avc:  denied  { mac_admin } for  pid=9000 comm="syz.4.11075" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2222.183977][   T24] audit: type=1400 audit(2000000579.228:12736): avc:  denied  { relabelto } for  pid=9000 comm="syz.4.11075" name="file2" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0"
[ 2222.283132][   T24] audit: type=1400 audit(2000000579.228:12737): avc:  denied  { associate } for  pid=9000 comm="syz.4.11075" name="file2" dev="tmpfs" ino=818 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0"
[ 2222.442941][ T9010] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns
[ 2222.575617][T23707] device bridge_slave_1 left promiscuous mode
[ 2222.581592][T23707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2222.588864][T23707] device bridge_slave_0 left promiscuous mode
[ 2222.594870][T23707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2222.602478][T23707] device veth1_macvtap left promiscuous mode
[ 2222.608295][T23707] device veth0_vlan left promiscuous mode
[ 2222.714370][   T24] audit: type=1400 audit(2000000579.806:12738): avc:  denied  { unlink } for  pid=6499 comm="syz-executor" name="file2" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0"
[ 2222.767252][ T9015] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns
[ 2223.439414][ T9026] netlink: 'syz.4.11081': attribute type 11 has an invalid length.
[ 2223.447238][ T9026] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.11081'.
[ 2223.936027][   T24] audit: type=1400 audit(2000000581.086:12739): avc:  denied  { ioctl } for  pid=9028 comm="syz.2.11082" path="socket:[230625]" dev="sockfs" ino=230625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2224.070597][ T9035] hub 6-0:1.0: USB hub found
[ 2224.079980][ T9035] hub 6-0:1.0: 1 port detected
[ 2225.366349][ T1562] tipc: Left network mode
[ 2225.438356][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2225.455142][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2225.562322][ T9049] device bridge_slave_0 entered promiscuous mode
[ 2225.569450][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11090'.
[ 2225.582912][ T9060] device pim6reg1 entered promiscuous mode
[ 2225.589567][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2225.597124][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2225.604483][ T9049] device bridge_slave_1 entered promiscuous mode
[ 2225.719242][ T9063] binder: BINDER_SET_CONTEXT_MGR already set
[ 2225.725197][ T9063] binder: 9058:9063 ioctl 4018620d 20000040 returned -16
[ 2225.736212][ T9063] binder: 9058:9063 ioctl c0306201 0 returned -14
[ 2225.745586][ T9063] binder: 9058:9063 ioctl c0306201 200002c0 returned -14
[ 2226.042762][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2226.049650][ T9049] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2226.056754][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2226.063513][ T9049] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2226.150375][T12203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2226.158880][T12203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.166108][T12203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.185521][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2226.194475][T12202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2226.201307][T12202] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2226.208658][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2226.216712][T12202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2226.223553][T12202] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2226.242479][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2226.250987][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2226.258761][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2226.269743][ T9049] device veth0_vlan entered promiscuous mode
[ 2226.276670][T20313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2226.284894][T20313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2226.314172][T20313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2226.332842][ T9049] device veth1_macvtap entered promiscuous mode
[ 2226.366469][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2226.406543][T12162] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 2226.414501][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2226.423460][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2226.434578][ T1562] device bridge_slave_1 left promiscuous mode
[ 2226.440486][ T1562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.447957][ T1562] device bridge_slave_0 left promiscuous mode
[ 2226.454155][ T1562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.462135][ T1562] device veth1_macvtap left promiscuous mode
[ 2226.467925][ T1562] device veth0_vlan left promiscuous mode
[ 2226.681059][  T966] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 2226.731218][  T966] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2226.993978][T12162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2227.005085][T12162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2227.014982][T12162] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2227.036277][T12162] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[ 2227.045504][T12162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2227.066766][ T9084] netlink: 'syz.3.11096': attribute type 4 has an invalid length.
[ 2227.107602][T12162] usb 3-1: config 0 descriptor??
[ 2227.314774][ T9088] hub 6-0:1.0: USB hub found
[ 2227.319359][ T9088] hub 6-0:1.0: 1 port detected
[ 2227.572223][T12162] logitech 0003:046D:C287.00CB: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0
[ 2227.583468][T12162] logitech 0003:046D:C287.00CB: no inputs found
[ 2227.806224][ T9065] udc-core: couldn't find an available UDC or it's busy
[ 2227.826852][ T9065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2227.952092][  T966] tipc: Left network mode
[ 2228.065525][T32533] usb 3-1: USB disconnect, device number 117
[ 2228.153764][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2228.165612][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2228.184290][ T9092] device bridge_slave_0 entered promiscuous mode
[ 2228.191076][ T9097] xt_policy: neither incoming nor outgoing policy selected
[ 2228.203541][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2228.222535][ T9092] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2228.229893][ T9092] device bridge_slave_1 entered promiscuous mode
[ 2228.283376][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2228.290274][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2228.297305][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2228.304151][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2228.324154][T12162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2228.331741][T12162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2228.339011][T12162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2228.357482][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2228.367856][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2228.376861][T32532] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2228.383692][T32532] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2228.392299][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2228.401126][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2228.409633][T32532] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2228.416548][T32532] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2228.424353][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2228.432823][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2228.441241][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2228.449734][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2228.491883][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2228.502324][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2228.533708][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2228.542114][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2228.563655][ T9092] device veth0_vlan entered promiscuous mode
[ 2228.570395][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2228.579457][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2228.594154][T20313] Bluetooth: hci0: command 0x1003 tx timeout
[ 2228.597391][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2228.600346][ T2906] Bluetooth: hci0: sending frame failed (-49)
[ 2228.617010][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2228.733832][ T9092] device veth1_macvtap entered promiscuous mode
[ 2228.744467][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2228.752034][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2228.760603][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2228.771843][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2228.780267][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2229.231067][ T9109] syz.3.11102[9109] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2229.231177][ T9109] syz.3.11102[9109] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2229.317370][  T966] device bridge_slave_1 left promiscuous mode
[ 2229.435448][  T966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2229.477543][  T966] device bridge_slave_0 left promiscuous mode
[ 2229.483603][  T966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2229.491587][  T966] device veth1_macvtap left promiscuous mode
[ 2229.497429][  T966] device veth0_vlan left promiscuous mode
[ 2229.668173][   T24] kauditd_printk_skb: 3 callbacks suppressed
[ 2229.668185][   T24] audit: type=1400 audit(2000000587.102:12743): avc:  denied  { setopt } for  pid=9126 comm="syz.1.11106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2230.584352][   T24] audit: type=1400 audit(2000000588.068:12744): avc:  denied  { bind } for  pid=9126 comm="syz.1.11106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2230.616042][ T9178] Bluetooth: hci0: command 0x1001 tx timeout
[ 2230.622025][ T2906] Bluetooth: hci0: sending frame failed (-49)
[ 2230.667138][   T24] audit: type=1400 audit(2000000588.152:12745): avc:  denied  { create } for  pid=9126 comm="syz.1.11106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2230.702454][   T24] audit: type=1400 audit(2000000588.152:12746): avc:  denied  { write } for  pid=9126 comm="syz.1.11106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 2231.117886][   T24] audit: type=1400 audit(2000000588.404:12747): avc:  denied  { ioctl } for  pid=9186 comm="syz.3.11111" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2231.318024][ T9206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11113'.
[ 2231.651782][ T9178] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 2231.899446][ T9175] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 2232.090191][ T9178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2232.102291][ T9178] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2232.115723][ T9178] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2232.261458][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2232.272315][ T9178] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2232.281169][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2232.290748][ T9178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2232.298549][ T9175] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2232.307409][ T9178] usb 2-1: Product: syz
[ 2232.311393][ T9178] usb 2-1: Manufacturer: syz
[ 2232.315866][ T9175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2232.341932][ T9178] usb 2-1: SerialNumber: syz
[ 2232.350315][ T9178] usb 2-1: config 0 descriptor??
[ 2232.355649][ T9175] usb 1-1: config 0 descriptor??
[ 2232.393297][ T9178] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[ 2232.556993][ T9178] Bluetooth: hci0: command 0x1009 tx timeout
[ 2232.580156][ T9204] udc-core: couldn't find an available UDC or it's busy
[ 2232.586942][ T9204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2232.642833][T32534] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2232.835401][   T24] audit: type=1400 audit(2000000590.430:12748): avc:  denied  { write } for  pid=9217 comm="syz.0.11119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2232.852584][ T9218] udc-core: couldn't find an available UDC or it's busy
[ 2232.861717][ T9218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2233.052104][T32534] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 2233.062194][T32534] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2233.074890][T32534] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2233.083700][T32534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2233.092586][T32534] usb 4-1: config 0 descriptor??
[ 2233.128952][T32534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2233.382360][ T9244] syz.2.11126[9244] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2233.382779][ T9244] syz.2.11126[9244] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2233.674963][T32534] usb 2-1: USB disconnect, device number 118
[ 2233.807580][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2233.814488][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2233.821586][ T9248] device bridge_slave_0 entered promiscuous mode
[ 2233.828402][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2233.835246][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2233.842386][ T9248] device bridge_slave_1 entered promiscuous mode
[ 2233.880435][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2233.887285][ T9248] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2233.894378][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2233.901174][ T9248] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2233.927849][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2233.935702][T32534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2233.943082][T32534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2233.952748][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2233.961005][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2233.967875][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2233.986817][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2233.996081][T32535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2234.002915][T32535] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2234.010103][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2234.019174][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2234.033647][ T9248] device veth0_vlan entered promiscuous mode
[ 2234.042164][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2234.050234][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2234.057617][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2234.064923][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2234.080686][ T9248] device veth1_macvtap entered promiscuous mode
[ 2234.141200][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2234.149580][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2234.158655][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2234.535926][  T966] device bridge_slave_1 left promiscuous mode
[ 2234.542355][  T966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2234.550324][  T966] device bridge_slave_0 left promiscuous mode
[ 2234.557121][  T966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2234.565215][  T966] device veth1_macvtap left promiscuous mode
[ 2234.571147][  T966] device veth0_vlan left promiscuous mode
[ 2234.696415][ T9175] usbhid 1-1:0.0: can't add hid device: -71
[ 2234.702541][ T9175] usbhid: probe of 1-1:0.0 failed with error -71
[ 2234.728136][ T9175] usb 1-1: USB disconnect, device number 7
[ 2235.005328][T32534] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2235.257348][T12202] usb 4-1: USB disconnect, device number 99
[ 2235.395422][T32534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2235.406236][T32534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2235.415841][T32534] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2235.424673][T32534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2235.433196][T32534] usb 2-1: config 0 descriptor??
[ 2235.731380][   T24] audit: type=1326 audit(2000000593.474:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.754916][   T24] audit: type=1326 audit(2000000593.474:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.779342][   T24] audit: type=1400 audit(2000000593.495:12751): avc:  denied  { create } for  pid=9283 comm="syz.2.11137" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2235.800356][   T24] audit: type=1400 audit(2000000593.516:12752): avc:  denied  { mounton } for  pid=9283 comm="syz.2.11137" path="/17/file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2235.823280][   T24] audit: type=1326 audit(2000000593.516:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.846989][   T24] audit: type=1326 audit(2000000593.516:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.870429][   T24] audit: type=1326 audit(2000000593.516:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.893681][   T24] audit: type=1326 audit(2000000593.516:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54ea65ef9 code=0x7ffc0000
[ 2235.917218][T32534] hid (null): bogus close delimiter
[ 2235.919289][   T24] audit: type=1326 audit(2000000593.516:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.2.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa54ea6493c code=0x7ffc0000
[ 2235.945585][   T24] audit: type=1400 audit(2000000593.674:12758): avc:  denied  { unlink } for  pid=8995 comm="syz-executor" name="file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2236.031076][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2236.037981][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2236.045187][ T9293] device bridge_slave_0 entered promiscuous mode
[ 2236.051966][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2236.058894][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2236.067249][ T9293] device bridge_slave_1 entered promiscuous mode
[ 2236.113542][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2236.120391][ T9293] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2236.127505][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2236.134285][ T9293] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2236.175897][T32531] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2236.185670][T32531] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2236.193565][T32531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2236.200884][T32534] usb 2-1: string descriptor 0 read error: -71
[ 2236.208028][T32531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2236.224504][T32534] uclogic 0003:256C:006D.00CC: failed retrieving string descriptor #200: -71
[ 2236.233165][T32534] uclogic 0003:256C:006D.00CC: failed retrieving pen parameters: -71
[ 2236.243360][ T9179] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 2236.259601][T32534] uclogic 0003:256C:006D.00CC: failed probing pen v2 parameters: -71
[ 2236.274984][ T9293] device veth0_vlan entered promiscuous mode
[ 2236.280873][T32534] uclogic 0003:256C:006D.00CC: failed probing parameters: -71
[ 2236.310298][T32534] uclogic: probe of 0003:256C:006D.00CC failed with error -71
[ 2236.321284][ T9293] device veth1_macvtap entered promiscuous mode
[ 2236.327125][T32534] usb 2-1: USB disconnect, device number 119
[ 2236.360848][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2236.370596][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2236.379682][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2236.388869][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2236.396420][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2236.403818][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2236.411922][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2236.420066][T32535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2236.426932][T32535] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2236.434314][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2236.442429][T32535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2236.449295][T32535] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2236.456924][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2236.465110][T32535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2236.491528][ T9070] device syz_tun left promiscuous mode
[ 2236.500133][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2236.522914][ T9309] binder: 9308:9309 unknown command 0
[ 2236.528099][ T9309] binder: 9308:9309 ioctl c0306201 20000080 returned -22
[ 2236.563399][ T9179] usb 3-1: device descriptor read/64, error -71
[ 2236.938569][ T9179] usb 3-1: device descriptor read/64, error -71
[ 2237.005245][ T9178] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2237.196553][ T9323] syz.3.11148[9323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2237.196948][ T9323] syz.3.11148[9323] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2237.234232][ T9179] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 2237.435342][  T966] device veth1_macvtap left promiscuous mode
[ 2237.441252][  T966] device veth0_vlan left promiscuous mode
[ 2237.466193][ T9178] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 2237.478782][ T9178] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2237.491732][ T9178] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2237.500582][ T9178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2237.509269][ T9178] usb 2-1: config 0 descriptor??
[ 2237.737607][ T9329] syz.0.11146[9329] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2237.737672][ T9329] syz.0.11146[9329] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2237.905113][ T9179] usb 3-1: device descriptor read/64, error -71
[ 2238.101124][ T9178] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2238.106085][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11151'.
[ 2238.121448][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11151'.
[ 2238.236289][ T9338] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11152'.
[ 2238.414943][T32534] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 2238.501240][ T9179] usb 3-1: device descriptor read/64, error -71
[ 2238.614995][ T9176] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 2238.622509][ T9179] usb usb3-port1: attempt power cycle
[ 2238.672157][T32534] usb 4-1: Using ep0 maxpacket: 8
[ 2238.805893][T32534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2238.816694][T32534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2238.826438][T32534] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[ 2238.835294][T32534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2238.849364][T32534] usb 4-1: config 0 descriptor??
[ 2239.229229][ T9176] usb 5-1: config 7 has an invalid interface number: 87 but max is 2
[ 2239.238147][ T9176] usb 5-1: config 7 has an invalid interface number: 62 but max is 2
[ 2239.259513][ T9176] usb 5-1: config 7 has an invalid interface number: 173 but max is 2
[ 2239.268357][ T9176] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 2239.278607][ T9176] usb 5-1: config 7 has no interface number 0
[ 2239.287119][ T9176] usb 5-1: config 7 has no interface number 1
[ 2239.293139][ T9176] usb 5-1: config 7 has no interface number 2
[ 2239.299060][ T9176] usb 5-1: config 7 interface 87 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 2239.309848][ T9176] usb 5-1: config 7 interface 62 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 2239.320722][ T9176] usb 5-1: config 7 interface 62 altsetting 128 has a duplicate endpoint with address 0x6, skipping
[ 2239.331361][ T9176] usb 5-1: config 7 interface 62 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 2239.342782][ T9176] usb 5-1: config 7 interface 62 altsetting 128 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 2239.353570][ T9176] usb 5-1: config 7 interface 62 altsetting 128 has a duplicate endpoint with address 0x6, skipping
[ 2239.364170][ T9176] usb 5-1: config 7 interface 62 altsetting 128 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 2239.375171][ T9176] usb 5-1: config 7 interface 62 altsetting 128 has a duplicate endpoint with address 0xB, skipping
[ 2239.385805][ T9176] usb 5-1: config 7 interface 173 altsetting 4 has an invalid endpoint with address 0x0, skipping
[ 2239.396154][ T9176] usb 5-1: config 7 interface 173 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[ 2239.406659][ T9176] usb 5-1: config 7 interface 173 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[ 2239.417409][ T9176] usb 5-1: config 7 interface 173 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 2239.428220][ T9176] usb 5-1: config 7 interface 87 has no altsetting 0
[ 2239.434687][ T9176] usb 5-1: config 7 interface 62 has no altsetting 0
[ 2239.441197][ T9176] usb 5-1: config 7 interface 173 has no altsetting 0
[ 2239.451490][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2239.458363][ T9337] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2239.558072][T32534] usbhid 4-1:0.0: can't add hid device: -71
[ 2239.564002][T32534] usbhid: probe of 4-1:0.0 failed with error -71
[ 2239.571867][T32534] usb 4-1: USB disconnect, device number 100
[ 2239.596331][ T9176] usb 5-1: Dual-Role OTG device on HNP port
[ 2239.615362][ T9176] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice= e.6f
[ 2239.624300][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2239.632068][ T9176] usb 5-1: Product: ꊟ놭弁枍㱺沎튿侑嗽쒊밃─䳙ቹ퐭鹞啧嚠髩꙳籼೮몚愭砯뷕熎･쨙荗䒊ꏤ轍쉋殷ꝤᲶࠌﭵ㍹鴶쑍ꁏ靦㴿踏蚍봦읈똎¿娉챁腦铟ᗝ쮱饹꓄搠壤㿁懋徃甞畒䤕꘍དྷ핼Ｎ蠜렴툰瑋嬔獥㇫킘鮪첷홟过䉯熸吔㥹︉ﶠ壟⍃ọ彆⹀ꘛᎲ✢酐巶憛屳㛮⸹⃝騠ᖻ
[ 2239.671551][ T9176] usb 5-1: Manufacturer: 턴왷푏샨篭㤊ꅔᘆ⑈帴翸୕ㇺꃁ飯讯䍙⼦쩐魤ᒠ⧮铣㸏䱠䮔祅
[ 2239.682853][ T9176] usb 5-1: SerialNumber: х
[ 2239.786534][T12202] usb 2-1: USB disconnect, device number 120
[ 2240.456178][ T9176] snd-usb-audio: probe of 5-1:7.87 failed with error -2
[ 2240.534260][ T9176] snd-usb-audio: probe of 5-1:7.62 failed with error -2
[ 2240.707339][ T9176] snd-usb-audio: probe of 5-1:7.173 failed with error -2
[ 2240.738633][ T9176] usb 5-1: USB disconnect, device number 20
[ 2240.841769][ T9390] xt_policy: neither incoming nor outgoing policy selected
[ 2240.937900][ T9393] binder: BINDER_SET_CONTEXT_MGR already set
[ 2240.943792][ T9393] binder: 9386:9393 ioctl 4018620d 20000040 returned -16
[ 2240.951623][ T9393] binder: 9386:9393 ioctl c0306201 0 returned -14
[ 2240.958372][ T9393] binder: 9386:9393 ioctl c0306201 200002c0 returned -14
[ 2241.349014][ T9179] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 2241.720886][ T9179] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 2241.730918][T12202] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2241.738396][ T9179] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2241.751412][ T9179] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2241.760288][ T9179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2241.768616][ T9411] xt_policy: neither incoming nor outgoing policy selected
[ 2241.771744][ T9179] usb 5-1: config 0 descriptor??
[ 2241.828525][ T9179] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2242.101464][T12202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2242.112345][T12202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2242.121967][T12202] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2242.130827][T12202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.139545][T12202] usb 2-1: config 0 descriptor??
[ 2242.498820][ T9424] device bridge0 entered promiscuous mode
[ 2242.505693][ T9424] fuse: Bad value for 'fd'
[ 2242.530061][T12202] usbhid 2-1:0.0: can't add hid device: -71
[ 2242.536490][T12202] usbhid: probe of 2-1:0.0 failed with error -71
[ 2242.547853][T12202] usb 2-1: USB disconnect, device number 121
[ 2242.593658][ T9427] xt_bpf: check failed: parse error
[ 2243.207648][ T9446] xt_CT: No such helper "snmp_trap"
[ 2243.390618][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11182'.
[ 2243.399882][ T9448] device bridge_slave_1 left promiscuous mode
[ 2243.406207][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2243.413969][ T9448] device bridge_slave_0 left promiscuous mode
[ 2243.420184][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2243.439383][ T9451] xt_bpf: check failed: parse error
[ 2243.770012][ T9470] xt_CT: No such helper "snmp_trap"
[ 2244.069705][ T9173] usb 5-1: USB disconnect, device number 21
[ 2244.122515][T32535] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 2244.135611][ T9176] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2244.359355][T32535] usb 1-1: Using ep0 maxpacket: 8
[ 2244.397639][T32534] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 2244.414714][ T9478] 9pnet: Insufficient options for proto=fd
[ 2244.473759][T32535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2244.511614][ T9176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.532012][ T9176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2244.559891][ T9176] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2244.579087][ T9176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.597556][T32535] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[ 2244.598254][ T9176] usb 4-1: config 0 descriptor??
[ 2244.612259][T32535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[ 2244.630189][T32535] usb 1-1: SerialNumber: syz
[ 2244.635521][ T9173] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2244.636254][T32535] usb 1-1: config 0 descriptor??
[ 2244.647738][T32534] usb 2-1: Using ep0 maxpacket: 16
[ 2244.759230][ T9179] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 2244.759488][T32534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.797913][T32534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2244.816578][T32534] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 2244.825509][T32534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.856933][T32534] usb 2-1: config 0 descriptor??
[ 2244.893515][T32535] uvcvideo: Found UVC 0.00 device <unnamed> (05ac:8501)
[ 2244.900288][T32535] uvcvideo: No valid video chain found.
[ 2244.987860][ T9173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.998813][ T9176] usbhid 4-1:0.0: can't add hid device: -71
[ 2245.004669][ T9176] usbhid: probe of 4-1:0.0 failed with error -71
[ 2245.020889][ T9173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2245.036457][ T9176] usb 4-1: USB disconnect, device number 101
[ 2245.053271][ T9173] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2245.089998][ T9173] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[ 2245.109057][ T9173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2245.121207][ T9179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2245.143891][ T9173] usb 5-1: config 0 descriptor??
[ 2245.151348][ T9179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2245.172812][ T9179] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 2245.192644][ T9179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2245.213471][ T9179] usb 3-1: config 0 descriptor??
[ 2245.236906][T12202] usb 1-1: USB disconnect, device number 8
[ 2245.303241][T32534] savu 0003:1E7D:2D5A.00CD: item fetching failed at offset 2/5
[ 2245.310830][T32534] savu 0003:1E7D:2D5A.00CD: parse failed
[ 2245.316346][T32534] savu: probe of 0003:1E7D:2D5A.00CD failed with error -22
[ 2245.468687][ T9489] FAULT_INJECTION: forcing a failure.
[ 2245.468687][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2245.481538][ T9489] CPU: 1 PID: 9489 Comm: syz.3.11197 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2245.492708][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2245.502598][ T9489] Call Trace:
[ 2245.505731][ T9489]  dump_stack_lvl+0x1e2/0x24b
[ 2245.510234][ T9489]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 2245.515531][ T9489]  dump_stack+0x15/0x17
[ 2245.519521][ T9489]  should_fail+0x3c6/0x510
[ 2245.523775][ T9489]  should_fail_usercopy+0x1a/0x20
[ 2245.528721][ T9489]  _copy_to_user+0x20/0x90
[ 2245.532979][ T9489]  simple_read_from_buffer+0xc7/0x150
[ 2245.538179][ T9489]  proc_fail_nth_read+0x1a3/0x210
[ 2245.543041][ T9489]  ? proc_fault_inject_write+0x390/0x390
[ 2245.548513][ T9489]  ? security_file_permission+0x86/0xb0
[ 2245.553892][ T9489]  ? rw_verify_area+0x1c3/0x360
[ 2245.559092][ T9489]  ? proc_fault_inject_write+0x390/0x390
[ 2245.564569][ T9489]  vfs_read+0x200/0xba0
[ 2245.568558][ T9489]  ? __kasan_check_write+0x14/0x20
[ 2245.573505][ T9489]  ? __fd_install+0x11e/0x220
[ 2245.578015][ T9489]  ? kernel_read+0x70/0x70
[ 2245.582273][ T9489]  ? __kasan_check_write+0x14/0x20
[ 2245.587217][ T9489]  ? mutex_lock+0xa5/0x110
[ 2245.591469][ T9489]  ? mutex_trylock+0xa0/0xa0
[ 2245.595896][ T9489]  ? __fdget_pos+0x2e7/0x3a0
[ 2245.600321][ T9489]  ? ksys_read+0x77/0x2c0
[ 2245.604491][ T9489]  ksys_read+0x199/0x2c0
[ 2245.608570][ T9489]  ? bpf_trace_run1+0x210/0x210
[ 2245.613254][ T9489]  ? vfs_write+0xe70/0xe70
[ 2245.617509][ T9489]  ? __bpf_trace_sys_enter+0x62/0x70
[ 2245.622627][ T9489]  __x64_sys_read+0x7b/0x90
[ 2245.626969][ T9489]  do_syscall_64+0x34/0x70
[ 2245.631223][ T9489]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2245.636948][ T9489] RIP: 0033:0x7f9ed958f93c
[ 2245.641204][ T9489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 2245.660645][ T9489] RSP: 002b:00007f9ed820a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2245.668886][ T9489] RAX: ffffffffffffffda RBX: 00007f9ed9748f80 RCX: 00007f9ed958f93c
[ 2245.676698][ T9489] RDX: 000000000000000f RSI: 00007f9ed820a0a0 RDI: 0000000000000006
[ 2245.684553][ T9489] RBP: 00007f9ed820a090 R08: 0000000000000000 R09: 0000000000000000
[ 2245.692318][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2245.700132][ T9489] R13: 0000000000000000 R14: 00007f9ed9748f80 R15: 00007ffe1e79e9d8
[ 2245.723915][ T9173] logitech 0003:046D:C287.00CE: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0
[ 2245.735639][ T9173] logitech 0003:046D:C287.00CE: no inputs found
[ 2245.746378][   T24] kauditd_printk_skb: 47 callbacks suppressed
[ 2245.746389][   T24] audit: type=1400 audit(2000000603.983:12806): avc:  denied  { write } for  pid=9471 comm="syz.1.11192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2245.792923][ T9472] udc-core: couldn't find an available UDC or it's busy
[ 2245.800319][ T9472] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2245.827825][T32535] usb 2-1: USB disconnect, device number 122
[ 2245.918195][ T9474] udc-core: couldn't find an available UDC or it's busy
[ 2245.925272][ T9474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2246.035629][ T9175] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 2246.050863][ T9499] syz.0.11200[9499] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2246.051183][ T9499] syz.0.11200[9499] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2246.144583][ T9173] usb 5-1: USB disconnect, device number 22
[ 2246.169225][ T9179] hid-led: probe of 0003:27B8:01ED.00CF failed with error -32
[ 2246.215155][T32532] usb 3-1: USB disconnect, device number 121
[ 2246.531304][ T9175] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2246.544488][ T9175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2246.555686][ T9175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2246.565721][ T9175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2246.664239][ T9175] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2246.673148][ T9175] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2246.681049][ T9175] usb 4-1: Manufacturer: syz
[ 2246.686045][ T9175] usb 4-1: config 0 descriptor??
[ 2246.829495][ T9511] hub 6-0:1.0: USB hub found
[ 2246.834276][ T9511] hub 6-0:1.0: 1 port detected
[ 2247.045451][ T9516] 9pnet: Insufficient options for proto=fd
[ 2247.234866][ T9524] binder: BINDER_SET_CONTEXT_MGR already set
[ 2247.240761][ T9524] binder: 9517:9524 ioctl 4018620d 20000040 returned -16
[ 2247.249672][ T9524] binder: 9517:9524 ioctl c0306201 0 returned -14
[ 2247.256872][ T9524] binder: 9517:9524 ioctl c0306201 200002c0 returned -14
[ 2247.302656][   T24] audit: type=1326 audit(2000000605.589:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.359490][   T24] audit: type=1326 audit(2000000605.589:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.383026][   T24] audit: type=1326 audit(2000000605.589:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.406533][   T24] audit: type=1326 audit(2000000605.589:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.430292][   T24] audit: type=1326 audit(2000000605.589:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.453871][   T24] audit: type=1326 audit(2000000605.589:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.477447][   T24] audit: type=1326 audit(2000000605.589:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.517705][   T24] audit: type=1326 audit(2000000605.599:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2247.541454][   T24] audit: type=1326 audit(2000000605.599:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9494 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ed9590ef9 code=0x7ffc0000
[ 2248.301076][ T9555] 9pnet: Insufficient options for proto=fd
[ 2248.374382][ T9558] hub 6-0:1.0: USB hub found
[ 2248.378904][ T9558] hub 6-0:1.0: 1 port detected
[ 2248.772811][ T9583] syz.3.11226[9583] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2248.772870][ T9583] syz.3.11226[9583] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2248.860065][ T9589] 9pnet: Insufficient options for proto=fd
[ 2248.893371][ T9585] xt_bpf: check failed: parse error
[ 2248.922284][ T9593] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev tmpfs, type tmpfs) errno=-22
[ 2248.929654][ T9175] usbhid 4-1:0.0: can't add hid device: -71
[ 2248.938558][ T9175] usbhid: probe of 4-1:0.0 failed with error -71
[ 2248.940080][ T9594] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev tmpfs, type tmpfs) errno=-22
[ 2248.946144][ T9175] usb 4-1: USB disconnect, device number 102
[ 2249.006607][ T9596] binder: 9595:9596 ioctl 4018620d 0 returned -22
[ 2249.039334][ T9598] hub 6-0:1.0: USB hub found
[ 2249.043858][ T9598] hub 6-0:1.0: 1 port detected
[ 2249.514414][ T9609] xt_policy: neither incoming nor outgoing policy selected
[ 2249.600244][ T9621] 9pnet: Insufficient options for proto=fd
[ 2250.054883][ T9645] xt_policy: neither incoming nor outgoing policy selected
[ 2250.283847][ T9173] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2250.636623][ T9173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2250.647871][ T9173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2250.657746][ T9173] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2250.666637][ T9173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.675086][ T9173] usb 2-1: config 0 descriptor??
[ 2250.732476][ T9656] 9pnet: Insufficient options for proto=fd
[ 2251.170187][ T9173] usbhid 2-1:0.0: can't add hid device: -71
[ 2251.176915][ T9173] usbhid: probe of 2-1:0.0 failed with error -71
[ 2251.240355][ T9173] usb 2-1: USB disconnect, device number 123
[ 2251.267248][ T9668] overlayfs: failed to resolve './file0': -2
[ 2251.294479][ T9685] 9pnet: Insufficient options for proto=fd
[ 2251.434955][ T9691] xt_policy: neither incoming nor outgoing policy selected
[ 2251.465262][   T24] kauditd_printk_skb: 90 callbacks suppressed
[ 2251.465355][   T24] audit: type=1400 audit(2000000609.903:12906): avc:  denied  { create } for  pid=9675 comm="syz.4.11259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2251.568392][   T24] audit: type=1400 audit(2000000609.903:12907): avc:  denied  { getopt } for  pid=9675 comm="syz.4.11259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2252.644944][ T9723] xt_CT: No such helper "snmp_trap"
[ 2252.863805][ T9732] 9pnet: Insufficient options for proto=fd
[ 2252.989159][T32534] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 2253.231830][ T9746] binder: BINDER_SET_CONTEXT_MGR already set
[ 2253.237771][ T9746] binder: 9741:9746 ioctl 4018620d 20000040 returned -16
[ 2253.245491][ T9746] binder: 9741:9746 ioctl c0306201 0 returned -14
[ 2253.252176][ T9746] binder: 9741:9746 ioctl c0306201 200002c0 returned -14
[ 2253.436798][T32534] usb 3-1: Using ep0 maxpacket: 32
[ 2253.741818][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2253.755701][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2253.771364][T32534] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 2253.817116][T32534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2253.832044][T32534] usb 3-1: config 0 descriptor??
[ 2254.504108][   T24] audit: type=1326 audit(2000000613.168:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.551411][   T24] audit: type=1326 audit(2000000613.210:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.574966][   T24] audit: type=1326 audit(2000000613.210:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.599316][   T24] audit: type=1326 audit(2000000613.210:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.624949][   T24] audit: type=1326 audit(2000000613.210:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.628779][T32534] lua 0003:1E7D:2C2E.00D0: item fetching failed at offset 5/7
[ 2254.735531][   T24] audit: type=1326 audit(2000000613.210:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.806978][   T24] audit: type=1326 audit(2000000613.210:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2254.825667][T32533] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2254.843949][T32534] lua 0003:1E7D:2C2E.00D0: parse failed
[ 2254.849436][T32534] lua: probe of 0003:1E7D:2C2E.00D0 failed with error -22
[ 2254.859273][T32534] usb 3-1: USB disconnect, device number 122
[ 2254.878157][ T9774] 9pnet: Insufficient options for proto=fd
[ 2254.895820][   T24] audit: type=1326 audit(2000000613.210:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.11282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc564f42ef9 code=0x7ffc0000
[ 2255.171603][ T9781] hub 6-0:1.0: USB hub found
[ 2255.176662][ T9781] hub 6-0:1.0: 1 port detected
[ 2255.323213][T32533] usb 5-1: Using ep0 maxpacket: 8
[ 2255.560290][T32533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2255.572072][T32533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2255.582112][T32533] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[ 2255.592013][T32533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2255.619757][T32533] usb 5-1: config 0 descriptor??
[ 2255.835437][ T9793] xt_CT: No such helper "snmp_trap"
[ 2255.925012][ T9796] binder: BINDER_SET_CONTEXT_MGR already set
[ 2255.930855][ T9796] binder: 9790:9796 ioctl 4018620d 20000040 returned -16
[ 2255.938037][ T9796] binder: 9790:9796 ioctl c0306201 0 returned -14
[ 2255.944398][ T9796] binder: 9790:9796 ioctl c0306201 200002c0 returned -14
[ 2256.209792][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.217261][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.224786][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.232065][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.239219][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.246398][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.253632][T32533] playstation 0003:054C:0CE6.00D1: unknown main item tag 0x0
[ 2256.573726][T32533] playstation 0003:054C:0CE6.00D1: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0
[ 2256.594424][ T9811] 9pnet: Insufficient options for proto=fd
[ 2256.685309][T32533] playstation 0003:054C:0CE6.00D1: Invalid byte count transferred, expected 20 got 0
[ 2256.694748][T32533] playstation 0003:054C:0CE6.00D1: Failed to retrieve DualSense pairing info: -22
[ 2256.703772][T32533] playstation 0003:054C:0CE6.00D1: Failed to get MAC address from DualSense
[ 2256.712399][T32533] playstation 0003:054C:0CE6.00D1: Failed to create dualsense.
[ 2256.720292][T32533] playstation: probe of 0003:054C:0CE6.00D1 failed with error -22
[ 2256.728029][T32534] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 2256.877735][T32531] usb 5-1: USB disconnect, device number 23
[ 2256.885168][T32533] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 2256.980360][T32534] usb 4-1: Using ep0 maxpacket: 16
[ 2257.342683][T32534] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 2257.352457][T32534] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[ 2257.437805][T32533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2257.448980][T32533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2257.458701][T32533] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2257.470076][T32533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.478760][T32533] usb 3-1: config 0 descriptor??
[ 2257.561507][T32534] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2257.570439][T32534] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2257.578216][T32534] usb 4-1: Product: Ἦ庭碹矘婦䑐￠㏲䡒墯དᮯ兜✸턤您ш花흂廗ꂄ釒걍럞犻謹ᢼ얗㙽룫뷻ṫ꣣敁僰ᯜୃ㙻頛鈢Ղ杂殘躯쐹蟿䂟≣爗孎恾ꯍꒆዘߝﶟ举函쐺뭍鴗◈遇ꝼ崴처ꡌ碚榊昝됕ꝟ滟路
[ 2257.601973][T32534] usb 4-1: Manufacturer: ᠁
[ 2257.606378][T32534] usb 4-1: SerialNumber: 쨖龼螋靭᛫䀪޴㴣䷨캉蘪ꍠ縒ㇽඑ髨귢
[ 2257.656695][ T9173] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 2257.837729][T32533] usbhid 3-1:0.0: can't add hid device: -71
[ 2257.846537][T32533] usbhid: probe of 3-1:0.0 failed with error -71
[ 2257.855663][T32533] usb 3-1: USB disconnect, device number 123
[ 2257.923442][T32534] cdc_ncm 4-1:1.0: bind() failure
[ 2257.930082][T32534] cdc_ncm 4-1:1.1: bind() failure
[ 2257.944829][T32534] usb 4-1: USB disconnect, device number 103
[ 2257.999977][ T9173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2258.018434][ T9173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2258.031385][ T9173] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2258.041431][ T9173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.050031][ T9173] usb 2-1: config 0 descriptor??
[ 2258.771040][ T9173] plantronics 0003:047F:FFFF.00D2: unknown main item tag 0x0
[ 2258.811553][ T9173] plantronics 0003:047F:FFFF.00D2: No inputs registered, leaving
[ 2258.890162][ T9848] 9pnet: Insufficient options for proto=fd
[ 2258.930700][ T9173] plantronics 0003:047F:FFFF.00D2: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2258.991946][ T9825] device syzkaller0 entered promiscuous mode
[ 2259.012232][ T9173] usb 2-1: USB disconnect, device number 124
[ 2259.846613][ T9864] xt_CT: No such helper "snmp_trap"
[ 2261.417349][T32533] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 2261.431355][ T9888] 9pnet: Insufficient options for proto=fd
[ 2261.962342][ T9895] device dummy0 entered promiscuous mode
[ 2261.972453][ T9898] hub 6-0:1.0: USB hub found
[ 2261.976968][ T9898] hub 6-0:1.0: 1 port detected
[ 2262.613175][ T9915] hub 6-0:1.0: USB hub found
[ 2262.619669][T32533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2262.630886][ T9915] hub 6-0:1.0: 1 port detected
[ 2262.638949][T32533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2262.660560][T32533] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2262.756016][ T9918] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 2262.765580][ T9918] SELinux: failed to load policy
[ 2262.848340][   T24] kauditd_printk_skb: 34 callbacks suppressed
[ 2262.848402][   T24] audit: type=1400 audit(2000000621.829:12950): avc:  denied  { ioctl } for  pid=9913 comm="syz.1.11331" path="socket:[234211]" dev="sockfs" ino=234211 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2262.864974][T32533] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[ 2262.891932][T32533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.903918][T32533] usb 4-1: config 0 descriptor??
[ 2262.970068][   T24] audit: type=1400 audit(2000000621.840:12951): avc:  denied  { load_policy } for  pid=9913 comm="syz.1.11331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 2263.153040][T32533] usbhid 4-1:0.0: can't add hid device: -71
[ 2263.158896][T32533] usbhid: probe of 4-1:0.0 failed with error -71
[ 2263.180845][T32533] usb 4-1: USB disconnect, device number 104
[ 2263.662152][   T24] audit: type=1326 audit(2000000622.795:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.0.11333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc036d7ef9 code=0x0
[ 2264.554518][ T9969] FAULT_INJECTION: forcing a failure.
[ 2264.554518][ T9969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2264.567448][ T9969] CPU: 1 PID: 9969 Comm: syz.1.11344 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2264.578566][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2264.588468][ T9969] Call Trace:
[ 2264.591599][ T9969]  dump_stack_lvl+0x1e2/0x24b
[ 2264.596101][ T9969]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 2264.601424][ T9969]  ? pick_next_pushable_task+0x210/0x210
[ 2264.606865][ T9969]  ? strncpy_from_kernel_nofault+0x1c2/0x1e0
[ 2264.612677][ T9969]  dump_stack+0x15/0x17
[ 2264.616668][ T9969]  should_fail+0x3c6/0x510
[ 2264.620933][ T9969]  should_fail_usercopy+0x1a/0x20
[ 2264.625797][ T9969]  _copy_from_user+0x20/0xd0
[ 2264.630215][ T9969]  __copy_msghdr_from_user+0xaf/0x7c0
[ 2264.635431][ T9969]  ? bpf_trace_run2+0x280/0x280
[ 2264.640192][ T9969]  ? __ia32_sys_shutdown+0x70/0x70
[ 2264.645134][ T9969]  ? tracing_record_taskinfo_sched_switch+0x84/0x390
[ 2264.651650][ T9969]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 2264.657290][ T9969]  ___sys_sendmsg+0x166/0x2e0
[ 2264.661801][ T9969]  ? __sys_sendmsg+0x280/0x280
[ 2264.666399][ T9969]  ? __kasan_check_write+0x14/0x20
[ 2264.671350][ T9969]  ? bpf_trace_run2+0x280/0x280
[ 2264.676037][ T9969]  __se_sys_sendmsg+0x1b1/0x280
[ 2264.680721][ T9969]  ? __x64_sys_sendmsg+0x90/0x90
[ 2264.685504][ T9969]  ? fpu__clear_all+0x20/0x20
[ 2264.690011][ T9969]  ? __kasan_check_read+0x11/0x20
[ 2264.694875][ T9969]  __x64_sys_sendmsg+0x7b/0x90
[ 2264.699470][ T9969]  do_syscall_64+0x34/0x70
[ 2264.703721][ T9969]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2264.709447][ T9969] RIP: 0033:0x7fc564f42ef9
[ 2264.713700][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2264.733146][ T9969] RSP: 002b:00007fc563b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2264.741382][ T9969] RAX: ffffffffffffffda RBX: 00007fc5650fb130 RCX: 00007fc564f42ef9
[ 2264.749190][ T9969] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007
[ 2264.757093][ T9969] RBP: 00007fc563b7a090 R08: 0000000000000000 R09: 0000000000000000
[ 2264.764901][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2264.772710][ T9969] R13: 0000000000000000 R14: 00007fc5650fb130 R15: 00007ffebc037b18
[ 2264.789586][ T9970] hub 6-0:1.0: USB hub found
[ 2264.794192][ T9970] hub 6-0:1.0: 1 port detected
[ 2264.848610][T32534] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2264.958699][   T24] audit: type=1400 audit(2000000624.149:12953): avc:  denied  { watch } for  pid=9977 comm="syz.0.11347" path="/proc/195/task" dev="proc" ino=234293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2265.115248][T32534] usb 3-1: Using ep0 maxpacket: 32
[ 2265.165036][T32534] usb 3-1: too many configurations: 243, using maximum allowed: 8
[ 2265.254297][ T9169] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 2265.561094][ T9986] syz.4.11349[9986] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2265.561185][ T9986] syz.4.11349[9986] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2265.801756][ T9169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2265.808963][T32534] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2265.821938][ T9169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2265.823713][T32534] usb 3-1: can't read configurations, error -61
[ 2265.840841][ T9169] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[ 2265.868821][ T9169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2265.885070][ T9169] usb 1-1: config 0 descriptor??
[ 2265.991619][T32534] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 2266.070891][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11352'.
[ 2266.087850][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2266.131529][ T9994] device bridge_slave_0 left promiscuous mode
[ 2266.137592][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2266.249024][T32534] usb 3-1: Using ep0 maxpacket: 32
[ 2266.296571][T32534] usb 3-1: too many configurations: 243, using maximum allowed: 8
[ 2266.401241][T12202] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2266.668402][T32534] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2266.675781][T32534] usb 3-1: can't read configurations, error -61
[ 2266.687251][T32534] usb usb3-port1: attempt power cycle
[ 2266.753769][T12202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2266.764546][T12202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2266.774042][T12202] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2266.782910][T12202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.791471][T12202] usb 5-1: config 0 descriptor??
[ 2266.944325][ T9169] usbhid 1-1:0.0: can't add hid device: -71
[ 2266.950314][ T9169] usbhid: probe of 1-1:0.0 failed with error -71
[ 2266.958023][ T9169] usb 1-1: USB disconnect, device number 9
[ 2267.045448][T10007] xt_bpf: check failed: parse error
[ 2267.287527][T32534] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 2267.363418][T12202] usbhid 5-1:0.0: can't add hid device: -71
[ 2267.369410][T12202] usbhid: probe of 5-1:0.0 failed with error -71
[ 2267.379957][T12202] usb 5-1: USB disconnect, device number 24
[ 2267.487204][T32531] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 2267.679429][T10024] xt_CT: No such helper "snmp_trap"
[ 2267.832898][T32534] usb 3-1: device not accepting address 126, error -71
[ 2267.925675][T32531] usb 4-1: device descriptor read/64, error -71
[ 2268.020138][T10031] device vlan2 entered promiscuous mode
[ 2268.025597][T10031] device syz_tun entered promiscuous mode
[ 2268.362695][   T24] audit: type=1400 audit(2000000627.719:12954): avc:  denied  { mounton } for  pid=10037 comm="syz.0.11365" path="/63/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 2268.380437][T10039] 9pnet: Insufficient options for proto=fd
[ 2268.386012][T12202] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 2268.420728][T32531] usb 4-1: device descriptor read/64, error -71
[ 2268.630459][T32534] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 2268.658941][ T9179] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 2268.678298][T32531] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 2268.754571][T12202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2268.765336][T12202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2268.775089][T12202] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[ 2268.784228][T12202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.796073][T12202] usb 2-1: config 0 descriptor??
[ 2268.963764][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2268.974493][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2268.984038][T32534] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[ 2268.992830][T32534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2269.001223][T32534] usb 3-1: config 0 descriptor??
[ 2269.020839][ T9179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2269.030475][ T9179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2269.043047][ T9179] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 2269.052030][ T9179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2269.060585][ T9179] usb 1-1: config 0 descriptor??
[ 2269.068663][T32531] usb 4-1: device descriptor read/64, error -71
[ 2269.097739][ T9179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2269.309947][T12202] sony 0003:054C:0268.00D3: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[ 2269.321662][T12202] sony 0003:054C:0268.00D3: failed to claim input
[ 2269.581902][T32531] usb 4-1: device descriptor read/64, error -71
[ 2269.627283][   T24] audit: type=1400 audit(2000000629.052:12955): avc:  denied  { mounton } for  pid=10042 comm="syz.0.11366" path="/proc/206/task" dev="proc" ino=234824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 2269.664781][T10059] udc-core: couldn't find an available UDC or it's busy
[ 2269.672052][T10059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2269.706697][T32531] usb usb4-port1: attempt power cycle
[ 2269.856436][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11370'.
[ 2270.031330][T23707] device bridge_slave_1 left promiscuous mode
[ 2270.037422][T23707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2270.044809][T23707] device bridge_slave_0 left promiscuous mode
[ 2270.050788][T23707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2270.058468][T23707] device veth1_macvtap left promiscuous mode
[ 2270.064363][T23707] device veth0_vlan left promiscuous mode
[ 2270.706778][T32533] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2270.832422][ T9179] usb 2-1: USB disconnect, device number 125
[ 2271.034389][T10076] netlink: 'syz.1.11374': attribute type 4 has an invalid length.
[ 2271.359142][T32532] usb 1-1: USB disconnect, device number 10
[ 2271.386887][T10085] syz.2.11377[10085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.386947][T10085] syz.2.11377[10085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.398618][T32534] usbhid 3-1:0.0: can't add hid device: -71
[ 2271.432977][T32534] usbhid: probe of 3-1:0.0 failed with error -71
[ 2271.454490][T10085] syz.2.11377[10085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.454552][T10085] syz.2.11377[10085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2271.467107][T32533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2271.495474][T32534] usb 3-1: USB disconnect, device number 127
[ 2271.871343][T32533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2272.094561][T32533] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2272.103584][T32533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2272.112934][T32533] usb 5-1: config 0 descriptor??
[ 2272.519934][T32533] usbhid 5-1:0.0: can't add hid device: -71
[ 2272.529817][T32534] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 2272.541682][T10112] syz.0.11383[10112] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2272.542051][T10112] syz.0.11383[10112] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2272.572915][T32533] usbhid: probe of 5-1:0.0 failed with error -71
[ 2272.799616][T32533] usb 5-1: USB disconnect, device number 25
[ 2273.110186][   T24] audit: type=1400 audit(2000000632.716:12956): avc:  denied  { read } for  pid=10117 comm="syz.4.11386" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2273.150068][   T24] audit: type=1400 audit(2000000632.747:12957): avc:  denied  { open } for  pid=10117 comm="syz.4.11386" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2273.212631][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2273.228454][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2273.659804][T32534] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[ 2273.668772][T32534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.676642][T32534] usb 3-1: Product: syz
[ 2273.680651][T32534] usb 3-1: Manufacturer: syz
[ 2273.685018][T32534] usb 3-1: SerialNumber: syz
[ 2273.729824][T10125] syz.0.11385[10125] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2273.730268][T10125] syz.0.11385[10125] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2274.036015][T32534] usb 3-1: config 0 descriptor??
[ 2274.146427][T32534] snd-usb-audio: probe of 3-1:0.0 failed with error -90
[ 2274.435123][T32534] usb 3-1: USB disconnect, device number 2
[ 2275.157490][T10157] hub 6-0:1.0: USB hub found
[ 2275.171715][T10157] hub 6-0:1.0: 1 port detected
[ 2275.632232][T10160] xt_bpf: check failed: parse error
[ 2275.815557][T10166] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11398'.
[ 2276.018725][T10176] cgroup: release_agent respecified
[ 2276.262436][T32534] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 2276.578322][   T24] audit: type=1400 audit(2000000636.358:12958): avc:  denied  { write } for  pid=10183 comm="syz.4.11404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2276.622199][T32532] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2276.688860][T32534] usb 3-1: Using ep0 maxpacket: 16
[ 2276.822372][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 2276.833258][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2276.843127][T32534] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 2276.852219][T32534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2276.860350][T32532] usb 1-1: Using ep0 maxpacket: 16
[ 2276.866044][T32534] usb 3-1: config 0 descriptor??
[ 2276.974749][T32532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2276.985555][T32532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2276.995311][T32532] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2277.007943][T32532] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 2277.016763][T32535] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 2277.024215][T32532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2277.032893][T32532] usb 1-1: config 0 descriptor??
[ 2277.106088][T10162] udc-core: couldn't find an available UDC or it's busy
[ 2277.112915][T10162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2277.260466][T32535] usb 2-1: Using ep0 maxpacket: 16
[ 2277.356010][T10162] udc-core: couldn't find an available UDC or it's busy
[ 2277.362941][T10162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2277.374743][T32535] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2277.384959][T32535] usb 2-1: config 0 has no interfaces?
[ 2277.403628][T32534] hid (null): bogus close delimiter
[ 2277.410797][T32534] hid-generic 0003:0158:0100.00D4: unknown main item tag 0x0
[ 2277.424108][T32534] hid-generic 0003:0158:0100.00D4: unknown main item tag 0x0
[ 2277.438492][T32534] hid-generic 0003:0158:0100.00D4: bogus close delimiter
[ 2277.449999][T32534] hid-generic 0003:0158:0100.00D4: item 0 0 2 10 parsing failed
[ 2277.457726][T32534] hid-generic: probe of 0003:0158:0100.00D4 failed with error -22
[ 2277.490704][T32532] koneplus 0003:1E7D:2E22.00D5: item fetching failed at offset 0/2
[ 2277.498884][T32532] koneplus 0003:1E7D:2E22.00D5: parse failed
[ 2277.504780][T32532] koneplus: probe of 0003:1E7D:2E22.00D5 failed with error -22
[ 2277.536765][T32535] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f
[ 2277.545826][T32535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2277.553812][T32535] usb 2-1: Product: syz
[ 2277.557947][T32535] usb 2-1: Manufacturer: syz
[ 2277.562384][T32535] usb 2-1: SerialNumber: syz
[ 2277.571026][T32535] usb 2-1: config 0 descriptor??
[ 2277.620076][T12202] usb 3-1: USB disconnect, device number 3
[ 2277.682833][T32532] usb 1-1: USB disconnect, device number 11
[ 2277.811651][T10206] hub 6-0:1.0: USB hub found
[ 2277.816357][T10206] hub 6-0:1.0: 1 port detected
[ 2279.241324][T10235] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11415'.
[ 2279.403712][T32534] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 2279.592426][T10244] hub 6-0:1.0: USB hub found
[ 2279.597723][T10244] hub 6-0:1.0: 1 port detected
[ 2279.762604][T32532] usb 2-1: USB disconnect, device number 126
[ 2280.137241][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2280.148443][T32534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2280.158218][T32534] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[ 2280.167546][T32534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2280.176470][T32534] usb 3-1: config 0 descriptor??
[ 2280.285975][ T9179] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2280.682477][T10265] binder: 10261:10265 ioctl 4018620d 0 returned -22
[ 2280.692483][T10265] binder: 10261:10265 ioctl c0306201 0 returned -14
[ 2280.698997][T10265] binder: 10261:10265 ioctl c0306201 200002c0 returned -14
[ 2280.859777][   T24] audit: type=1400 audit(2000000640.841:12959): avc:  denied  { read write } for  pid=10254 comm="syz.1.11423" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2280.883501][   T24] audit: type=1400 audit(2000000640.841:12960): avc:  denied  { open } for  pid=10254 comm="syz.1.11423" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 2281.168046][ T9179] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2281.216005][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11427'.
[ 2281.227699][ T9179] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2281.236724][ T9179] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2281.833080][ T9179] usb 4-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5
[ 2281.871280][ T9179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2281.879693][ T9179] usb 4-1: Product: syz
[ 2281.884189][ T9179] usb 4-1: Manufacturer: syz
[ 2281.888803][ T9179] usb 4-1: SerialNumber: syz
[ 2281.909496][ T9179] usb 4-1: config 0 descriptor??
[ 2282.070854][ T9173] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 2282.156607][T32535] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2282.223320][T32534] usbhid 3-1:0.0: can't add hid device: -71
[ 2282.229141][T32534] usbhid: probe of 3-1:0.0 failed with error -71
[ 2282.237968][T32534] usb 3-1: USB disconnect, device number 4
[ 2282.337585][ T9173] usb 2-1: Using ep0 maxpacket: 16
[ 2282.470984][ T9173] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 2282.478819][ T9173] usb 2-1: config 0 has no interface number 0
[ 2282.484818][ T9173] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 2282.499554][T32535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2282.509792][T32535] usb 1-1: config 0 has no interfaces?
[ 2282.515059][T32535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2282.524002][T32535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2282.532601][T32535] usb 1-1: config 0 descriptor??
[ 2282.576038][T32534] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 2282.633215][ T9173] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[ 2282.642119][ T9173] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 2282.649921][ T9173] usb 2-1: Product: syz
[ 2282.653990][ T9173] usb 2-1: SerialNumber: syz
[ 2282.659033][ T9173] usb 2-1: config 0 descriptor??
[ 2282.690083][T10278] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 2282.833066][T32534] usb 3-1: device descriptor read/64, error -71
[ 2282.875366][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11431'.
[ 2282.966853][ T9173] usb 2-1: invalid MIDI in EP 0
[ 2282.971793][ T9173] snd-usb-audio: probe of 2-1:0.2 failed with error -22
[ 2282.979288][ T9173] usb 2-1: USB disconnect, device number 127
[ 2283.133741][ T9179] usb 4-1: USB disconnect, device number 108
[ 2283.455430][T32534] usb 3-1: device descriptor read/64, error -71
[ 2283.985819][T32534] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 2284.159166][T10316] binder: 10309:10316 ioctl 4018620d 0 returned -22
[ 2284.182509][T10316] binder: 10309:10316 ioctl c0306201 0 returned -14
[ 2284.190313][T10316] binder: 10309:10316 ioctl c0306201 200002c0 returned -14
[ 2284.205701][ T9179] usb 1-1: USB disconnect, device number 12
[ 2284.358079][   T24] audit: type=1400 audit(2000000644.526:12961): avc:  denied  { ioctl } for  pid=10318 comm="syz.0.11439" path="socket:[235912]" dev="sockfs" ino=235912 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2284.433057][T10324] xt_bpf: check failed: parse error
[ 2284.446386][   T24] audit: type=1400 audit(2000000644.610:12962): avc:  denied  { ioctl } for  pid=10321 comm="syz.3.11441" path="socket:[235226]" dev="sockfs" ino=235226 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 2284.471631][T32534] usb 3-1: device descriptor read/64, error -71
[ 2284.633354][ T9173] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 2284.841318][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11445'.
[ 2284.850199][ T9176] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 2284.852581][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11445'.
[ 2284.902271][ T9173] usb 2-1: device descriptor read/64, error -71
[ 2285.023870][T32534] usb 3-1: device descriptor read/64, error -71
[ 2285.080054][T10342] hub 6-0:1.0: USB hub found
[ 2285.085345][T10342] hub 6-0:1.0: 1 port detected
[ 2285.242781][T32534] usb usb3-port1: attempt power cycle
[ 2285.245492][ T9176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2285.261246][ T9176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2285.270867][ T9176] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[ 2285.279679][ T9176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2285.288228][ T9176] usb 4-1: config 0 descriptor??
[ 2285.319517][ T9173] usb 2-1: device descriptor read/64, error -71
[ 2285.523592][T10350] hub 6-0:1.0: USB hub found
[ 2285.528719][T10350] hub 6-0:1.0: 1 port detected
[ 2285.614572][ T9173] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2285.882224][ T9176] hid-rmi 0003:06CB:81A7.00D6: unknown main item tag 0x0
[ 2285.889686][ T9176] hid-rmi 0003:06CB:81A7.00D6: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0
[ 2285.900754][ T9173] usb 2-1: device descriptor read/64, error -71
[ 2286.071705][T12202] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2286.081323][ T9176] usb 4-1: USB disconnect, device number 109
[ 2286.272051][ T9173] usb 2-1: device descriptor read/64, error -71
[ 2286.386499][ T9173] usb usb2-port1: attempt power cycle
[ 2286.415044][T12202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2286.425871][T12202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2286.435449][T12202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2286.443303][T32534] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[ 2286.448013][T12202] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[ 2286.464384][T12202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2286.473088][T12202] usb 5-1: config 0 descriptor??
[ 2286.726753][T10364] hub 6-0:1.0: USB hub found
[ 2286.731370][T10364] hub 6-0:1.0: 1 port detected
[ 2286.786042][ T9173] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 2286.796041][T32534] usb 1-1: config 1 interface 0 altsetting 198 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 2286.806902][T32534] usb 1-1: config 1 interface 0 altsetting 198 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2286.819742][T32534] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2286.920550][T12202] logitech 0003:046D:C287.00D7: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0
[ 2286.931738][T12202] logitech 0003:046D:C287.00D7: no inputs found
[ 2286.957721][ T9173] usb 2-1: device descriptor read/8, error -71
[ 2286.976600][T32534] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40
[ 2286.985496][T32534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2286.993449][T32534] usb 1-1: Product: 㓖̝ြ팏ధ幾쀮ｽᲭ렶㤵۬눏ጚ藹讴칟臥掙팯㫚¨Ⴤ窴뾩茘≮ꩼ௅䆍욹爡⽻새칯㊧靕榣雏்쯟䊂á绁捛及
[ 2287.012189][T32534] usb 1-1: Manufacturer: 꽓춬唟⸏Ħ윲肛駓郲欚
[ 2287.019634][T32534] usb 1-1: SerialNumber: ࠒ
[ 2287.043348][T10356] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 2287.113268][T10352] udc-core: couldn't find an available UDC or it's busy
[ 2287.120077][T10352] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2287.128135][T12202] usb 5-1: USB disconnect, device number 26
[ 2287.243286][ T9173] usb 2-1: device descriptor read/8, error -71
[ 2287.463182][T10356] udc-core: couldn't find an available UDC or it's busy
[ 2287.470131][T10356] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2287.477720][   T24] audit: type=1400 audit(2000000647.791:12963): avc:  denied  { create } for  pid=10355 comm="syz.0.11451" dev="anon_inodefs" ino=236001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2287.529133][ T9173] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2287.553799][T10369] binder: 10366:10369 ioctl 4018620d 0 returned -22
[ 2287.564891][T10369] binder: 10366:10369 ioctl c0306201 0 returned -14
[ 2287.571861][T10369] binder: 10366:10369 ioctl c0306201 200002c0 returned -14
[ 2287.589979][   T24] audit: type=1400 audit(2000000647.791:12964): avc:  denied  { write } for  pid=10355 comm="syz.0.11451" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 2287.757662][ T9173] usb 2-1: device descriptor read/8, error -71
[ 2287.950444][T32534] usbhid 1-1:1.0: can't add hid device: -71
[ 2287.956294][T32534] usbhid: probe of 1-1:1.0 failed with error -71
[ 2287.963682][T32534] usb 1-1: USB disconnect, device number 13
[ 2288.024419][ T9173] usb 2-1: device descriptor read/8, error -71
[ 2288.148584][ T9173] usb usb2-port1: unable to enumerate USB device
[ 2288.615036][ T9173] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 2288.975739][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11460'.
[ 2289.291354][ T9173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2289.302467][ T9173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2289.312246][ T9173] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2289.321345][ T9173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.337759][ T9173] usb 4-1: config 0 descriptor??
[ 2289.351224][   T24] audit: type=1326 audit(2000000649.764:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.375167][   T24] audit: type=1326 audit(2000000649.764:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.399575][   T24] audit: type=1326 audit(2000000649.764:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.423219][   T24] audit: type=1326 audit(2000000649.764:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.446829][   T24] audit: type=1326 audit(2000000649.764:12969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.470901][   T24] audit: type=1326 audit(2000000649.764:12970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.494618][   T24] audit: type=1326 audit(2000000649.796:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.518503][   T24] audit: type=1326 audit(2000000649.796:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa27392def9 code=0x7ffc0000
[ 2289.729789][ T9173] usbhid 4-1:0.0: can't add hid device: -71
[ 2289.735732][ T9173] usbhid: probe of 4-1:0.0 failed with error -71
[ 2289.748652][ T9173] usb 4-1: USB disconnect, device number 110
[ 2291.082262][T32533] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 2291.244350][T32534] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 2291.339706][T32533] usb 5-1: device descriptor read/64, error -71
[ 2386.748258][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 2386.754686][    C1] rcu: 	1-...!: (10000 ticks this GP) idle=58a/1/0x4000000000000000 softirq=219895/219895 fqs=0 last_accelerate: 0d23/3433 dyntick_enabled: 1
[ 2386.768901][    C1] 	(t=10000 jiffies g=263645 q=115)
[ 2386.773936][    C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g263645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[ 2386.785351][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 2386.795154][    C1] rcu: RCU grace-period kthread stack dump:
[ 2386.800885][    C1] task:rcu_preempt     state:I stack:    0 pid:   13 ppid:     2 flags:0x00004000
[ 2386.809907][    C1] Call Trace:
[ 2386.813064][    C1]  __schedule+0xbe6/0x1330
[ 2386.817290][    C1]  ? release_firmware_map_entry+0x18d/0x18d
[ 2386.823014][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2386.828310][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[ 2386.832997][    C1]  ? _raw_spin_lock_irq+0xa5/0x1b0
[ 2386.837946][    C1]  schedule+0x13d/0x1d0
[ 2386.841935][    C1]  schedule_timeout+0x18c/0x360
[ 2386.846621][    C1]  ? prepare_to_swait_event+0x39f/0x3e0
[ 2386.852001][    C1]  ? console_conditional_schedule+0x10/0x10
[ 2386.857730][    C1]  ? run_local_timers+0x160/0x160
[ 2386.862596][    C1]  ? __note_gp_changes+0x2d8/0x6f0
[ 2386.867538][    C1]  rcu_gp_kthread+0xefc/0x23a0
[ 2386.872142][    C1]  ? dump_blkd_tasks+0x7e0/0x7e0
[ 2386.876927][    C1]  ? rcu_barrier_callback+0x50/0x50
[ 2386.881959][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[ 2386.886641][    C1]  ? __kasan_check_read+0x11/0x20
[ 2386.891497][    C1]  ? __kthread_parkme+0xb9/0x1c0
[ 2386.896534][    C1]  kthread+0x34b/0x3d0
[ 2386.900429][    C1]  ? rcu_barrier_callback+0x50/0x50
[ 2386.905463][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 2386.909886][    C1]  ret_from_fork+0x1f/0x30
[ 2386.914162][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 2386.919715][    C0] NMI backtrace for cpu 0
[ 2386.919723][    C0] CPU: 0 PID: 10430 Comm: syz.0.11472 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2386.919729][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2386.919733][    C0] RIP: 0010:kvm_wait+0xfc/0x150
[ 2386.919743][    C0] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 15 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 06 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04
[ 2386.919748][    C0] RSP: 0018:ffffc90000cf7680 EFLAGS: 00000246
[ 2386.919757][    C0] RAX: 0000000000000003 RBX: 1ffff9200019eed4 RCX: ffffffff8150b334
[ 2386.919762][    C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000cf76c0
[ 2386.919767][    C0] RBP: ffffc90000cf7730 R08: dffffc0000000000 R09: ffffed1023d99812
[ 2386.919771][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 2386.919776][    C0] R13: ffff88811eccc088 R14: 0000000000000003 R15: 0000000000000246
[ 2386.919782][    C0] FS:  00007fdc0230f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2386.919786][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2386.919791][    C0] CR2: 00007fdc0230ef98 CR3: 0000000117874000 CR4: 00000000003506b0
[ 2386.919796][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2386.919801][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2386.919805][    C0] Call Trace:
[ 2386.919807][    C0]  <NMI>
[ 2386.919811][    C0]  ? show_regs+0x58/0x60
[ 2386.919814][    C0]  ? nmi_cpu_backtrace+0x133/0x160
[ 2386.919817][    C0]  ? kvm_wait+0xfc/0x150
[ 2386.919821][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 2386.919825][    C0]  ? nmi_handle+0xa8/0x280
[ 2386.919828][    C0]  ? kvm_wait+0xfc/0x150
[ 2386.919832][    C0]  ? default_do_nmi+0x69/0x160
[ 2386.919835][    C0]  ? exc_nmi+0xad/0x100
[ 2386.919838][    C0]  ? end_repeat_nmi+0x16/0x31
[ 2386.919842][    C0]  ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 2386.919845][    C0]  ? kvm_wait+0xfc/0x150
[ 2386.919849][    C0]  ? kvm_wait+0xfc/0x150
[ 2386.919852][    C0]  ? kvm_wait+0xfc/0x150
[ 2386.919854][    C0]  </NMI>
[ 2386.919859][    C0]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2386.919862][    C0]  ? kvm_arch_para_hints+0x30/0x30
[ 2386.919866][    C0]  ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 2386.919870][    C0]  __pv_queued_spin_lock_slowpath+0x72f/0xc70
[ 2386.919874][    C0]  ? __pv_queued_spin_unlock_slowpath+0x280/0x280
[ 2386.919878][    C0]  _raw_spin_lock_bh+0x139/0x1b0
[ 2386.919882][    C0]  ? _raw_spin_lock_irq+0x1b0/0x1b0
[ 2386.919886][    C0]  ? selinux_socket_sendmsg+0x243/0x340
[ 2386.919890][    C0]  lock_sock_nested+0x92/0x300
[ 2386.919893][    C0]  ? sock_init_data+0xc0/0xc0
[ 2386.919897][    C0]  ? _raw_spin_unlock_bh+0x51/0x60
[ 2386.919900][    C0]  tipc_sendstream+0x47/0x70
[ 2386.919904][    C0]  ? tipc_getsockopt+0x790/0x790
[ 2386.919907][    C0]  ____sys_sendmsg+0x59e/0x8f0
[ 2386.919911][    C0]  ? __sys_sendmsg_sock+0x40/0x40
[ 2386.919914][    C0]  ? import_iovec+0xe5/0x120
[ 2386.919918][    C0]  ___sys_sendmsg+0x252/0x2e0
[ 2386.919921][    C0]  ? __sys_sendmsg+0x280/0x280
[ 2386.919925][    C0]  ? __handle_speculative_fault+0x10c1/0x1e90
[ 2386.919929][    C0]  ? finish_fault+0xaf0/0xaf0
[ 2386.919932][    C0]  ? __fdget+0x1bc/0x240
[ 2386.919936][    C0]  __se_sys_sendmsg+0x1b1/0x280
[ 2386.919939][    C0]  ? __x64_sys_sendmsg+0x90/0x90
[ 2386.919944][    C0]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2386.919948][    C0]  ? debug_smp_processor_id+0x17/0x20
[ 2386.919951][    C0]  __x64_sys_sendmsg+0x7b/0x90
[ 2386.919955][    C0]  do_syscall_64+0x34/0x70
[ 2386.919959][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2386.919962][    C0] RIP: 0033:0x7fdc036d7ef9
[ 2386.919972][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2386.919976][    C0] RSP: 002b:00007fdc0230f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2386.919984][    C0] RAX: ffffffffffffffda RBX: 00007fdc03890130 RCX: 00007fdc036d7ef9
[ 2386.919989][    C0] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000006
[ 2386.919994][    C0] RBP: 00007fdc0374a9f6 R08: 0000000000000000 R09: 0000000000000000
[ 2386.919999][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2386.920004][    C0] R13: 0000000000000001 R14: 00007fdc03890130 R15: 00007ffcc14e4078
[ 2386.920175][    C1] NMI backtrace for cpu 1
[ 2387.335634][    C1] CPU: 1 PID: 10428 Comm: syz.0.11472 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2387.346896][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2387.356786][    C1] Call Trace:
[ 2387.359911][    C1]  <IRQ>
[ 2387.362646][    C1]  dump_stack_lvl+0x1e2/0x24b
[ 2387.367115][    C1]  ? panic+0x812/0x812
[ 2387.371022][    C1]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 2387.376316][    C1]  ? cpumask_next+0x23/0x30
[ 2387.380659][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 2387.386558][    C1]  dump_stack+0x15/0x17
[ 2387.390571][    C1]  nmi_trigger_cpumask_backtrace+0x2b5/0x300
[ 2387.396381][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 2387.402322][    C1]  arch_trigger_cpumask_backtrace+0x10/0x20
[ 2387.408002][    C1]  rcu_dump_cpu_stacks+0x199/0x2b0
[ 2387.412944][    C1]  rcu_sched_clock_irq+0xf8a/0x1890
[ 2387.417977][    C1]  ? rcutree_dead_cpu+0x340/0x340
[ 2387.422837][    C1]  ? hrtimer_run_queues+0x15f/0x440
[ 2387.428250][    C1]  update_process_times+0x198/0x200
[ 2387.433271][    C1]  tick_sched_timer+0x188/0x240
[ 2387.437957][    C1]  ? tick_setup_sched_timer+0x480/0x480
[ 2387.443335][    C1]  __hrtimer_run_queues+0x3d7/0xa50
[ 2387.448370][    C1]  ? hrtimer_interrupt+0x8b0/0x8b0
[ 2387.453321][    C1]  ? clockevents_program_event+0x214/0x2c0
[ 2387.458956][    C1]  ? ktime_get_update_offsets_now+0x266/0x280
[ 2387.464863][    C1]  hrtimer_interrupt+0x39a/0x8b0
[ 2387.469634][    C1]  __sysvec_apic_timer_interrupt+0xfd/0x3c0
[ 2387.475360][    C1]  asm_call_irq_on_stack+0xf/0x20
[ 2387.480215][    C1]  </IRQ>
[ 2387.482998][    C1]  sysvec_apic_timer_interrupt+0x85/0xe0
[ 2387.488464][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2387.494282][    C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x17
[ 2387.501744][    C1] Code: 41 51 41 52 41 53 e8 cb 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 5d c3 90 55 48 89 e5 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 03 5a 5d c3 56 0f b6 f0 e8 bc ff ff ff 5e 5a 5d c3 0f 1f
[ 2387.521182][    C1] RSP: 0018:ffffc90000ec6a10 EFLAGS: 00000246
[ 2387.527085][    C1] RAX: 0000000000000001 RBX: ffffc90000ec6e94 RCX: dffffc0000000000
[ 2387.534896][    C1] RDX: 0000000000000000 RSI: 0000000036e8ef59 RDI: ffffc90000ec6e94
[ 2387.542708][    C1] RBP: ffffc90000ec6a18 R08: ffffffff8498f075 R09: 0000000000000003
[ 2387.550518][    C1] R10: fffff520001d8d38 R11: dffffc0000000001 R12: dffffc0000000000
[ 2387.558330][    C1] R13: ffffc90000ec6e80 R14: 0000000036e8ef59 R15: ffffc90000ec6e80
[ 2387.566163][    C1]  ? tipc_sk_rcv+0x305/0x1e30
[ 2387.570666][    C1]  _raw_spin_unlock_bh+0x41/0x60
[ 2387.575434][    C1]  tipc_sk_rcv+0x489/0x1e30
[ 2387.579773][    C1]  ? __stack_depot_save+0x468/0x4d0
[ 2387.584806][    C1]  ? kasan_set_track+0x5d/0x70
[ 2387.589402][    C1]  ? kasan_set_track+0x4b/0x70
[ 2387.594079][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2387.599307][    C1]  ? tipc_node_xmit+0x34b/0xe30
[ 2387.603987][    C1]  ? tipc_sk_filter_rcv+0x1da8/0x3e00
[ 2387.609192][    C1]  ? tipc_sk_rcv+0x8a1/0x1e30
[ 2387.613840][    C1]  ? ____fput+0x15/0x20
[ 2387.617842][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2387.622767][    C1]  ? trie_delete_elem+0x59a/0x760
[ 2387.627629][    C1]  ? kfree_skbmem+0x104/0x170
[ 2387.632140][    C1]  ? bpf_trace_run2+0xf4/0x280
[ 2387.636737][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2387.641248][    C1]  ? kfree_skbmem+0x104/0x170
[ 2387.645763][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2387.651141][    C1]  ? __bpf_trace_kmem_free+0x6f/0x90
[ 2387.656266][    C1]  ? kmem_cache_free+0x1c0/0x1e0
[ 2387.661036][    C1]  ? kfree_skbmem+0x104/0x170
[ 2387.665551][    C1]  tipc_node_xmit_skb+0x153/0x1b0
[ 2387.670435][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2387.675362][    C1]  ? trace_tipc_sk_rej_msg+0x2b/0x6f0
[ 2387.680569][    C1]  tipc_sk_rcv+0x1c0b/0x1e30
[ 2387.684996][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2387.689942][    C1]  ? trie_delete_elem+0x59a/0x760
[ 2387.694801][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2387.699749][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2387.704263][    C1]  ? stack_trace_save+0x1c0/0x1c0
[ 2387.709119][    C1]  ? __kernel_text_address+0x9b/0x110
[ 2387.714326][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2387.719710][    C1]  ? __kasan_check_write+0x14/0x20
[ 2387.724661][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2387.729952][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[ 2387.734636][    C1]  tipc_sk_filter_rcv+0x1da8/0x3e00
[ 2387.739681][    C1]  ? tipc_sk_dump+0xf50/0xf50
[ 2387.744185][    C1]  ? __kasan_check_write+0x14/0x20
[ 2387.749134][    C1]  ? _raw_spin_lock_bh+0xa4/0x1b0
[ 2387.753992][    C1]  ? kmem_cache_free+0xa9/0x1e0
[ 2387.758679][    C1]  tipc_sk_rcv+0x8a1/0x1e30
[ 2387.763017][    C1]  ? __bpf_trace_kmem_free+0x6f/0x90
[ 2387.768147][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2387.773087][    C1]  ? tipc_sk_filter_rcv+0x3583/0x3e00
[ 2387.778295][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2387.782804][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2387.788187][    C1]  tipc_node_distr_xmit+0x36a/0x4d0
[ 2387.793222][    C1]  ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 2387.798255][    C1]  ? __kasan_check_write+0x14/0x20
[ 2387.803201][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2387.808494][    C1]  ? __tipc_shutdown+0xe7c/0x1510
[ 2387.813355][    C1]  tipc_sk_backlog_rcv+0x18b/0x210
[ 2387.818326][    C1]  ? tipc_sk_timeout+0xab0/0xab0
[ 2387.823078][    C1]  __release_sock+0x148/0x410
[ 2387.827592][    C1]  release_sock+0x65/0x1b0
[ 2387.831842][    C1]  tipc_release+0xb6b/0x1440
[ 2387.836269][    C1]  sock_close+0xdf/0x270
[ 2387.840343][    C1]  ? sock_mmap+0xa0/0xa0
[ 2387.844427][    C1]  __fput+0x33d/0x7b0
[ 2387.848245][    C1]  ____fput+0x15/0x20
[ 2387.852063][    C1]  task_work_run+0x129/0x190
[ 2387.856492][    C1]  exit_to_user_mode_loop+0xbf/0xd0
[ 2387.861524][    C1]  syscall_exit_to_user_mode+0xa2/0x1a0
[ 2387.866904][    C1]  do_syscall_64+0x40/0x70
[ 2387.871158][    C1]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2387.876887][    C1] RIP: 0033:0x7fdc036d7ef9
[ 2387.881139][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2387.900580][    C1] RSP: 002b:00007fdc02351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2387.908824][    C1] RAX: 0000000000000000 RBX: 00007fdc0388ff80 RCX: 00007fdc036d7ef9
[ 2387.916634][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 2387.924445][    C1] RBP: 00007fdc0374a9f6 R08: 0000000000000000 R09: 0000000000000000
[ 2387.932255][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2387.940068][    C1] R13: 0000000000000000 R14: 00007fdc0388ff80 R15: 00007ffcc14e4078
[ 2531.957307][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 118s! [syz.0.11472:10428]
[ 2531.965534][    C1] Modules linked in:
[ 2531.969273][    C1] CPU: 1 PID: 10428 Comm: syz.0.11472 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2531.980545][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2531.990459][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60
[ 2531.996435][    C1] Code: 45 08 65 48 8b 0d 70 c4 97 7e 65 8b 15 75 c4 97 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 dc 0a 00 00 00 74 2c <8b> 91 b8 0a 00 00 83 fa 02 75 21 48 8b 91 c0 0a 00 00 48 8b 32 48
[ 2532.016477][    C1] RSP: 0018:ffffc90000ec6a30 EFLAGS: 00000246
[ 2532.022377][    C1] RAX: ffffffff84990549 RBX: 0000000000000005 RCX: ffff88810e80e2c0
[ 2532.030191][    C1] RDX: 0000000000000201 RSI: 0000000000000005 RDI: 0000000000000000
[ 2532.038087][    C1] RBP: ffffc90000ec6a30 R08: ffffffff8499053c R09: ffffed1023d99811
[ 2532.045898][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 2532.053710][    C1] R13: ffff88811eccc000 R14: 0000000036e8ef59 R15: ffffc90000ec6e80
[ 2532.061521][    C1] FS:  00007fdc023516c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 2532.070287][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2532.076710][    C1] CR2: 00007fdc043c1d60 CR3: 0000000117874000 CR4: 00000000003506a0
[ 2532.084522][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2532.092331][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2532.100142][    C1] Call Trace:
[ 2532.103266][    C1]  <IRQ>
[ 2532.105999][    C1]  ? show_regs+0x58/0x60
[ 2532.110043][    C1]  ? watchdog_timer_fn+0x471/0x590
[ 2532.114986][    C1]  ? proc_watchdog_cpumask+0xd0/0xd0
[ 2532.120108][    C1]  ? __hrtimer_run_queues+0x3d7/0xa50
[ 2532.125315][    C1]  ? hrtimer_interrupt+0x8b0/0x8b0
[ 2532.130262][    C1]  ? clockevents_program_event+0x214/0x2c0
[ 2532.135901][    C1]  ? ktime_get_update_offsets_now+0x266/0x280
[ 2532.141806][    C1]  ? hrtimer_interrupt+0x39a/0x8b0
[ 2532.146756][    C1]  ? __sysvec_apic_timer_interrupt+0xfd/0x3c0
[ 2532.152655][    C1]  ? asm_call_irq_on_stack+0xf/0x20
[ 2532.157687][    C1]  </IRQ>
[ 2532.160466][    C1]  ? sysvec_apic_timer_interrupt+0x85/0xe0
[ 2532.166105][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2532.172096][    C1]  ? tipc_sk_rcv+0x17cc/0x1e30
[ 2532.176694][    C1]  ? tipc_sk_rcv+0x17d9/0x1e30
[ 2532.181296][    C1]  ? __sanitizer_cov_trace_pc+0x30/0x60
[ 2532.186678][    C1]  tipc_sk_rcv+0x17d9/0x1e30
[ 2532.191103][    C1]  ? __stack_depot_save+0x468/0x4d0
[ 2532.196137][    C1]  ? kasan_set_track+0x5d/0x70
[ 2532.200734][    C1]  ? kasan_set_track+0x4b/0x70
[ 2532.205356][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2532.210636][    C1]  ? tipc_node_xmit+0x34b/0xe30
[ 2532.215320][    C1]  ? tipc_sk_filter_rcv+0x1da8/0x3e00
[ 2532.220529][    C1]  ? tipc_sk_rcv+0x8a1/0x1e30
[ 2532.225041][    C1]  ? ____fput+0x15/0x20
[ 2532.229032][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2532.233983][    C1]  ? trie_delete_elem+0x59a/0x760
[ 2532.238839][    C1]  ? kfree_skbmem+0x104/0x170
[ 2532.243354][    C1]  ? bpf_trace_run2+0xf4/0x280
[ 2532.247949][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2532.252907][    C1]  ? kfree_skbmem+0x104/0x170
[ 2532.257418][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2532.262800][    C1]  ? __bpf_trace_kmem_free+0x6f/0x90
[ 2532.267920][    C1]  ? kmem_cache_free+0x1c0/0x1e0
[ 2532.272693][    C1]  ? kfree_skbmem+0x104/0x170
[ 2532.277205][    C1]  tipc_node_xmit_skb+0x153/0x1b0
[ 2532.282067][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2532.287012][    C1]  ? trace_tipc_sk_rej_msg+0x2b/0x6f0
[ 2532.292222][    C1]  tipc_sk_rcv+0x1c0b/0x1e30
[ 2532.296654][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2532.301611][    C1]  ? trie_delete_elem+0x59a/0x760
[ 2532.306459][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2532.311407][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2532.315921][    C1]  ? stack_trace_save+0x1c0/0x1c0
[ 2532.320776][    C1]  ? __kernel_text_address+0x9b/0x110
[ 2532.325987][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2532.331416][    C1]  ? __kasan_check_write+0x14/0x20
[ 2532.336313][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2532.341606][    C1]  ? _raw_spin_lock+0x1b0/0x1b0
[ 2532.346295][    C1]  tipc_sk_filter_rcv+0x1da8/0x3e00
[ 2532.351336][    C1]  ? tipc_sk_dump+0xf50/0xf50
[ 2532.355838][    C1]  ? __kasan_check_write+0x14/0x20
[ 2532.360787][    C1]  ? _raw_spin_lock_bh+0xa4/0x1b0
[ 2532.365647][    C1]  ? kmem_cache_free+0xa9/0x1e0
[ 2532.370336][    C1]  tipc_sk_rcv+0x8a1/0x1e30
[ 2532.374673][    C1]  ? __bpf_trace_kmem_free+0x6f/0x90
[ 2532.379957][    C1]  ? __skb_queue_purge+0x180/0x180
[ 2532.384884][    C1]  ? tipc_sk_filter_rcv+0x3583/0x3e00
[ 2532.390185][    C1]  tipc_node_xmit+0x34b/0xe30
[ 2532.394696][    C1]  ? tipc_node_get_linkname+0x190/0x190
[ 2532.400082][    C1]  tipc_node_distr_xmit+0x36a/0x4d0
[ 2532.405113][    C1]  ? tipc_node_xmit_skb+0x1b0/0x1b0
[ 2532.410141][    C1]  ? __kasan_check_write+0x14/0x20
[ 2532.415087][    C1]  ? _raw_spin_lock_irqsave+0xf9/0x210
[ 2532.420380][    C1]  ? __tipc_shutdown+0xe7c/0x1510
[ 2532.425245][    C1]  tipc_sk_backlog_rcv+0x18b/0x210
[ 2532.430191][    C1]  ? tipc_sk_timeout+0xab0/0xab0
[ 2532.435051][    C1]  __release_sock+0x148/0x410
[ 2532.439564][    C1]  release_sock+0x65/0x1b0
[ 2532.443815][    C1]  tipc_release+0xb6b/0x1440
[ 2532.448242][    C1]  sock_close+0xdf/0x270
[ 2532.452321][    C1]  ? sock_mmap+0xa0/0xa0
[ 2532.456399][    C1]  __fput+0x33d/0x7b0
[ 2532.460219][    C1]  ____fput+0x15/0x20
[ 2532.464036][    C1]  task_work_run+0x129/0x190
[ 2532.468462][    C1]  exit_to_user_mode_loop+0xbf/0xd0
[ 2532.473497][    C1]  syscall_exit_to_user_mode+0xa2/0x1a0
[ 2532.478876][    C1]  do_syscall_64+0x40/0x70
[ 2532.483132][    C1]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2532.488868][    C1] RIP: 0033:0x7fdc036d7ef9
[ 2532.493125][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2532.512558][    C1] RSP: 002b:00007fdc02351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2532.520795][    C1] RAX: 0000000000000000 RBX: 00007fdc0388ff80 RCX: 00007fdc036d7ef9
[ 2532.528614][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 2532.536417][    C1] RBP: 00007fdc0374a9f6 R08: 0000000000000000 R09: 0000000000000000
[ 2532.544228][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2532.552040][    C1] R13: 0000000000000000 R14: 00007fdc0388ff80 R15: 00007ffcc14e4078
[ 2532.559870][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 2532.565424][    C0] NMI backtrace for cpu 0
[ 2532.565431][    C0] CPU: 0 PID: 10430 Comm: syz.0.11472 Tainted: G        W         5.10.223-syzkaller-00011-g1c5354a314ea #0
[ 2532.565437][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2532.565442][    C0] RIP: 0010:kvm_wait+0xfc/0x150
[ 2532.565452][    C0] Code: 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 15 56 d5 03 f4 eb 0e 0f 1f 44 00 00 0f 00 2d 06 56 d5 03 fb f4 <4c> 89 7c 24 18 ff 74 24 18 9d 48 c7 44 24 20 0e 36 e0 45 49 c7 04
[ 2532.565456][    C0] RSP: 0018:ffffc90000cf7680 EFLAGS: 00000246
[ 2532.565464][    C0] RAX: 0000000000000003 RBX: 1ffff9200019eed4 RCX: ffffffff8150b334
[ 2532.565470][    C0] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000cf76c0
[ 2532.565475][    C0] RBP: ffffc90000cf7730 R08: dffffc0000000000 R09: ffffed1023d99812
[ 2532.565480][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 2532.565485][    C0] R13: ffff88811eccc088 R14: 0000000000000003 R15: 0000000000000246
[ 2532.565490][    C0] FS:  00007fdc0230f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2532.565495][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2532.565500][    C0] CR2: 00007fdc0230ef98 CR3: 0000000117874000 CR4: 00000000003506b0
[ 2532.565505][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2532.565510][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2532.565513][    C0] Call Trace:
[ 2532.565516][    C0]  <NMI>
[ 2532.565519][    C0]  ? show_regs+0x58/0x60
[ 2532.565523][    C0]  ? nmi_cpu_backtrace+0x133/0x160
[ 2532.565526][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565530][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 2532.565533][    C0]  ? nmi_handle+0xa8/0x280
[ 2532.565536][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565539][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565543][    C0]  ? default_do_nmi+0x69/0x160
[ 2532.565546][    C0]  ? exc_nmi+0xad/0x100
[ 2532.565549][    C0]  ? end_repeat_nmi+0x16/0x31
[ 2532.565553][    C0]  ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 2532.565557][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565560][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565563][    C0]  ? kvm_wait+0xfc/0x150
[ 2532.565566][    C0]  </NMI>
[ 2532.565570][    C0]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2532.565574][    C0]  ? kvm_arch_para_hints+0x30/0x30
[ 2532.565578][    C0]  ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70
[ 2532.565581][    C0]  __pv_queued_spin_lock_slowpath+0x72f/0xc70
[ 2532.565586][    C0]  ? __pv_queued_spin_unlock_slowpath+0x280/0x280
[ 2532.565589][    C0]  _raw_spin_lock_bh+0x139/0x1b0
[ 2532.565593][    C0]  ? _raw_spin_lock_irq+0x1b0/0x1b0
[ 2532.565597][    C0]  ? selinux_socket_sendmsg+0x243/0x340
[ 2532.565600][    C0]  lock_sock_nested+0x92/0x300
[ 2532.565603][    C0]  ? sock_init_data+0xc0/0xc0
[ 2532.565607][    C0]  ? _raw_spin_unlock_bh+0x51/0x60
[ 2532.565610][    C0]  tipc_sendstream+0x47/0x70
[ 2532.565614][    C0]  ? tipc_getsockopt+0x790/0x790
[ 2532.565617][    C0]  ____sys_sendmsg+0x59e/0x8f0
[ 2532.565620][    C0]  ? __sys_sendmsg_sock+0x40/0x40
[ 2532.565624][    C0]  ? import_iovec+0xe5/0x120
[ 2532.565627][    C0]  ___sys_sendmsg+0x252/0x2e0
[ 2532.565630][    C0]  ? __sys_sendmsg+0x280/0x280
[ 2532.565634][    C0]  ? __handle_speculative_fault+0x10c1/0x1e90
[ 2532.565638][    C0]  ? finish_fault+0xaf0/0xaf0
[ 2532.565641][    C0]  ? __fdget+0x1bc/0x240
[ 2532.565644][    C0]  __se_sys_sendmsg+0x1b1/0x280
[ 2532.565648][    C0]  ? __x64_sys_sendmsg+0x90/0x90
[ 2532.565652][    C0]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 2532.565656][    C0]  ? debug_smp_processor_id+0x17/0x20
[ 2532.565659][    C0]  __x64_sys_sendmsg+0x7b/0x90
[ 2532.565663][    C0]  do_syscall_64+0x34/0x70
[ 2532.565666][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2532.565670][    C0] RIP: 0033:0x7fdc036d7ef9
[ 2532.565679][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2532.565683][    C0] RSP: 002b:00007fdc0230f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2532.565692][    C0] RAX: ffffffffffffffda RBX: 00007fdc03890130 RCX: 00007fdc036d7ef9
[ 2532.565697][    C0] RDX: 0000000000000000 RSI: 0000000020002700 RDI: 0000000000000006
[ 2532.565702][    C0] RBP: 00007fdc0374a9f6 R08: 0000000000000000 R09: 0000000000000000
[ 2532.565707][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2532.565712][    C0] R13: 0000000000000001 R14: 00007fdc03890130 R15: 00007ffcc14e4078