last executing test programs:

14.519639498s ago: executing program 0 (id=1650):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa600000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa600000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000c8e3e2ae5af153a162fe3fdefce0a8dad4cc6c30f9f46bed97412a4e965f52c8f99eedc0dc22b118d2c3ce161d95b48f6808e6cde7615e8842ecc9651e23c4b4fff49c512f0b8b5f635e1abc1205b4511ee4afff56e0579bd540953efbd2bf3f11d030dd838a954931c4e989d06f91256afe8f244a5987e3517462b4d403dbd6560fcc6400dc435f0d668c8d0321dfbbe635b62a8356d18e3f", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000008c0)=0x5, 0x4)
sendto$packet(r4, &(0x7f0000000e40)="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", 0x10d, 0x404a085, &(0x7f0000000540)={0x11, 0x1c, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r4, &(0x7f0000000e40)="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", 0x10d, 0x404a085, &(0x7f0000000540)={0x11, 0x1c, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff020}]}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff020}]})
getpid() (async)
getpid()
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYRESHEX=r2], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYRESHEX=r2], 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x808092, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c757466383d302c636865636b3d7374726963742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861057365743d63703935302c636f6465706167653d3836362c73686f72746e616d613d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c73686f72746e616d653d6c6f7765722c533894ec7bb23139e408d8757466383d312c696f636861727365743d63703835372c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c757466383d302c7375626a5f757365723d"], 0x1, 0x2d3, &(0x7f0000000a40)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x808092, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2d3, &(0x7f0000000a40)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq")
r6 = syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000004c0)='./file0\x00', 0x3002801, &(0x7f0000000500)={[], [{@context={'context', 0x3d, 'system_u'}}, {@flag='posixacl'}]}, 0x0, 0x647, &(0x7f00000014c0)="$eJzs3V1vFF0dAPD/TLcvtGoLMVG8EBJjIFFaWsAQYyLcE4Ivd3pTaSFIoYTWaAkJJcEbE++8IPHKC/FjSMItX8ALE+OVMSFGuZAn5GGfzHRnO93Olu3L7pbt75cMPWemO+cM8N9z5uw5swEcWacjYjoiTkbEgyRisnSslv+Z5r+U/d7b/z6+mW1J1Os/+U8Sj58k6+VzJY2fE40Xfz65sevE0PZyV9Ye3Z1fWlp82MjPrN57MLOy9ujcnXvztxdvL96f+97c5UsXL12ePb/by9nieCl97dkvfz35u+s/+/Mf3yezf/n79SSuZFeXy66r9bWjuym5sjKno77hXXl/9vd6eZ/nPiz+P1n8P9mUtO7gUMtiYDgivhaTMVT615yM3/6orxUDuqqeRNFGAUdOsqf4Hzv4igA9VvQDinv7qvvgChV39MCn5s3VjQGpjdgfjogi/muNwbSxfGxg/G2yZZwniYhdjcy1kZXx+tX1Z9kWbcbhgO5Yf1qMcre2/0kem1MxlufG36Zb4j8tbdn+H++m0JHNZOuAvfiH3ll/GhFfb7T/I7Gb+K9FKf5/scfyxT8AAAAAAAAcnJdXI+K7VfP/0ub8n5GK+T8TEXHlAMr/+Od/abFELzmA4oCSN1cjflA5/7cIu5gaauS+nM8HGE5u3VlaPB8RX4mIszE8muVnW86bltLnfn/ieZEeafm98vy/bMvKf/2qPL04/XetZSHuwvzqvHcD2L83TyO+kc//PdXYs3X+T9b+JxXtfxbfDzos48S3X9wo5+v1+pMiXR3/G3OBge6q/yniTGX7v9nAJjs/n2Mm7w/MFL2C7b75vrTQqIX4h/7J2v/x9vHf7Hk3n9ezsrvzZ/39C2u1duHfQfxX9/9Hkp8ORel+4jfzq6sPZyNGkmvb98/trs4wqIp4KOIli/+z39p5/K/Z/y/iMI04FhHrnRVZiw8T/2x3UPsP/ZPF/8LO/f+ppNH+R97+NzsCHSfmXkz9NT9TxXPhbnTU/l/M2/SzjT35+B/QkG7b02mA9qW6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJSyPiS5Gk0810mk5PR0xExFdjPF1aXln9zq3lX91fyI7l3/+fFt/0O7mRT4rv/5+KGI5Gfm4j3zx+IeLK8Yj4w9CxPD99c3lpod8XDwAAAAAAAAAAAAAAAAAAAIfERL7mvz7auv4/86+hftcO6Lpa4+dH4n2sF3UBequ251fWRw+0IkDPZfE/0u9KAH3Refs/3NV6AL3XPv7fva/ninySlI/+r8v1Arqvg/Zfww8Dao/jfz4ehAFQEf+n+1EPoNd27No/b6Z8+g8Dae+f/wMAAAAAAIfQ8VMv/5ZExPr3j+VblJYCmfMHgy3tdwWAvjGHF46u2nK/awD0i3t8YHNd/2f1quPtZ/8n3akQAAAAAAAAAAAAALDNmZPW/8NRtfP6f3P7YZDtsP6/Kvg9LgAGSPuv/tD2w6Bzjw98rLXvaP2/NxMAAAAAAAAAAAAA6K6xR3fnl5YWH66s7TMREf+oJxH7PU+bxM8rDv2wS2V1NbE+fyiqcaCJD90583BEHI4L7HWieARHH6vR5/clAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6YsAAAD//9fMKYA=")
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(r6, &(0x7f0000000180)='./file1\x00', 0x543200, 0x40) (async)
openat(r6, &(0x7f0000000180)='./file1\x00', 0x543200, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
syz_clone(0x1600, &(0x7f0000000180)="ccf91d3b564228955bdad1586169e0127fafb8ae21e0", 0x16, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@quota}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="181839903e2a0000527600"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="181839903e2a0000527600"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000076aa3e51e5bb000000", @ANYRES32=r9, @ANYRES16=r6, @ANYRES64=r3, @ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000076aa3e51e5bb000000", @ANYRES32=r9, @ANYRES16=r6, @ANYRES64=r3, @ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94)

13.472470265s ago: executing program 4 (id=1653):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))

11.199540005s ago: executing program 0 (id=1659):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r5, 0x9, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1b0a000, 0x1000, 0x20000, 0x1}, 0x20)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r8 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r8, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x4004000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

10.911244279s ago: executing program 1 (id=1660):
keyctl$assume_authority(0x10, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000030000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) (async)
setitimer(0x0, 0x0, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r5=>0x0}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async)
r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_kernel_module_request\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x4050)

10.016344874s ago: executing program 4 (id=1661):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

10.005585705s ago: executing program 1 (id=1662):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x6c, 0x50a, &(0x7f0000000900)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffcf)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x5, 0x5)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100003052bbd7000269d020000000000", @ANYRES32=0x0, @ANYBLOB="d5c0010041800400140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x4050)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

9.808295571s ago: executing program 0 (id=1664):
open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
userfaultfd(0x80001)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)

9.658859124s ago: executing program 4 (id=1665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2})

8.352414593s ago: executing program 1 (id=1666):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000280))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,size=0'])
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file4\x00', 0x0, &(0x7f0000000c40)={[{@nocheckpoint_merge}, {@four_active_logs}, {@gc_merge}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@inline_dentry}, {@compress_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0x778)

6.94749612s ago: executing program 0 (id=1667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200000000007f00000000000000000000000000000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000a00)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=r7], 0x40}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200), 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="669b50434f6f52f5bf3aa1c1bcf2c9aff4cb888cc6e5463a7b0dfa82809a3a08bb8ffc74a3096df14ea9be8167bac5dd8296f7cb96fc84704bf1a54058d1af6132da6ec75108691eea11f580705ae13122155d045a03434035de4017a9f2e71b8fb6399d0000bcfcba0602341ac00c225cfd01e0479dddf286c4e6aff2f3349332f115a754524b59ebdf85c26d9735ce3fe620", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r9, &(0x7f00000077c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, r10, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x4}}, 0x50)

6.069204483s ago: executing program 3 (id=1668):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r11 = dup(r10)
sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) (fail_nth: 24)
recvmmsg(r11, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)

5.600179823s ago: executing program 0 (id=1669):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000014, 0x4010, 0xffffffffffffffff, 0x1000)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000618c2100080000033b82022a709bf6dd15c71466fb4d0095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x7, 0x10441, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @value}, 0x50)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e)
syz_usb_control_io$hid(r3, 0x0, 0x0)

5.565768885s ago: executing program 4 (id=1670):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001300)={'gretap0\x00', &(0x7f0000001280)={'sit0\x00', <r3=>0x0, 0x8, 0x7, 0x4, 0x7fc0000, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x64, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010101, {[@noop, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@rand_addr=0x9, 0x5}]}, @cipso={0x86, 0x14, 0x3, [{0x2, 0x6, "38a3c6a4"}, {0x2, 0x8, "60bb8c61e8a2"}]}]}}}}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = dup(0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r10}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xa}, @ldst={0x1, 0x3, 0x6, 0x0, 0x8, 0xc, 0xffffffffffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ldst={0x73d57036b4b19431, 0x1, 0x1, 0x0, 0x3, 0x40, 0x10}, @call={0x85, 0x0, 0x0, 0x19}, @generic={0x5, 0x6, 0x4, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x19, &(0x7f0000000080)=""/25, 0x40f00, 0x45, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x8, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[r2, r2, r5, r2, r2], &(0x7f0000000200)=[{0x0, 0x5, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
syz_usb_control_io(r8, &(0x7f0000000c40)={0x2c, &(0x7f0000000a40)={0x10, 0x5, 0x100, {0x100, 0x23, "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"}}, &(0x7f0000000980)={0x0, 0x3, 0x38, @string={0x38, 0x3, "e2f1d22bb701d0d42418faead1a865c3f1d9a88e549c8201260f15c31f816a238a938207ca7ef55cdda01edea4ab6c97e0baca4e1c9f"}}, &(0x7f0000000b80)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0xc, 0x2}]}}, &(0x7f0000000bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x5, 0x2, "0841761f", "6f872410"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x60, 0xe, 0x9, 0xff, 0xc3, 0x19e2}}}, &(0x7f0000001140)={0x84, &(0x7f0000000c80)={0x0, 0x1, 0x1b, "2e1fc3f986f8ea574ebfcb5a257d42d480c0ad8209670998382a74"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x200, 0x8, [0xf000]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x31}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "a8cb"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6}, &(0x7f0000001000)={0x40, 0x19, 0x2, "dc8c"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x9}})
writev(r12, &(0x7f0000000900)=[{&(0x7f00000004c0)="4555c379cc69e04bf0332155de1a266f2e2f2fe2c48c58671430d02d5221acd424df699aa90058e15a308ef2d26815ef482499e53255de3c77a393824212331bbc368d8fd1f80d932c9601b29080772e3cec0defc8cda46042e14b47b1d511b9353fe245ff28aca59fb4f4f1deda4d053f130f9fd4e2abded9f97efab9ecb4f894ee42193469df378e755a2ef710281d306e253a30da1c86022470f2e6526ea45c38a31f364fc113ad5f9e734b31625eb30408fce1ee4911a65c8e923f2e935a8655e5d5f5df48361d55e6d1ee05863d183af467f8015a84d64db64bd006", 0xde}, {&(0x7f00000005c0)="bb6a910af6ac95edb90ca21653a29d4732df9d680f6d1b02fdf3823b9e319927af1e417200c19d0f3949750c344c7c0cbbe4e099c8f8f4ab55836527698bb940cac2cede5a5fe8af7bae51608d6afce5e45adacf99049814ae366a321e04d5f66a96fd885fe34a7d71567c53f4fed5b815dc1ef7fd166e8960c1757b9a3b8dd24f9e0e10287735270ca2ac0732b0dfc70c98d0327b5fcd", 0x97}, {&(0x7f0000000680)="bd468e9dbab812e10fb004450339bddd3e59e7f1d1d1721a94c42a9032b0329bad62143cfd1a3fe3f2b0571e148d9a97a5765e2da99b7e93e21354f79df1ea09fdf690d5d621cc52b289d4f2580ebe03ea4b2fa0e9e8ad5c87df76e34c0e7d38ea81d85a188cb569e885c15b6ce0b33fe5665e16ffcc0a89470908565ab6baa61e4b6bd1d3985720c2fd950eebf098871adef27544c79d652ab18039e3d349f033e55571dfdd6137fcf0c571d38ebbcb6ace6e45cfdab596d546277805808543a742f0e63ee988b21ea7575d4659aeb40fb4eb4e89986aa42dec2fb2758c0d8b906755d2432a7b8ea988d74906a1aab6a0", 0xf1}, {&(0x7f0000000780)="6abd0232629a69908b66", 0xa}, {&(0x7f00000007c0)="cdb406d5bf30a641d18a5cb9fe136ec4265c7ee6de51f713648f41bda7cd401f508d02ae075e01eb8dd2bdbcc9b1e42b2ed94378e9272eacc054b861f6d9e1487b871762e97ec3920abffa9651e6dce8d7449614e9306c279535b3cc518db8bcd7002834d72ac690f0beae71c268ac30fba9f68a87b1f09ac3a1485d9151a52537d4027237702ac096cb1b04b9542ef150aeca84d8a15301b146a7b4487f2ac649724cfc99ac725a09f9b75739ba1bde396b938a19d2c830fe4b4a472045069b7091bddd8a4547a1ccf2bc66bf8d275afbe58d2e70c9251b2e147260434d30efade6857639b6ab162dadcdc1aed58397c4b3d2dfff", 0xf5}, {&(0x7f00000008c0)="7180cbf55c250fdd091c5a4b347fd010bdf9514006154a9a8238b1ecb91a0a76dbd5237168347da1", 0x28}], 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x8, "8200279ea983"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5.398399769s ago: executing program 1 (id=1671):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, 0x0)

5.239229013s ago: executing program 2 (id=1673):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x131}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x53)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

5.144322381s ago: executing program 3 (id=1674):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r5, 0x9, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1b0a000, 0x1000, 0x20000, 0x1}, 0x20)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r8 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r8, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x4004000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

5.02757594s ago: executing program 2 (id=1675):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

4.076191149s ago: executing program 2 (id=1676):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x80)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x7ff, 0x8})
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xff, 0x105001)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r2=>0x0}, &(0x7f0000000340)=0xc)
r3 = getgid()
r4 = getpgid(0xffffffffffffffff)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)="351bc549a2d2c1478b4d8a69add2", 0xe}, {&(0x7f00000001c0)="fcd450f36315ce89d698111eef42ea4ff163998f64a7bd57e4d78d331538af1852f002c61655df58d8d5710c9efa299379ef76fd0053266efd65738880586f1442ca23", 0x43}, {&(0x7f0000000240)="1a2b7cefc0c3cb868dda1cc4ca0c283c27022869ad9be549aa185887fe78df42b510e9f75eef7033b506ccb4cb468aae5f0e02ae995ca18dca094bb116feb63f57910d9a23f4b030e9749d8b62b03c15d4f08ccb1426d7d109bdfd5f057a9e", 0x5f}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x40, 0x8001}}], 0x1, 0x4000000)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004}, 0x40000c0)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), r1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x1)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000880), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'sit0\x00', <r11=>0x0, 0x40, 0x8000, 0x2, 0x1, {{0x1f, 0x4, 0x2, 0x8, 0x7c, 0x68, 0x0, 0xc7, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x88, 0x5, "59932c"}, @generic={0x82, 0x8, "2b1d95e7031c"}, @ssrr={0x89, 0x1f, 0x3e, [@private=0xa010101, @empty, @remote, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x82, [@dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @multicast2, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @empty]}, @lsrr={0x83, 0x1b, 0x83, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010101, @multicast1, @multicast2, @rand_addr=0x64010102]}]}}}}})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a00)={<r12=>0x0, @rand_addr, @private}, &(0x7f0000000a40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'ip_vti0\x00', <r14=>0x0, 0x40, 0x20, 0x1, 0x7fffffff, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x7, [{@empty, 0x7}]}, @timestamp={0x44, 0x24, 0xc2, 0x0, 0x2, [0x1, 0x9, 0x1, 0x101, 0x4, 0x9, 0x4, 0x1]}, @cipso={0x86, 0x12, 0x0, [{0x7, 0x4, "bc2f"}, {0x0, 0x5, "8788d9"}, {0x5, 0x3, 'w'}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', <r15=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'veth0_to_batadv\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000c00)={'wg1\x00', <r17=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', <r18=>0x0, 0x1, 0x40, 0x0, 0x2, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0xb, 0xdd, [@empty, @rand_addr=0x64010101]}]}}}}})
getsockname$packet(r1, &(0x7f0000000cc0)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d40)={'team0\x00', <r20=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000d80)={'wg1\x00', <r21=>0x0})
getsockname$packet(r1, &(0x7f0000000dc0)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e40)={'team0\x00', <r23=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c80)={&(0x7f0000001cc0)={0xf98, r9, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x21c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xa, 0x8000}, {0x2957, 0x0, 0x2, 0x902}, {0x7, 0x7, 0x3, 0x6}, {0x3ff, 0xfa, 0x0, 0x3}, {0x6, 0x10, 0x1, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x278, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x7, 0x1, 0x6}, {0x9, 0x0, 0x2, 0x2e0e2b5f}, {0x7, 0x9, 0x6, 0x7}, {0x8, 0x9, 0xc, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xee7}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5a}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfc01, 0xb, 0x8, 0x76c}, {0x9, 0x94, 0x8, 0xd6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff3, 0xfc, 0x8, 0x3ff}, {0x1, 0x0, 0x6, 0x800}, {0x5, 0x7, 0x7, 0x5}, {0x1000, 0x7, 0x5}, {0x3, 0x9, 0x5e, 0xc3}, {0x9, 0x7, 0x6, 0x9}, {0x398e, 0xf2, 0x6, 0x6}]}}}]}}]}, 0xf98}, 0x1, 0x0, 0x0, 0x4010}, 0x80)

3.884334846s ago: executing program 2 (id=1677):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
socket$netlink(0x10, 0x3, 0x8000000004)
write(r4, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d0000", 0x1b)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d6141767461700000008c0035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)

3.855183478s ago: executing program 3 (id=1678):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000000)=0x1000})
chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0)

3.719860669s ago: executing program 3 (id=1679):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)

1.488337766s ago: executing program 1 (id=1680):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4040, &(0x7f0000000440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffffe}}, {@data_err_abort}]}, 0xd, 0x5ee, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlN52bktvf0xhPp/ktjPn3Ok509vvPWdOz5kbQGUNpl9qEfsjYjqJ6E/mF/M6I8scXHjegz8/Ops+kqjXX/s9iSRLy5+fZN/7soN7IuLHH5LY17Gy3Jm5axfHp6Ymr2b7w7OXpodn5q4dvnBp/Pzk+cnLoy+Mnjh+7PiJkSNtndf1grTTN999v/+TsTe/+eqvZOTbX8aSOBkvZ09ceh6bZTAGG7+TZGVW34nNLqwkHdnfydKXOOkssUKsS/76dUXE/6I/OuLhi9cfH79SauWALVVPIupARSXiHyoq7wfk1/bLr4NrpfRKgO1w/9TCAMDK+O9cGBuMnsbYwO4HSSwd1kkior2RuWZ7IuLunbGb5+6M3YwtGocDis3fiIj/F8V/0oj/geiJgUb815riP+0XnMm+p+mvtln+8qFi8Q/bZyH+e1aN/2gR/28tif+32yx/8OHmO71N8d/b7ikBAAAAAABAZd0+FRHPF/3/v7Y4/ycK5v/0RcTJTSh/cNn+yv//1+5tQjFAgfunIl4qnP9by2f/DnRkW/9qzAfoSs5dmJo8EhH/johD0bUr3R9ZpYzDn+77slXeYDb/L3+k5d/N5gJm9bjXuav5mInx2fGNnjcQcf9GxFOF83+TxfY/KWj/0/eD6UcsY9+zt860yls7/oGtUv864mBh+//wrhXJ6vfnGG70B4bzXsFKT3/42Xetym83/t1iAjYubf93rx7/A8nS+/XMrL+Mo3Od9VZ57fb/u5PXG7ec6c7SPhifnb06EtGdnO5IU5vSR9dfZ3gS5fGQx0sa/4eeWX38r6j/3xsR88t+dvJH85ri3H//7vu1VX30/6E8afxPrKv9X//G6K2B71uV/2jt/7FGW38oSzH+Bwu+yMO0ezGpK/1SEI55892UVUadAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBxV4uIPZHUhha3a7WhoYi+iPhP7K5NXZmZfe7clfcuT6R5jc//r+Wf9Nu/sJ/kn/8/sGR/dNn+0YjYGxGfd/Q29ofOXpmaKPvkAQAAAAAAAAAAAAAAAAAAYIfoa7H+P/VbR9m1A7ZcZ9kVAEpTEP8/lVEPYPtp/6G6xD9Ul/iH6hL/UF1txv+Nza4HsP20/1Bd4h+qS/wDAAAAAMATZe+B2z8nETH/Ym/jkerO8rpKrRmw1WplVwAojVv8QHW1NfXHmwY8EVzjA8ka+T0tD1rryNVMn93AwQAAAAAAAAAAAABQOQf3W/8PVWX9P1SXpbxQXfn6/wMl1wPYfq7xgVhjJX/h+v81jwIAAAAAAAAAAAAANtPM3LWL41NTk1dtvLHRn9O1E85iXRv1ev16+lewU+rzmG/kU+F3Sn2WbeRr/R7tqPLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BAAA//+dCiTh")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x402901) (async)
r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x402901)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) (async)
mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5, 0x0, 0x6}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x671bb82ff18bace6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') (async)
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')
chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00')
umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3)
sched_setaffinity(0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x0, 0x0)
r8 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000006)

1.483274406s ago: executing program 2 (id=1681):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000280))
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0])
chdir(&(0x7f0000000140)='./file0\x00')
pwrite64(r0, &(0x7f0000000180)="297bd8009f63ec750d14cc6559fdb35ca5509b3e53e3a8ba77466aaa46586ddf0c49735dc7c6088ec5477b680eb8756c9f71c9db2f61309837b4917f25876171ce4b8b9b273ebbc0a9e00d215d912e9814bbf7bd05e7bbc1ca60a6d216f18c1fcc3bf090885bdca0e65b16550810bbb0512b5dd009134f88c498fbcec0ffe6dcf640e9debe80cf9d66f7ea18", 0x8c, 0x385b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0x778)

1.482997656s ago: executing program 2 (id=1682):
pipe2$9p(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000040007020000f0ffffffb703000008020000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x6, &(0x7f0000000300)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r7, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
ptrace(0x8, r6)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0)
unshare(0x6020400)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0x47a, &(0x7f0000000900)="$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")

1.482748526s ago: executing program 0 (id=1683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4b}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000760000000000180100002020702500000000002000020000f8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.477811376s ago: executing program 1 (id=1684):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r2, r3, 0x0)
sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e113", 0x7c}, {&(0x7f00000003c0)="5a268f4785bba0774702365bf4469155da654cbe1ea17e28716b296b91c331d001fdb2018e7f32be7178d9e28e4f62931f6fe1209a7ec4edbc9e8791150d3b53dd0568cfa9755b27e0", 0x49}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x5c3}], 0x1}}], 0x2, 0x0)

992.654027ms ago: executing program 4 (id=1685):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
r0 = timerfd_create(0x0, 0x80800)
read(r0, &(0x7f0000000400)=""/190, 0xbe)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x4000)

416.245595ms ago: executing program 3 (id=1686):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

7.148489ms ago: executing program 3 (id=1687):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = geteuid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000380)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/loop'}}, {@euid_gt={'euid>', r0}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@measure}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f9000000000100000001000000000000009a00000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

0s ago: executing program 4 (id=1688):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r5, 0x9, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1b0a000, 0x1000, 0x20000, 0x1}, 0x20)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r8 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r8, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x4004000)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9.783595][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.792640][ T5348] device bridge_slave_0 left promiscuous mode
[  939.841940][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.869792][ T5348] device veth1_macvtap left promiscuous mode
[  939.885371][ T5348] device veth0_vlan left promiscuous mode
[  939.954307][ T5410] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  940.434349][ T5410] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  940.454244][ T5410] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  940.463292][ T5410] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  940.481179][ T5410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.714811][ T5410] usb 1-1: config 0 descriptor??
[  941.357572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  941.395804][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  941.437363][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  941.473613][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  941.513345][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.520261][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  941.572033][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  941.604787][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  941.642396][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.649311][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  941.688067][   T15] usb 1-1: USB disconnect, device number 32
[  941.717472][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  941.752916][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  941.796135][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  941.810422][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  941.839386][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  941.859061][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  941.869714][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  941.878380][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  941.888423][ T6865] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  941.913596][ T6811] device veth0_vlan entered promiscuous mode
[  941.950158][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  941.962499][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  941.992343][ T6811] device veth1_macvtap entered promiscuous mode
[  942.020264][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  942.034776][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  942.044404][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  942.203584][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  942.352444][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  942.484328][   T24] audit: type=1326 audit(1729274362.691:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.582639][   T24] audit: type=1326 audit(1729274362.691:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.679125][   T24] audit: type=1326 audit(1729274362.691:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.703016][   T24] audit: type=1326 audit(1729274362.691:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.727237][   T24] audit: type=1326 audit(1729274362.691:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.750550][   T24] audit: type=1326 audit(1729274362.691:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.794280][ T5925] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  942.794320][   T24] audit: type=1326 audit(1729274362.691:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  942.794378][   T24] audit: type=1326 audit(1729274362.691:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b32246ff9 code=0x7ffc0000
[  943.156899][ T5925] usb 5-1: Using ep0 maxpacket: 32
[  943.275066][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  943.351262][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  943.460402][ T5925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  943.694273][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.782375][ T5925] usb 5-1: config 0 descriptor??
[  943.976992][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'.
[  944.000310][ T6884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  944.007387][ T6884] IPv6: NLM_F_CREATE should be set when creating new route
[  944.034992][ T6884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6884 comm=syz.1.1355
[  944.064893][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'.
[  944.571664][   T24] audit: type=1326 audit(1729274364.781:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  944.584334][ T5925] usbhid 5-1:0.0: can't add hid device: -71
[  944.614421][ T5925] usbhid: probe of 5-1:0.0 failed with error -71
[  944.621254][   T24] audit: type=1326 audit(1729274364.811:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  944.634391][ T5925] usb 5-1: USB disconnect, device number 29
[  945.489014][  T600] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  945.527868][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'.
[  946.574365][  T600] usb 2-1: Using ep0 maxpacket: 16
[  946.696358][  T600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.766788][  T600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.777622][  T600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  946.791134][  T600] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  946.807138][  T600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.834655][  T600] usb 2-1: config 0 descriptor??
[  946.844374][   T15] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  946.910903][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[  947.779856][   T24] kauditd_printk_skb: 44 callbacks suppressed
[  947.779892][   T24] audit: type=1326 audit(1729274367.991:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  947.841056][   T24] audit: type=1326 audit(1729274367.991:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  947.896713][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.903789][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.914509][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.921573][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.928637][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.938200][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.945489][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  947.952641][   T24] audit: type=1326 audit(1729274368.021:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  948.010421][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  948.026989][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  948.034143][  T600] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  948.072342][   T24] audit: type=1326 audit(1729274368.021:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  948.110262][  T600] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001E/input/input13
[  948.141865][   T24] audit: type=1326 audit(1729274368.021:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69ba481bfb code=0x7ffc0000
[  948.185787][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.197599][   T24] audit: type=1326 audit(1729274368.021:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69ba481bfb code=0x7ffc0000
[  948.208571][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  948.221238][   T24] audit: type=1326 audit(1729274368.031:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f69ba4b40e5 code=0x7ffc0000
[  948.253949][   T24] audit: type=1326 audit(1729274368.231:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  948.262829][  T600] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  948.289020][   T15] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  948.294292][   T24] audit: type=1326 audit(1729274368.231:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ba481ff9 code=0x7ffc0000
[  948.306521][  T600] usb 2-1: USB disconnect, device number 23
[  948.344391][ T5925] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  948.670717][   T24] audit: type=1400 audit(1729274368.231:1256): avc:  denied  { setopt } for  pid=6942 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  948.815074][ T5925] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  949.062861][   T15] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  949.071801][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.095430][ T5925] usb 3-1: config 0 has no interface number 0
[  949.114308][ T5925] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.144230][ T5925] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.202802][   T15] usb 5-1: config 0 descriptor??
[  949.309322][ T6963] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  949.324673][ T6963] SELinux: failed to load policy
[  949.364424][ T5925] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  949.373405][ T5925] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  949.381508][ T5925] usb 3-1: Manufacturer: syz
[  949.387744][ T5925] usb 3-1: config 0 descriptor??
[  949.394287][  T324] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  949.755464][  T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.809454][  T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.957845][  T324] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[  950.029233][  T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.111707][ T6973] 9pnet: Could not find request transport: r
[  950.117670][  T324] usb 4-1: config 0 descriptor??
[  950.144399][   T15] usbhid 5-1:0.0: can't add hid device: -71
[  950.150485][   T15] usbhid: probe of 5-1:0.0 failed with error -71
[  950.159244][   T15] usb 5-1: USB disconnect, device number 30
[  950.164349][ T5925] usbhid 3-1:0.18: can't add hid device: -71
[  950.171797][ T5925] usbhid: probe of 3-1:0.18 failed with error -71
[  950.181954][ T5925] usb 3-1: USB disconnect, device number 26
[  950.214321][  T442] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  950.514253][   T15] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  950.534254][ T5925] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  950.584389][  T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.595385][  T442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.605055][  T442] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  950.613946][  T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.623147][  T442] usb 1-1: config 0 descriptor??
[  950.774249][ T5925] usb 3-1: Using ep0 maxpacket: 8
[  950.844370][  T324] usbhid 4-1:0.0: can't add hid device: -71
[  950.850322][  T324] usbhid: probe of 4-1:0.0 failed with error -71
[  950.858313][  T324] usb 4-1: USB disconnect, device number 37
[  950.884501][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.894425][ T5925] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  950.895657][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.906125][ T5925] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  950.916480][   T15] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  950.925659][ T5925] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  950.936271][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.943136][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.953197][   T15] usb 5-1: config 0 descriptor??
[  951.164701][  T442] usbhid 1-1:0.0: can't add hid device: -71
[  951.170781][  T442] usbhid: probe of 1-1:0.0 failed with error -71
[  951.179290][  T442] usb 1-1: USB disconnect, device number 33
[  951.244535][ T5925] usb 3-1: string descriptor 0 read error: -71
[  951.251071][ T5925] hub 3-1:32.0: USB hub found
[  951.324356][   T15] usbhid 5-1:0.0: can't add hid device: -71
[  951.330493][   T15] usbhid: probe of 5-1:0.0 failed with error -71
[  951.347204][   T15] usb 5-1: USB disconnect, device number 31
[  951.444374][ T5925] hub 3-1:32.0: config failed, can't read hub descriptor (err -22)
[  951.497236][ T5925] usb 3-1: USB disconnect, device number 27
[  951.541049][ T6985] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1378'.
[  952.377235][ T6991] input: syz0 as /devices/virtual/input/input14
[  953.239958][ T3167] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  953.282358][   T24] kauditd_printk_skb: 11 callbacks suppressed
[  953.282390][   T24] audit: type=1400 audit(1729274373.491:1268): avc:  denied  { view } for  pid=6992 comm="syz.0.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  953.614418][ T3167] usb 5-1: Using ep0 maxpacket: 8
[  953.744412][ T3167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.770242][ T3167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.807284][   T24] audit: type=1400 audit(1729274374.021:1269): avc:  denied  { accept } for  pid=7006 comm="syz.2.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  953.832584][ T3167] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  953.842516][ T3167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.433403][ T3167] usb 5-1: config 0 descriptor??
[  954.602842][   T24] audit: type=1326 audit(1729274374.811:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  954.674341][   T24] audit: type=1326 audit(1729274374.851:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  954.898267][   T24] audit: type=1326 audit(1729274374.851:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.199067][   T24] audit: type=1326 audit(1729274374.851:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.437866][   T24] audit: type=1326 audit(1729274374.851:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.480016][ T3167] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0
[  955.491468][   T24] audit: type=1326 audit(1729274374.851:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.519047][ T3167] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0
[  955.537087][ T3167] saitek 0003:06A3:0CCD.001F: item fetching failed at offset 2/11
[  955.554827][ T7035] udc-core: couldn't find an available UDC or it's busy
[  955.566620][ T3167] saitek 0003:06A3:0CCD.001F: parse failed
[  955.573326][ T3167] saitek: probe of 0003:06A3:0CCD.001F failed with error -22
[  955.581119][ T7035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  955.655939][   T24] audit: type=1326 audit(1729274374.851:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.707474][ T3167] usb 5-1: USB disconnect, device number 32
[  955.720640][   T24] audit: type=1326 audit(1729274374.851:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  955.800191][ T7040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7040 comm=syz.0.1392
[  955.878496][ T7042] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1391'.
[  956.680802][ T7047] binder: 7045:7047 ioctl c018620c 200002c0 returned -22
[  957.114229][ T3167] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  957.484436][ T3167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.500838][ T3167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  957.534291][ T3167] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  957.566725][ T3167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.606366][ T3167] usb 5-1: config 0 descriptor??
[  957.666235][ T7049] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1)
[  957.714156][ T7049] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  957.738503][ T7049] F2FS-fs (loop2): invalid crc value
[  957.755450][ T7049] F2FS-fs (loop2): Found nat_bits in checkpoint
[  957.854969][ T7049] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  957.863019][ T7049] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  957.870038][ T7049] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  957.900071][ T7046] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[  957.994241][  T600] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  958.020406][ T7052] overlayfs: failed to resolve './file0': -2
[  958.463257][   T24] kauditd_printk_skb: 20 callbacks suppressed
[  958.463289][   T24] audit: type=1326 audit(1729274378.671:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.515398][   T24] audit: type=1326 audit(1729274378.681:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.539524][   T24] audit: type=1326 audit(1729274378.711:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.577388][   T24] audit: type=1326 audit(1729274378.711:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.624384][  T600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  958.634544][   T24] audit: type=1326 audit(1729274378.721:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.651904][  T600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  958.658451][   T24] audit: type=1326 audit(1729274378.721:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.691176][   T24] audit: type=1326 audit(1729274378.721:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.703103][  T600] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  958.723480][   T24] audit: type=1326 audit(1729274378.721:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.750011][  T600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.764352][   T24] audit: type=1326 audit(1729274378.721:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  958.768015][  T600] usb 2-1: config 0 descriptor??
[  958.814484][   T24] audit: type=1326 audit(1729274378.721:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.3.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  959.244266][  T320] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  959.252113][ T6101] attempt to access beyond end of device
[  959.252113][ T6101] loop2: rw=2049, want=45104, limit=40427
[  959.394386][  T600] usbhid 2-1:0.0: can't add hid device: -71
[  959.400553][  T600] usbhid: probe of 2-1:0.0 failed with error -71
[  959.429859][  T600] usb 2-1: USB disconnect, device number 24
[  959.637744][ T7091] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1404'.
[  959.784892][  T320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  959.838301][  T320] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  960.025271][  T320] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  960.067385][  T320] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  960.162294][  T320] usb 1-1: Product: syz
[  960.334951][  T320] usb 1-1: config 0 descriptor??
[  960.494375][ T3167] usbhid 5-1:0.0: can't add hid device: -71
[  960.510461][ T3167] usbhid: probe of 5-1:0.0 failed with error -71
[  960.524381][ T3167] usb 5-1: USB disconnect, device number 33
[  960.601836][  T600] usb 1-1: USB disconnect, device number 34
[  961.616864][ T7101] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)!
[  961.645013][ T7108] fuse: Unknown parameter ''
[  961.650715][ T7101] EXT4-fs (loop4): group descriptors corrupted!
[  961.715642][ T7111] fuse: Unknown parameter '���O�g4�'
[  963.614299][   T24] kauditd_printk_skb: 11 callbacks suppressed
[  963.614383][   T24] audit: type=1400 audit(1729274383.661:1319): avc:  denied  { mount } for  pid=7124 comm="syz.4.1412" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  963.664279][   T24] audit: type=1400 audit(1729274383.661:1320): avc:  denied  { remount } for  pid=7124 comm="syz.4.1412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  964.061436][   T24] audit: type=1400 audit(1729274384.271:1321): avc:  denied  { unmount } for  pid=6811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  964.145993][   T24] audit: type=1400 audit(1729274384.341:1322): avc:  denied  { create } for  pid=7132 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  964.563267][ T7138] netlink: 'syz.4.1415': attribute type 32 has an invalid length.
[  965.702292][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'.
[  966.514855][ T7143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7143 comm=syz.0.1417
[  966.531034][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'.
[  966.964256][  T442] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  966.972508][   T24] audit: type=1400 audit(1729274387.181:1323): avc:  denied  { nlmsg_tty_audit } for  pid=7159 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  967.174302][ T3167] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  967.796412][ T7167] 9pnet: Insufficient options for proto=fd
[  968.183850][  T442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.193991][  T442] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  968.211102][  T442] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  968.224417][  T442] usb 4-1: New USB device found, idVendor=074f, idProduct=b653, bcdDevice= 0.00
[  968.233296][  T442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.254259][ T3167] usb 5-1: device descriptor read/64, error -71
[  968.261639][  T442] usb 4-1: config 0 descriptor??
[  968.282397][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.289741][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.315593][  T442] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  968.354697][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.361625][ T7178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  968.368852][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.375760][ T7178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  968.444461][ T7185] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  968.455496][ T7185] FAT-fs (loop5): unable to read boot sector
[  968.536736][ T7178] device bridge0 entered promiscuous mode
[  969.130078][ T5925] usb 4-1: USB disconnect, device number 38
[  969.240183][   T24] audit: type=1326 audit(1729274389.451:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.282310][   T24] audit: type=1326 audit(1729274389.491:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.322047][   T24] audit: type=1326 audit(1729274389.491:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.364344][   T24] audit: type=1326 audit(1729274389.491:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.424231][ T3167] usb 5-1: device descriptor read/64, error -71
[  969.431550][   T24] audit: type=1326 audit(1729274389.491:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.473732][   T24] audit: type=1326 audit(1729274389.491:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.560044][   T24] audit: type=1326 audit(1729274389.491:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.596211][   T24] audit: type=1326 audit(1729274389.491:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.620288][   T24] audit: type=1326 audit(1729274389.491:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  969.709619][ T7202] netlink: 'syz.0.1431': attribute type 32 has an invalid length.
[  969.923711][   T24] audit: type=1326 audit(1729274389.491:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  970.524278][ T3167] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  970.563738][ T7210] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=bsdgroups" or missing value
[  971.455866][ T7218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  971.563565][ T7218] overlayfs: conflicting lowerdir path
[  971.752789][ T7223] 9pnet: Insufficient options for proto=fd
[  972.214392][    T5] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  972.433645][ T7240] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  972.474259][    T5] usb 1-1: Using ep0 maxpacket: 16
[  972.494315][  T600] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  972.604324][    T5] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32
[  972.613093][    T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.623285][    T5] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 255
[  972.744267][  T600] usb 5-1: Using ep0 maxpacket: 8
[  972.765006][  T320] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  972.816558][ T7249] netlink: 'syz.3.1443': attribute type 32 has an invalid length.
[  973.165086][  T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  973.176647][  T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  973.190066][  T320] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  973.201131][  T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.368979][  T320] usb 2-1: config 0 descriptor??
[  973.517006][    T5] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40
[  973.526869][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.535043][    T5] usb 1-1: Product: syz
[  973.539100][    T5] usb 1-1: Manufacturer: syz
[  973.543484][    T5] usb 1-1: SerialNumber: syz
[  973.556161][  T600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  973.684438][  T600] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  973.693690][  T600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  973.701744][  T600] usb 5-1: SerialNumber: syz
[  973.730418][  T600] usb 5-1: config 0 descriptor??
[  973.775571][  T600] uvcvideo: Found UVC 0.00 device <unnamed> (05ac:8501)
[  974.010123][  T600] uvcvideo: No streaming interface found for terminal 36.
[  974.327512][ T3167] usb 1-1: USB disconnect, device number 35
[  975.159693][   T24] kauditd_printk_skb: 5 callbacks suppressed
[  975.159731][   T24] audit: type=1400 audit(1729274395.371:1339): avc:  denied  { map } for  pid=7261 comm="syz.2.1445" path="socket:[44740]" dev="sockfs" ino=44740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  975.218714][ T7264] 9pnet: Insufficient options for proto=fd
[  975.404253][ T5401] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  975.764450][ T5401] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  975.778660][ T5401] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  975.791889][ T5401] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  975.802208][ T5401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.824369][ T7260] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  975.831433][   T24] audit: type=1400 audit(1729274396.041:1340): avc:  denied  { getopt } for  pid=7277 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  976.102650][ T7286] device batadv_slave_0 entered promiscuous mode
[  976.193776][ T5925] usb 5-1: USB disconnect, device number 36
[  976.427506][  T320] usb 2-1: string descriptor 0 read error: -71
[  976.450004][   T24] audit: type=1326 audit(1729274396.661:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  976.454346][  T320] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71
[  976.482008][  T320] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71
[  976.490688][  T320] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71
[  976.503248][  T320] uclogic 0003:256C:006D.0020: failed probing parameters: -71
[  976.512380][  T320] uclogic: probe of 0003:256C:006D.0020 failed with error -71
[  976.550584][ T7301] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1454'.
[  976.575047][  T320] usb 2-1: USB disconnect, device number 25
[  976.585580][   T24] audit: type=1326 audit(1729274396.691:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.234398][   T24] audit: type=1326 audit(1729274396.691:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.410737][   T24] audit: type=1326 audit(1729274396.691:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.504322][   T24] audit: type=1326 audit(1729274396.691:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.564443][   T24] audit: type=1326 audit(1729274396.691:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.631536][   T24] audit: type=1326 audit(1729274396.691:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  977.674555][ T7312] fuse: Bad value for 'fd'
[  977.678974][ T7312] fuse: Bad value for 'fd'
[  977.683411][ T7312] fuse: Bad value for 'fd'
[  977.684249][   T24] audit: type=1326 audit(1729274396.691:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.0.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126a94ff9 code=0x7ffc0000
[  978.954207][    T5] Bluetooth: hci0: command 0x1003 tx timeout
[  978.974501][  T371] Bluetooth: hci0: sending frame failed (-49)
[  979.223962][ T7306] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  979.231956][ T7306] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  979.364864][ T7306] F2FS-fs (loop2): Found nat_bits in checkpoint
[  979.414406][ T5401] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  979.423625][ T5401] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15
[  979.457006][ T5401] usb 4-1: USB disconnect, device number 39
[  979.474255][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  980.160484][ T7306] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  980.214423][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  980.214479][   T24] audit: type=1326 audit(1729274400.291:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  980.245082][ T7331] FAULT_INJECTION: forcing a failure.
[  980.245082][ T7331] name failslab, interval 1, probability 0, space 0, times 0
[  980.264307][ T7306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  980.294334][ T7331] CPU: 1 PID: 7331 Comm: syz.3.1464 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[  980.305460][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  980.311312][   T24] audit: type=1326 audit(1729274400.321:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  980.315346][ T7331] Call Trace:
[  980.315385][ T7331]  dump_stack_lvl+0x1e2/0x24b
[  980.315418][ T7331]  ? panic+0x812/0x812
[  980.315475][ T7331]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  980.353118][   T24] audit: type=1326 audit(1729274400.341:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  980.355305][ T7331]  dump_stack+0x15/0x17
[  980.355359][ T7331]  should_fail+0x3c6/0x510
[  980.386727][ T7331]  ? __alloc_skb+0x80/0x510
[  980.391065][ T7331]  __should_failslab+0xa4/0xe0
[  980.395670][ T7331]  should_failslab+0x9/0x20
[  980.400004][ T7331]  kmem_cache_alloc+0x3d/0x2e0
[  980.404604][ T7331]  __alloc_skb+0x80/0x510
[  980.408775][ T7331]  ? kmem_cache_alloc+0x168/0x2e0
[  980.412522][ T7306] overlayfs: invalid origin (0000)
[  980.413638][ T7331]  ? audit_log_start+0x48c/0x9b0
[  980.413695][ T7331]  audit_log_start+0x4ae/0x9b0
[  980.427955][ T7331]  ? audit_serial+0x30/0x30
[  980.432297][ T7331]  ? avc_has_perm+0x275/0x400
[  980.434354][   T24] audit: type=1326 audit(1729274400.361:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  980.436813][ T7331]  ? avc_has_perm_noaudit+0x240/0x240
[  980.436872][ T7331]  audit_seccomp+0x61/0x1e0
[  980.469541][ T7331]  __seccomp_filter+0xd03/0x1e10
[  980.474310][ T7331]  ? __secure_computing+0x300/0x300
[  980.479337][ T7331]  ? check_kill_permission+0x2ef/0x490
[  980.484642][ T7331]  ? __task_pid_nr_ns+0x1d8/0x270
[  980.489496][ T7331]  ? do_send_specific+0xf7/0x110
[  980.494268][ T7331]  ? __se_sys_rt_tgsigqueueinfo+0x30c/0x620
[  980.500005][ T7331]  ? __x64_sys_rt_tgsigqueueinfo+0xb0/0xb0
[  980.505645][ T7331]  ? fput+0x1a/0x20
[  980.509281][ T7331]  ? ksys_write+0x260/0x2c0
[  980.513652][ T7331]  __secure_computing+0xf0/0x300
[  980.518412][ T7331]  syscall_enter_from_user_mode+0xbf/0x1a0
[  980.524040][ T7331]  do_syscall_64+0x13/0x70
[  980.528298][ T7331]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  980.534098][ T7331] RIP: 0033:0x7f682c7e7a3c
[  980.538361][ T7331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  980.557801][ T7331] RSP: 002b:00007f682b441030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  980.566046][ T7331] RAX: ffffffffffffffda RBX: 00007f682c9a1058 RCX: 00007f682c7e7a3c
[  980.574036][ T7331] RDX: 000000000000000f RSI: 00007f682b4410a0 RDI: 0000000000000005
[  980.581841][ T7331] RBP: 00007f682b441090 R08: 0000000000000000 R09: 0000000000000000
[  980.589675][ T7331] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  980.597481][ T7331] R13: 0000000000000000 R14: 00007f682c9a1058 R15: 00007fff24da0e28
[  980.605607][   T24] audit: type=1326 audit(1729274400.391:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  980.628950][   T24] audit: type=1326 audit(1729274400.401:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682c7e7990 code=0x7ffc0000
[  980.652771][ T7331] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  980.660386][   T24] audit: type=1326 audit(1729274400.461:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f682c7e7adf code=0x7ffc0000
[  980.683806][ T7331] audit: out of memory in audit_log_start
[  980.690123][   T24] audit: type=1326 audit(1729274400.461:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[  981.004242][  T600] Bluetooth: hci0: command 0x1001 tx timeout
[  981.010219][  T371] Bluetooth: hci0: sending frame failed (-49)
[  981.566520][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.566561][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.591664][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.599623][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.607259][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.615223][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.622665][ T6101] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  981.854262][ T5924] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  982.154231][ T5924] usb 1-1: device descriptor read/64, error -71
[  982.544297][ T5924] usb 1-1: device descriptor read/64, error -71
[  982.604358][  T320] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  982.814327][ T5924] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  982.964449][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  982.984509][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  982.994649][  T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.007658][  T320] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  983.016806][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.026842][  T320] usb 4-1: config 0 descriptor??
[  983.084336][    T5] Bluetooth: hci0: command 0x1009 tx timeout
[  983.249089][ T5924] usb 1-1: device descriptor read/64, error -71
[  983.373470][ T7357] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1469'.
[  983.654414][ T5924] usb 1-1: device descriptor read/64, error -71
[  983.775685][ T5924] usb usb1-port1: attempt power cycle
[  984.184296][ T5924] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  984.544358][ T5924] usb 1-1: device descriptor read/8, error -71
[  984.854268][ T5924] usb 1-1: device descriptor read/8, error -71
[  987.297096][  T320] usbhid 4-1:0.0: can't add hid device: -71
[  987.303163][  T320] usbhid: probe of 4-1:0.0 failed with error -71
[  987.356101][  T320] usb 4-1: USB disconnect, device number 40
[  988.539643][ T7395] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  988.550713][ T7395] FAT-fs (loop7): unable to read boot sector
[  989.256687][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.272020][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.288349][ T7391] device bridge_slave_0 entered promiscuous mode
[  989.304500][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.318689][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.349321][ T7391] device bridge_slave_1 entered promiscuous mode
[  990.032988][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  990.046030][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  990.081370][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  990.100830][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  990.114664][  T467] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.121583][  T467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  990.155239][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  990.172871][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  990.190856][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  990.211016][  T467] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.217925][  T467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  990.255886][ T7408] FAULT_INJECTION: forcing a failure.
[  990.255886][ T7408] name failslab, interval 1, probability 0, space 0, times 0
[  990.268357][ T7408] CPU: 1 PID: 7408 Comm: syz.2.1482 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[  990.279442][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  990.289332][ T7408] Call Trace:
[  990.292480][ T7408]  dump_stack_lvl+0x1e2/0x24b
[  990.296996][ T7408]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  990.302286][ T7408]  dump_stack+0x15/0x17
[  990.306271][ T7408]  should_fail+0x3c6/0x510
[  990.310536][ T7408]  ? xas_create+0x1009/0x1640
[  990.315047][ T7408]  __should_failslab+0xa4/0xe0
[  990.319649][ T7408]  should_failslab+0x9/0x20
[  990.323991][ T7408]  kmem_cache_alloc+0x3d/0x2e0
[  990.328587][ T7408]  ? xas_create+0x1009/0x1640
[  990.333096][ T7408]  xas_create+0x1009/0x1640
[  990.337444][ T7408]  ? gfp_pfmemalloc_allowed+0x120/0x120
[  990.342826][ T7408]  xas_create_range+0x3d1/0x670
[  990.347502][ T7408]  ? xas_start+0x2f1/0x380
[  990.351770][ T7408]  shmem_add_to_page_cache+0x7e6/0x10c0
[  990.357151][ T7408]  ? shmem_alloc_page+0x420/0x420
[  990.362002][ T7408]  ? 0xffffffffa0030000
[  990.366004][ T7408]  ? find_lock_entry+0x1df/0x200
[  990.370784][ T7408]  shmem_getpage_gfp+0xa65/0x2480
[  990.375644][ T7408]  ? shmem_xattr_handler_get+0x41/0x50
[  990.380939][ T7408]  ? shmem_getpage+0xa0/0xa0
[  990.385359][ T7408]  ? iov_iter_fault_in_readable+0x31f/0x4f0
[  990.391087][ T7408]  shmem_write_begin+0xca/0x1b0
[  990.395780][ T7408]  generic_perform_write+0x2cd/0x570
[  990.400899][ T7408]  ? file_remove_privs+0x39a/0x570
[  990.405848][ T7408]  ? grab_cache_page_write_begin+0xa0/0xa0
[  990.411485][ T7408]  ? file_remove_privs+0x570/0x570
[  990.416432][ T7408]  ? __kasan_check_write+0x14/0x20
[  990.421384][ T7408]  __generic_file_write_iter+0x23c/0x560
[  990.426846][ T7408]  ? generic_write_checks+0x3b9/0x470
[  990.432063][ T7408]  generic_file_write_iter+0xaf/0x1c0
[  990.437256][ T7408]  vfs_write+0xb4c/0xe70
[  990.441349][ T7408]  ? kernel_write+0x3d0/0x3d0
[  990.445852][ T7408]  ? mutex_trylock+0xa0/0xa0
[  990.450283][ T7408]  ? __fdget_pos+0x2e7/0x3a0
[  990.454706][ T7408]  ? ksys_write+0x77/0x2c0
[  990.458960][ T7408]  ksys_write+0x199/0x2c0
[  990.463138][ T7408]  ? __ia32_sys_read+0x90/0x90
[  990.467727][ T7408]  ? debug_smp_processor_id+0x17/0x20
[  990.472921][ T7408]  __x64_sys_write+0x7b/0x90
[  990.477345][ T7408]  do_syscall_64+0x34/0x70
[  990.481605][ T7408]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  990.487319][ T7408] RIP: 0033:0x7f8b32246ff9
[  990.491578][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  990.511019][ T7408] RSP: 002b:00007f8b30ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  990.519286][ T7408] RAX: ffffffffffffffda RBX: 00007f8b323fef80 RCX: 00007f8b32246ff9
[  990.527085][ T7408] RDX: 0000000000000778 RSI: 0000000020000400 RDI: 0000000000000003
[  990.534910][ T7408] RBP: 00007f8b30ec0090 R08: 0000000000000000 R09: 0000000000000000
[  990.542714][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.550524][ T7408] R13: 0000000000000000 R14: 00007f8b323fef80 R15: 00007ffe54bd8158
[  990.660861][ T7391] device veth0_vlan entered promiscuous mode
[  990.729933][ T7398] overlayfs: failed to resolve './file0': -2
[  990.748076][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  990.756578][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  990.765078][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  990.773283][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  990.781602][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  990.790112][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  990.802617][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  990.810719][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  990.819425][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  990.827877][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  990.836761][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  990.845368][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  990.866029][ T7391] device veth1_macvtap entered promiscuous mode
[  990.899238][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  990.917413][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  990.932792][   T24] kauditd_printk_skb: 11 callbacks suppressed
[  990.932832][   T24] audit: type=1400 audit(1729274411.141:1370): avc:  denied  { remove_name } for  pid=7415 comm="syz.1.1485" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  990.953845][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  990.962587][ T3167] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  990.979512][   T24] audit: type=1400 audit(1729274411.141:1371): avc:  denied  { unlink } for  pid=7415 comm="syz.1.1485" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  991.011808][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  991.025187][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  991.224279][ T3167] usb 3-1: Using ep0 maxpacket: 16
[  991.384379][ T3167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.404975][ T3167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  991.419440][ T3167] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  991.434281][ T4354] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  991.440900][ T3167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.463716][ T5348] device bridge_slave_1 left promiscuous mode
[  991.470415][ T3167] usb 3-1: config 0 descriptor??
[  991.481347][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.493992][ T5348] device bridge_slave_0 left promiscuous mode
[  991.501319][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.545378][ T5348] device veth1_macvtap left promiscuous mode
[  991.551260][ T5348] device veth0_vlan left promiscuous mode
[  991.704235][ T4354] usb 2-1: device descriptor read/64, error -71
[  992.328738][ T3167] savu 0003:1E7D:2D5A.0021: item fetching failed at offset 2/5
[  992.347823][ T3167] savu 0003:1E7D:2D5A.0021: parse failed
[  992.356464][ T3167] savu: probe of 0003:1E7D:2D5A.0021 failed with error -22
[  992.518011][ T4354] usb 2-1: device descriptor read/64, error -71
[  992.560599][ T3167] usb 3-1: USB disconnect, device number 28
[  992.627163][ T7441] FAULT_INJECTION: forcing a failure.
[  992.627163][ T7441] name failslab, interval 1, probability 0, space 0, times 0
[  992.639781][ T7441] CPU: 1 PID: 7441 Comm: syz.4.1491 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[  992.650911][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  992.660794][ T7441] Call Trace:
[  992.663940][ T7441]  dump_stack_lvl+0x1e2/0x24b
[  992.668453][ T7441]  ? panic+0x812/0x812
[  992.672359][ T7441]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  992.677666][ T7441]  dump_stack+0x15/0x17
[  992.681663][ T7441]  should_fail+0x3c6/0x510
[  992.685900][ T7441]  ? __alloc_skb+0x80/0x510
[  992.690234][ T7441]  __should_failslab+0xa4/0xe0
[  992.694838][ T7441]  should_failslab+0x9/0x20
[  992.699176][ T7441]  kmem_cache_alloc+0x3d/0x2e0
[  992.703775][ T7441]  __alloc_skb+0x80/0x510
[  992.707938][ T7441]  ? netlink_autobind+0x159/0x190
[  992.712799][ T7441]  netlink_sendmsg+0x7a4/0xd00
[  992.717406][ T7441]  ? netlink_getsockopt+0x5c0/0x5c0
[  992.722445][ T7441]  ? security_socket_sendmsg+0x82/0xb0
[  992.727731][ T7441]  ? netlink_getsockopt+0x5c0/0x5c0
[  992.732763][ T7441]  sock_write_iter+0x39b/0x530
[  992.737368][ T7441]  ? sock_read_iter+0x480/0x480
[  992.742052][ T7441]  ? irqentry_exit+0x4f/0x60
[  992.746487][ T7441]  ? vfs_write+0xaba/0xe70
[  992.750731][ T7441]  ? iov_iter_init+0x3f/0x120
[  992.755256][ T7441]  vfs_write+0xb4c/0xe70
[  992.759337][ T7441]  ? kernel_write+0x3d0/0x3d0
[  992.763854][ T7441]  ? __fdget_pos+0x209/0x3a0
[  992.768265][ T7441]  ? ksys_write+0x77/0x2c0
[  992.772519][ T7441]  ksys_write+0x199/0x2c0
[  992.776698][ T7441]  ? __ia32_sys_read+0x90/0x90
[  992.781285][ T7441]  ? fpu__clear_all+0x20/0x20
[  992.785807][ T7441]  ? __kasan_check_read+0x11/0x20
[  992.790672][ T7441]  __x64_sys_write+0x7b/0x90
[  992.795091][ T7441]  do_syscall_64+0x34/0x70
[  992.799344][ T7441]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  992.805059][ T7441] RIP: 0033:0x7f6fb5e3aff9
[  992.809324][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  992.828762][ T7441] RSP: 002b:00007f6fb4a72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  992.837008][ T7441] RAX: ffffffffffffffda RBX: 00007f6fb5ff3130 RCX: 00007f6fb5e3aff9
[  992.844819][ T7441] RDX: 000000000000001c RSI: 0000000020000c00 RDI: 0000000000000008
[  992.852629][ T7441] RBP: 00007f6fb4a72090 R08: 0000000000000000 R09: 0000000000000000
[  992.860437][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  992.868250][ T7441] R13: 0000000000000000 R14: 00007f6fb5ff3130 R15: 00007fffe0e5cdc8
[  993.034371][ T4354] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  993.325133][ T4354] usb 2-1: device descriptor read/64, error -71
[  993.481796][ T7448] 9pnet: Insufficient options for proto=fd
[  993.604300][  T442] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  993.614417][  T319] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  993.864238][  T319] usb 5-1: Using ep0 maxpacket: 32
[  994.094306][ T4354] usb 2-1: device descriptor read/64, error -71
[  994.223274][ T4354] usb usb2-port1: attempt power cycle
[  994.784538][  T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  994.801854][  T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  994.816022][  T319] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  994.825930][  T442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  994.836746][  T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.845941][  T442] usb 4-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00
[  994.856699][  T442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.872127][  T319] usb 5-1: config 0 descriptor??
[  994.890034][  T442] usb 4-1: config 0 descriptor??
[  994.917056][  T319] hub 5-1:0.0: USB hub found
[  994.950603][ T7470] binder: 7465:7470 ioctl 4018620d 0 returned -22
[  995.988236][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1493'.
[  996.082431][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'.
[  996.119110][ T7481] 9pnet: Insufficient options for proto=fd
[  996.364553][  T442] usbhid 4-1:0.0: can't add hid device: -71
[  996.370508][  T442] usbhid: probe of 4-1:0.0 failed with error -71
[  996.413879][  T442] usb 4-1: USB disconnect, device number 41
[  996.497255][ T7486] FAULT_INJECTION: forcing a failure.
[  996.497255][ T7486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  996.512247][ T7486] CPU: 0 PID: 7486 Comm: syz.1.1502 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[  996.523463][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  996.533347][ T7486] Call Trace:
[  996.536498][ T7486]  dump_stack_lvl+0x1e2/0x24b
[  996.541010][ T7486]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  996.546306][ T7486]  dump_stack+0x15/0x17
[  996.550290][ T7486]  should_fail+0x3c6/0x510
[  996.554548][ T7486]  should_fail_usercopy+0x1a/0x20
[  996.559413][ T7486]  _copy_from_user+0x20/0xd0
[  996.563835][ T7486]  iovec_from_user+0xc7/0x330
[  996.568373][ T7486]  __import_iovec+0x6d/0x3b0
[  996.572777][ T7486]  ? __ia32_sys_shutdown+0x70/0x70
[  996.577739][ T7486]  import_iovec+0xe5/0x120
[  996.581989][ T7486]  ___sys_sendmsg+0x215/0x2e0
[  996.586504][ T7486]  ? __sys_sendmsg+0x280/0x280
[  996.591094][ T7486]  ? rw_verify_area+0x1c3/0x360
[  996.595803][ T7486]  ? __fdget+0x1bc/0x240
[  996.599865][ T7486]  __se_sys_sendmsg+0x1b1/0x280
[  996.604544][ T7486]  ? __x64_sys_sendmsg+0x90/0x90
[  996.609315][ T7486]  ? ksys_write+0x260/0x2c0
[  996.613672][ T7486]  ? debug_smp_processor_id+0x17/0x20
[  996.618879][ T7486]  __x64_sys_sendmsg+0x7b/0x90
[  996.623460][ T7486]  do_syscall_64+0x34/0x70
[  996.627723][ T7486]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  996.633435][ T7486] RIP: 0033:0x7f69ba481ff9
[  996.637707][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  996.657143][ T7486] RSP: 002b:00007f69b90da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  996.665384][ T7486] RAX: ffffffffffffffda RBX: 00007f69ba63a058 RCX: 00007f69ba481ff9
[  996.673191][ T7486] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 000000000000000d
[  996.681006][ T7486] RBP: 00007f69b90da090 R08: 0000000000000000 R09: 0000000000000000
[  996.688909][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  996.696718][ T7486] R13: 0000000000000000 R14: 00007f69ba63a058 R15: 00007fff800ceb98
[  997.277431][  T319] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  997.436047][ T7497] FAULT_INJECTION: forcing a failure.
[  997.436047][ T7497] name failslab, interval 1, probability 0, space 0, times 0
[  997.448637][ T7497] CPU: 1 PID: 7497 Comm: syz.0.1503 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[  997.459761][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  997.469654][ T7497] Call Trace:
[  997.472795][ T7497]  dump_stack_lvl+0x1e2/0x24b
[  997.477297][ T7497]  ? panic+0x812/0x812
[  997.481211][ T7497]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  997.486506][ T7497]  dump_stack+0x15/0x17
[  997.490490][ T7497]  should_fail+0x3c6/0x510
[  997.494751][ T7497]  ? netlink_sendmsg+0x7a4/0xd00
[  997.499528][ T7497]  __should_failslab+0xa4/0xe0
[  997.504137][ T7497]  should_failslab+0x9/0x20
[  997.508473][ T7497]  __kmalloc_track_caller+0x5f/0x320
[  997.513595][ T7497]  ? kmem_cache_alloc+0x168/0x2e0
[  997.518449][ T7497]  ? __alloc_skb+0x80/0x510
[  997.522783][ T7497]  ? netlink_sendmsg+0x7a4/0xd00
[  997.527557][ T7497]  __alloc_skb+0xbc/0x510
[  997.531729][ T7497]  netlink_sendmsg+0x7a4/0xd00
[  997.536337][ T7497]  ? netlink_getsockopt+0x5c0/0x5c0
[  997.541366][ T7497]  ? security_socket_sendmsg+0x82/0xb0
[  997.546663][ T7497]  ? netlink_getsockopt+0x5c0/0x5c0
[  997.551694][ T7497]  sock_write_iter+0x39b/0x530
[  997.556295][ T7497]  ? sock_read_iter+0x480/0x480
[  997.560985][ T7497]  ? iov_iter_init+0x3f/0x120
[  997.565490][ T7497]  vfs_write+0xb4c/0xe70
[  997.569581][ T7497]  ? kernel_write+0x3d0/0x3d0
[  997.574095][ T7497]  ? __fdget_pos+0x209/0x3a0
[  997.578506][ T7497]  ? ksys_write+0x77/0x2c0
[  997.582768][ T7497]  ksys_write+0x199/0x2c0
[  997.586938][ T7497]  ? __ia32_sys_read+0x90/0x90
[  997.591538][ T7497]  ? fpu__clear_all+0x20/0x20
[  997.596054][ T7497]  ? __kasan_check_read+0x11/0x20
[  997.600911][ T7497]  __x64_sys_write+0x7b/0x90
[  997.605337][ T7497]  do_syscall_64+0x34/0x70
[  997.609602][ T7497]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  997.615309][ T7497] RIP: 0033:0x7f1126a94ff9
[  997.619570][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  997.639004][ T7497] RSP: 002b:00007f11256cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  997.647250][ T7497] RAX: ffffffffffffffda RBX: 00007f1126c4d130 RCX: 00007f1126a94ff9
[  997.655057][ T7497] RDX: 000000000000001c RSI: 0000000020000c00 RDI: 0000000000000008
[  997.662869][ T7497] RBP: 00007f11256cc090 R08: 0000000000000000 R09: 0000000000000000
[  997.670680][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  997.678494][ T7497] R13: 0000000000000000 R14: 00007f1126c4d130 R15: 00007ffc95a5a4f8
[  997.952684][  T319] usbhid 5-1:0.0: can't add hid device: -71
[  997.960192][  T319] usbhid: probe of 5-1:0.0 failed with error -71
[  998.000574][  T319] usb 5-1: USB disconnect, device number 37
[  998.179256][ T7502] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  998.188342][ T7502] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  998.547656][   T24] audit: type=1326 audit(1729274418.761:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  998.571600][   T24] audit: type=1326 audit(1729274418.761:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.097107][   T24] audit: type=1326 audit(1729274418.761:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.254295][   T24] audit: type=1326 audit(1729274418.781:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.606978][   T24] audit: type=1326 audit(1729274418.781:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.631149][   T24] audit: type=1326 audit(1729274418.811:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.695313][   T24] audit: type=1326 audit(1729274418.811:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.759305][   T24] audit: type=1326 audit(1729274418.811:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.805146][   T24] audit: type=1326 audit(1729274418.811:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[  999.853643][   T24] audit: type=1326 audit(1729274418.811:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.4.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[ 1000.125221][ T7536] attempt to access beyond end of device
[ 1000.125221][ T7536] loop2: rw=0, want=240, limit=128
[ 1000.725305][  T318] attempt to access beyond end of device
[ 1000.725305][  T318] loop2: rw=1, want=1041, limit=128
[ 1001.851387][ T7552] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1001.917717][ T7552] EXT4-fs (loop4): 1 orphan inode deleted
[ 1001.929793][ T7552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1003.976451][ T7572] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue
[ 1004.361574][   T24] kauditd_printk_skb: 24 callbacks suppressed
[ 1004.361611][   T24] audit: type=1400 audit(1729274424.571:1406): avc:  denied  { ioctl } for  pid=7571 comm="syz.4.1525" path="socket:[46327]" dev="sockfs" ino=46327 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1004.584243][  T442] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1005.661661][  T442] usb 4-1: device descriptor read/64, error -71
[ 1006.594280][  T442] usb 4-1: device descriptor read/64, error -71
[ 1006.864264][  T442] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1007.164256][  T442] usb 4-1: device descriptor read/64, error -71
[ 1007.324265][   T15] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1008.554441][   T15] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1008.583284][   T15] usb 5-1: config 0 has no interface number 0
[ 1008.603549][   T15] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1008.811769][   T15] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1008.826013][   T15] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1008.895697][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.962834][   T15] usb 5-1: config 0 descriptor??
[ 1010.084317][   T15] usbhid 5-1:0.1: can't add hid device: -71
[ 1010.090323][   T15] usbhid: probe of 5-1:0.1 failed with error -71
[ 1010.114719][   T15] usb 5-1: USB disconnect, device number 38
[ 1011.996493][ T7647] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1014.098323][ T7663] attempt to access beyond end of device
[ 1014.098323][ T7663] loop2: rw=0, want=240, limit=128
[ 1014.253440][   T24] audit: type=1326 audit(1729274434.461:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.4.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x0
[ 1014.488928][   T24] audit: type=1400 audit(1729274434.671:1408): avc:  denied  { watch watch_reads } for  pid=7679 comm="syz.4.1549" path="/14/file0" dev="incremental-fs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1014.578314][ T7687] binder: 7679:7687 ioctl 4018620d 0 returned -22
[ 1014.828185][  T318] attempt to access beyond end of device
[ 1014.828185][  T318] loop2: rw=1, want=1041, limit=128
[ 1015.108405][   T24] audit: type=1400 audit(1729274435.321:1409): avc:  denied  { map } for  pid=7693 comm="syz.2.1553" path="socket:[47211]" dev="sockfs" ino=47211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1018.435273][   T24] audit: type=1326 audit(1729274438.621:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[ 1018.459663][   T24] audit: type=1326 audit(1729274438.621:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x7ffc0000
[ 1020.153079][ T7734] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue
[ 1020.178065][ T7734] ext4 filesystem being mounted at /16/file0/file0 supports timestamps until 2038 (0x7fffffff)
[ 1021.247108][ T5924] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1021.604338][  T320] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1021.704599][ T5924] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1021.731104][ T5924] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1021.754285][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[ 1021.774334][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.844228][  T320] usb 3-1: Using ep0 maxpacket: 32
[ 1022.094443][  T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1022.105334][  T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1022.119145][  T320] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1022.130328][  T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.245242][  T320] usb 3-1: config 0 descriptor??
[ 1022.576745][ T5924] logitech-hidpp-device 0003:046D:C086.0022: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[ 1022.944342][  T320] usbhid 3-1:0.0: can't add hid device: -71
[ 1022.950415][  T320] usbhid: probe of 3-1:0.0 failed with error -71
[ 1022.987880][  T320] usb 3-1: USB disconnect, device number 29
[ 1023.003457][ T7769] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1571'.
[ 1024.543264][ T3167] usb 4-1: USB disconnect, device number 44
[ 1024.935880][   T24] audit: type=1400 audit(1729274445.151:1412): avc:  denied  { ioctl } for  pid=7780 comm="syz.3.1573" path="socket:[46676]" dev="sockfs" ino=46676 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1025.874883][ T7784] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1)
[ 1025.906491][ T7784] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1025.917911][ T7784] F2FS-fs (loop2): invalid crc value
[ 1025.925871][ T7784] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1026.030298][ T7802] udc-core: couldn't find an available UDC or it's busy
[ 1026.045472][ T7802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1026.069904][ T7784] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[ 1026.077807][ T7784] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[ 1026.085656][ T7784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1026.212341][   T24] audit: type=1326 audit(1729274446.421:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.254266][   T24] audit: type=1326 audit(1729274446.451:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.304241][   T15] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1026.311966][   T24] audit: type=1326 audit(1729274446.451:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.373442][   T24] audit: type=1326 audit(1729274446.451:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.398022][   T24] audit: type=1326 audit(1729274446.451:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.427377][   T24] audit: type=1326 audit(1729274446.451:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.451208][   T24] audit: type=1326 audit(1729274446.451:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.530238][   T24] audit: type=1326 audit(1729274446.451:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.554409][   T24] audit: type=1326 audit(1729274446.451:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682c7e8ff9 code=0x7ffc0000
[ 1026.607437][   T15] usb 1-1: Using ep0 maxpacket: 16
[ 1026.629412][ T7811] binder: 7809:7811 ioctl 4018620d 0 returned -22
[ 1026.651889][ T6101] attempt to access beyond end of device
[ 1026.651889][ T6101] loop2: rw=2049, want=45104, limit=40427
[ 1026.739489][   T15] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.934464][   T15] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[ 1026.974439][   T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.002587][   T15] usb 1-1: Product: syz
[ 1027.022853][   T15] usb 1-1: Manufacturer: syz
[ 1027.032966][   T15] usb 1-1: SerialNumber: syz
[ 1027.054762][   T15] usb 1-1: config 0 descriptor??
[ 1027.398185][ T5924] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1027.644384][ T5924] usb 5-1: Using ep0 maxpacket: 32
[ 1027.765163][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.840951][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1028.066074][ T7821] device syzkaller0 entered promiscuous mode
[ 1028.091451][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1028.101014][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.122100][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'.
[ 1028.138024][ T5924] usb 5-1: config 0 descriptor??
[ 1028.254388][   T15] uvcvideo: Found UVC 0.00 device syz (045e:0721)
[ 1028.265199][   T15] uvcvideo: No valid video chain found.
[ 1028.276690][   T15] usb 1-1: USB disconnect, device number 40
[ 1028.484475][ T5924] usbhid 5-1:0.0: can't add hid device: -71
[ 1028.527364][ T5924] usbhid: probe of 5-1:0.0 failed with error -71
[ 1028.558133][ T5924] usb 5-1: USB disconnect, device number 39
[ 1029.915380][ T5348] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1031.085615][ T7865] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1031.147721][   T24] kauditd_printk_skb: 66 callbacks suppressed
[ 1031.147759][   T24] audit: type=1400 audit(1729274451.361:1488): avc:  denied  { read append } for  pid=7862 comm="syz.1.1595" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1031.178725][   T24] audit: type=1400 audit(1729274451.391:1489): avc:  denied  { open } for  pid=7862 comm="syz.1.1595" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1031.394252][ T3167] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1031.943896][ T3167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1031.961267][ T3167] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1031.972592][  T324] Bluetooth: hci0: command 0x1003 tx timeout
[ 1031.984394][  T371] Bluetooth: hci0: sending frame failed (-49)
[ 1031.989137][ T3167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1032.030511][ T3167] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1034.204557][ T3167] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1034.205510][  T320] Bluetooth: hci0: command 0x1001 tx timeout
[ 1034.213468][ T3167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.219483][  T371] Bluetooth: hci0: sending frame failed (-49)
[ 1034.297862][ T3167] usb 3-1: Product: syz
[ 1034.301892][ T3167] usb 3-1: Manufacturer: syz
[ 1034.326218][ T7892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1034.342816][ T3167] usb 3-1: config 0 descriptor??
[ 1034.374420][ T3167] usb 3-1: can't set config #0, error -71
[ 1034.382374][ T7892] EXT4-fs (loop2): 1 truncate cleaned up
[ 1034.403738][ T3167] usb 3-1: USB disconnect, device number 30
[ 1034.413530][ T7892] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue
[ 1034.634502][   T15] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1034.784257][ T7633] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1034.884244][   T15] usb 4-1: Using ep0 maxpacket: 16
[ 1034.914251][ T3167] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1035.014365][   T15] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1035.022395][   T15] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1035.032369][ T7633] usb 2-1: Using ep0 maxpacket: 32
[ 1035.041305][ T7901] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1035.046232][   T15] usb 4-1: config 0 has no interface number 0
[ 1035.050549][ T7901] EXT4-fs (loop4): 1 orphan inode deleted
[ 1035.060123][ T7901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1035.155564][ T7633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1035.167842][ T3167] usb 3-1: Using ep0 maxpacket: 16
[ 1035.173111][ T7633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1035.183177][ T7633] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1035.192482][ T7633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.208184][ T7906] bridge0: port 3(syz_tun) entered blocking state
[ 1035.214587][ T7906] bridge0: port 3(syz_tun) entered disabled state
[ 1035.214973][ T7633] usb 2-1: config 0 descriptor??
[ 1035.221968][ T7906] device syz_tun entered promiscuous mode
[ 1035.231533][   T15] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1035.232391][ T7906] bridge0: port 3(syz_tun) entered blocking state
[ 1035.240733][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.246667][ T7906] bridge0: port 3(syz_tun) entered forwarding state
[ 1035.262039][   T15] usb 4-1: Product: syz
[ 1035.266255][   T15] usb 4-1: Manufacturer: syz
[ 1035.273218][   T15] usb 4-1: SerialNumber: syz
[ 1035.281690][   T15] usb 4-1: config 0 descriptor??
[ 1035.294480][ T3167] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32
[ 1035.307265][ T3167] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255
[ 1035.315497][ T7906] EXT4-fs (loop4): Ignoring removed orlov option
[ 1035.322828][ T7906] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1035.329943][ T7906] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1035.335889][   T15] uvcvideo: Found UVC 0.00 device syz (046d:08f3)
[ 1035.350648][ T7906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[ 1035.350962][   T15] uvcvideo: No valid video chain found.
[ 1035.359098][ T7906] System zones: 1-12
[ 1035.361649][ T7906] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1609: casefold flag without casefold feature
[ 1035.382733][ T7906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1609: missing EA_INODE flag
[ 1035.394739][ T7906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1609: error while reading EA inode 12 err=-117
[ 1035.407493][ T7906] EXT4-fs (loop4): 1 orphan inode deleted
[ 1035.413120][ T7906] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue
[ 1035.458334][ T7906] EXT4-fs error (device loop4): ext4_add_entry:2440: inode #2: comm syz.4.1609: Directory hole found for htree leaf block 0
[ 1035.479336][ T7906] EXT4-fs error (device loop4): ext4_add_entry:2440: inode #2: comm syz.4.1609: Directory hole found for htree leaf block 0
[ 1035.514901][ T3167] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1035.524152][ T3167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.532125][ T3167] usb 3-1: Product: syz
[ 1035.554480][ T3167] usb 3-1: Manufacturer: syz
[ 1035.564408][ T3167] usb 3-1: SerialNumber: syz
[ 1035.604354][ T7633] usbhid 2-1:0.0: can't add hid device: -71
[ 1035.611006][ T7633] usbhid: probe of 2-1:0.0 failed with error -71
[ 1035.618451][ T7894] udc-core: couldn't find an available UDC or it's busy
[ 1035.641095][ T7633] usb 2-1: USB disconnect, device number 29
[ 1035.645141][ T7894] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1035.668778][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'.
[ 1035.732298][   T15] usb 4-1: USB disconnect, device number 45
[ 1035.924364][ T3167] r8152 3-1:1.0: Unknown version 0x0000
[ 1036.123336][ T7917] Disabled LAPIC found during irq injection
[ 1036.173742][ T7918] UHID_CREATE from different security context by process 92 (syz.4.1613), this is not allowed.
[ 1036.204887][   T24] audit: type=1400 audit(1729274456.421:1490): avc:  denied  { map } for  pid=7891 comm="syz.2.1606" path="pipe:[41087]" dev="pipefs" ino=41087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1036.228686][ T3167] usb 3-1: USB disconnect, device number 31
[ 1036.284273][  T320] Bluetooth: hci0: command 0x1009 tx timeout
[ 1036.478315][ T7927] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1036.494338][ T7927] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff)
[ 1039.124243][  T442] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1039.384217][  T442] usb 5-1: Using ep0 maxpacket: 32
[ 1039.428931][ T7966] Disabled LAPIC found during irq injection
[ 1039.504475][  T442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.516602][  T442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.561353][ T7969] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1039.567694][  T442] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1039.576989][  T442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.592503][  T442] usb 5-1: config 0 descriptor??
[ 1039.622031][    T7] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1039.719937][   T24] audit: type=1400 audit(1729274459.931:1491): avc:  denied  { write } for  pid=7974 comm="syz.2.1627" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1039.944468][  T442] usbhid 5-1:0.0: can't add hid device: -71
[ 1039.950397][  T442] usbhid: probe of 5-1:0.0 failed with error -71
[ 1039.984400][  T442] usb 5-1: USB disconnect, device number 40
[ 1040.021482][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.028456][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.036807][ T7976] device bridge_slave_0 entered promiscuous mode
[ 1040.058325][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.078819][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.093062][ T7976] device bridge_slave_1 entered promiscuous mode
[ 1040.523542][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.530470][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1040.537670][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.544583][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1040.603779][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1040.615664][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1040.623111][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.664430][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1040.673883][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1040.680859][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1040.690072][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1040.699581][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.706500][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1040.734684][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1040.749320][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1040.787433][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1040.812057][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1040.823308][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1040.832405][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1040.853613][ T7976] device veth0_vlan entered promiscuous mode
[ 1041.063947][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1041.089217][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1041.305383][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1041.342046][    T7] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1042.019164][ T3167] Bluetooth: hci1: command 0x1003 tx timeout
[ 1042.047311][ T7976] device veth1_macvtap entered promiscuous mode
[ 1042.064368][ T7973] Bluetooth: hci1: sending frame failed (-49)
[ 1042.134280][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1042.142716][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1042.176588][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1042.185593][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1042.193949][ T7985] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1)
[ 1042.202430][  T318] device bridge_slave_1 left promiscuous mode
[ 1042.208723][ T7985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1042.208833][  T318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1042.226979][  T318] device bridge_slave_0 left promiscuous mode
[ 1042.233268][  T318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1042.255837][  T318] device veth0_vlan left promiscuous mode
[ 1042.261724][ T7985] F2FS-fs (loop4): invalid crc value
[ 1042.316368][ T7985] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1042.511696][ T7985] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[ 1042.519278][ T7985] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[ 1042.526268][ T7985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1043.004749][  T320] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1043.115443][ T7391] attempt to access beyond end of device
[ 1043.115443][ T7391] loop4: rw=2049, want=45104, limit=40427
[ 1043.324388][ T5924] Bluetooth: hci0: command 0x1003 tx timeout
[ 1043.330365][ T7973] Bluetooth: hci0: sending frame failed (-49)
[ 1043.374598][  T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.385433][  T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.395809][  T320] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1043.405315][  T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.415957][  T320] usb 1-1: config 0 descriptor??
[ 1043.774241][  T319] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1043.894822][  T320] hid (null): bogus close delimiter
[ 1044.124755][ T4354] Bluetooth: hci1: command 0x1001 tx timeout
[ 1044.130666][ T7973] Bluetooth: hci1: sending frame failed (-49)
[ 1044.204439][  T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1044.220472][  T319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1044.247866][  T319] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1044.266384][  T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.293203][  T319] usb 5-1: config 0 descriptor??
[ 1044.537434][   T24] audit: type=1326 audit(1729274464.751:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8003 comm="syz.4.1632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb5e3aff9 code=0x0
[ 1044.641227][ T8010] binder: 8003:8010 ioctl 400454ca 20000300 returned -22
[ 1044.744320][  T319] usbhid 5-1:0.0: can't add hid device: -71
[ 1044.750243][  T319] usbhid: probe of 5-1:0.0 failed with error -71
[ 1044.766992][  T319] usb 5-1: USB disconnect, device number 41
[ 1045.404291][ T4354] Bluetooth: hci0: command 0x1001 tx timeout
[ 1045.412438][ T7973] Bluetooth: hci0: sending frame failed (-49)
[ 1045.834347][  T320] usb 1-1: string descriptor 0 read error: -71
[ 1045.854343][  T320] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71
[ 1045.866369][  T320] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71
[ 1045.883337][  T320] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71
[ 1045.895362][ T8017] Disabled LAPIC found during irq injection
[ 1045.900737][  T320] uclogic 0003:256C:006D.0023: failed probing parameters: -71
[ 1045.916322][  T320] uclogic: probe of 0003:256C:006D.0023 failed with error -71
[ 1045.936976][  T320] usb 1-1: USB disconnect, device number 41
[ 1046.204888][ T4354] Bluetooth: hci1: command 0x1009 tx timeout
[ 1048.134104][  T320] Bluetooth: hci0: command 0x1009 tx timeout
[ 1048.140018][ T4354] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1048.524357][ T4354] usb 5-1: Using ep0 maxpacket: 32
[ 1048.546652][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.553630][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.562195][ T8037] device bridge_slave_0 entered promiscuous mode
[ 1048.570157][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.577706][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.585845][ T8037] device bridge_slave_1 entered promiscuous mode
[ 1048.654440][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1048.674261][ T4354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1048.694060][ T4354] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1048.715140][ T4354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.740883][ T4354] usb 5-1: config 0 descriptor??
[ 1048.755148][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.762056][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.769241][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.776139][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.784499][  T320] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1048.832875][  T467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.841764][  T467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.849884][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1048.858716][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1048.876120][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1048.884745][  T467] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.891609][  T467] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.899082][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1048.909766][  T467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.916732][  T467] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.936423][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1048.956823][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1048.985053][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1049.024239][  T320] usb 1-1: Using ep0 maxpacket: 32
[ 1049.029675][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1049.045286][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1049.063111][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1049.087795][ T8037] device veth0_vlan entered promiscuous mode
[ 1049.094492][ T4354] usbhid 5-1:0.0: can't add hid device: -71
[ 1049.100404][ T4354] usbhid: probe of 5-1:0.0 failed with error -71
[ 1049.121061][ T4354] usb 5-1: USB disconnect, device number 42
[ 1049.130347][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1049.150150][ T8037] device veth1_macvtap entered promiscuous mode
[ 1049.166962][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1049.183937][  T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1049.422157][  T320] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[ 1049.431767][  T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.439858][  T320] usb 1-1: Product: syz
[ 1049.443863][  T320] usb 1-1: Manufacturer: syz
[ 1049.448529][  T320] usb 1-1: SerialNumber: syz
[ 1049.455395][  T320] usb 1-1: config 0 descriptor??
[ 1050.386804][  T320] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:1c:09:f0:ca:c5
[ 1050.454075][  T320] rtl8150 1-1:0.0: eth1: rtl8150 is detected
[ 1050.513734][   T24] audit: type=1400 audit(1729274470.721:1493): avc:  denied  { read } for  pid=132 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1050.580316][ T8041] udc-core: couldn't find an available UDC or it's busy
[ 1050.597024][ T8041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1050.626134][   T24] audit: type=1400 audit(1729274470.721:1494): avc:  denied  { search } for  pid=132 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1050.636665][ T3167] usb 1-1: USB disconnect, device number 42
[ 1050.774018][   T24] audit: type=1400 audit(1729274470.721:1495): avc:  denied  { read } for  pid=132 comm="dhcpcd" name="n15" dev="tmpfs" ino=12412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1050.891280][   T24] audit: type=1400 audit(1729274470.721:1496): avc:  denied  { open } for  pid=132 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=12412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1050.957560][   T24] audit: type=1400 audit(1729274470.721:1497): avc:  denied  { getattr } for  pid=132 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=12412 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1051.014842][   T24] audit: type=1400 audit(1729274470.751:1498): avc:  denied  { read } for  pid=8054 comm="syz.4.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1051.137768][   T24] audit: type=1400 audit(1729274470.861:1499): avc:  denied  { read } for  pid=8063 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.294285][   T24] audit: type=1400 audit(1729274470.861:1500): avc:  denied  { open } for  pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.397381][   T24] audit: type=1400 audit(1729274470.861:1501): avc:  denied  { getattr } for  pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.453313][   T24] audit: type=1400 audit(1729274471.521:1502): avc:  denied  { write } for  pid=8059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1051.886321][ T8083] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1052.017481][  T319] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1052.097820][  T467] device bridge_slave_1 left promiscuous mode
[ 1052.106116][  T467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.127432][  T467] device bridge_slave_0 left promiscuous mode
[ 1052.140092][  T467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.160706][  T467] device veth1_macvtap left promiscuous mode
[ 1052.173228][  T467] device veth0_vlan left promiscuous mode
[ 1052.404712][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1052.436079][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.466866][  T319] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1052.483068][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.512907][  T319] usb 4-1: config 0 descriptor??
[ 1052.947046][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1052.953956][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.182733][ T8082] device bridge_slave_0 entered promiscuous mode
[ 1053.283347][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.336413][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.420350][ T8082] device bridge_slave_1 entered promiscuous mode
[ 1053.706893][ T8110] udc-core: couldn't find an available UDC or it's busy
[ 1053.713718][ T8110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1053.854739][  T319] hid (null): bogus close delimiter
[ 1053.904375][  T319] usb 4-1: string descriptor 0 read error: -22
[ 1053.935116][ T8112] udc-core: couldn't find an available UDC or it's busy
[ 1053.954283][ T8112] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1054.104401][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1054.135143][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1054.168497][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1054.184829][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1054.206468][  T320] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1054.214571][  T318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.221473][  T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1054.245146][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1054.263641][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1054.340930][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1054.359492][  T318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.366425][  T318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1054.507430][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1054.524873][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1054.637171][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1054.645689][  T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1054.895370][  T320] usb 1-1: device descriptor read/64, error -71
[ 1054.928017][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1054.939833][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1054.950963][ T8081] udc-core: couldn't find an available UDC or it's busy
[ 1054.957848][ T8081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1054.966106][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1054.975924][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1054.993064][ T8082] device veth0_vlan entered promiscuous mode
[ 1055.000042][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1055.008226][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1055.029607][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1055.038129][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1055.053043][ T8082] device veth1_macvtap entered promiscuous mode
[ 1055.068336][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1055.076751][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1055.086149][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1055.141618][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1055.157183][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1055.184283][   T15] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1055.454426][  T320] usb 1-1: device descriptor read/64, error -71
[ 1055.504468][ T8133] fuse: Unknown parameter 'ro��^��\�otmoY��!��er-�8�de'
[ 1055.724302][  T320] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1055.995761][  T467] device veth1_macvtap left promiscuous mode
[ 1056.024725][  T467] device veth0_vlan left promiscuous mode
[ 1056.204250][  T320] usb 1-1: device descriptor read/64, error -71
[ 1056.309633][ T8136] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[ 1056.309633][ T8136] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[ 1056.309633][ T8136] 
[ 1056.328010][   T15] usb 5-1: Using ep0 maxpacket: 32
[ 1056.333638][  T319] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #100: -71
[ 1056.343043][ T8136] EXT4-fs (loop2): Ignoring removed orlov option
[ 1056.350543][  T319] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71
[ 1056.359318][  T319] uclogic 0003:256C:006D.0024: failed probing pen v1 parameters: -71
[ 1056.384315][  T319] uclogic 0003:256C:006D.0024: failed probing parameters: -71
[ 1056.394856][  T319] uclogic: probe of 0003:256C:006D.0024 failed with error -71
[ 1056.436333][  T319] usb 4-1: USB disconnect, device number 46
[ 1056.454349][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1056.486014][ T8136] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,sysvgroups,norecovery,usrquota,noacl,nogrpid,noauto_da_alloc,orlov,
[ 1056.511975][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1056.562692][   T15] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1056.572726][ T8144] FAULT_INJECTION: forcing a failure.
[ 1056.572726][ T8144] name failslab, interval 1, probability 0, space 0, times 0
[ 1056.592297][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.596160][ T8144] CPU: 1 PID: 8144 Comm: syz.3.1657 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1056.611227][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1056.621113][ T8144] Call Trace:
[ 1056.624266][ T8144]  dump_stack_lvl+0x1e2/0x24b
[ 1056.628772][ T8144]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 1056.634067][ T8144]  dump_stack+0x15/0x17
[ 1056.638055][ T8144]  should_fail+0x3c6/0x510
[ 1056.642310][ T8144]  ? __d_alloc+0x2d/0x6c0
[ 1056.646478][ T8144]  __should_failslab+0xa4/0xe0
[ 1056.651087][ T8144]  should_failslab+0x9/0x20
[ 1056.655419][ T8144]  kmem_cache_alloc+0x3d/0x2e0
[ 1056.660025][ T8144]  __d_alloc+0x2d/0x6c0
[ 1056.664033][ T8144]  d_alloc_pseudo+0x1d/0x70
[ 1056.668372][ T8144]  alloc_file_pseudo+0x131/0x2f0
[ 1056.673136][ T8144]  ? prandom_u32+0x24c/0x290
[ 1056.677582][ T8144]  ? alloc_empty_file_noaccount+0x80/0x80
[ 1056.683123][ T8144]  ? shmem_get_inode+0x68b/0x9e0
[ 1056.687897][ T8144]  ? __kasan_check_write+0x14/0x20
[ 1056.692841][ T8144]  ? clear_nlink+0x89/0xe0
[ 1056.697101][ T8144]  __shmem_file_setup+0x1d6/0x2a0
[ 1056.701970][ T8144]  shmem_file_setup+0x2f/0x40
[ 1056.706479][ T8144]  __se_sys_memfd_create+0x1e1/0x3c0
[ 1056.711601][ T8144]  __x64_sys_memfd_create+0x5b/0x70
[ 1056.716628][ T8144]  do_syscall_64+0x34/0x70
[ 1056.720884][ T8144]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1056.726598][ T8144] RIP: 0033:0x7fa1ce206ff9
[ 1056.730857][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.750298][ T8144] RSP: 002b:00007fa1cce7fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1056.758546][ T8144] RAX: ffffffffffffffda RBX: 00000000000004b3 RCX: 00007fa1ce206ff9
[ 1056.766354][ T8144] RDX: 00007fa1cce7fef0 RSI: 0000000000000000 RDI: 00007fa1ce279b02
[ 1056.774165][ T8144] RBP: 0000000020001b00 R08: 00007fa1cce7fbb7 R09: 00007fa1cce7fe40
[ 1056.781983][ T8144] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000
[ 1056.789791][ T8144] R13: 00007fa1cce7fef0 R14: 00007fa1cce7feb0 R15: 0000000020000d40
[ 1056.820102][   T15] usb 5-1: config 0 descriptor??
[ 1057.051201][  T320] usb 1-1: device descriptor read/64, error -71
[ 1057.264350][   T15] usbhid 5-1:0.0: can't add hid device: -71
[ 1057.270359][   T15] usbhid: probe of 5-1:0.0 failed with error -71
[ 1057.322761][   T15] usb 5-1: USB disconnect, device number 43
[ 1057.462105][  T320] usb usb1-port1: attempt power cycle
[ 1059.024787][ T8172] device dummy0 entered promiscuous mode
[ 1060.734077][ T8181] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1060.744885][ T8181] FAT-fs (loop9): unable to read boot sector
[ 1061.971227][ T8186] fuse: Unknown parameter 'f�PCOoR��:����ɯ�ˈ���F:{����:���t�	m�N���g��݂��˖��pK�@Xѯa2�n�Qi���pZ�1"]ZC@5�@�����9�'
[ 1062.399438][ T8192] FAULT_INJECTION: forcing a failure.
[ 1062.399438][ T8192] name failslab, interval 1, probability 0, space 0, times 0
[ 1062.412207][ T8192] CPU: 1 PID: 8192 Comm: syz.3.1668 Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1062.423331][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1062.433211][ T8192] Call Trace:
[ 1062.436365][ T8192]  dump_stack_lvl+0x1e2/0x24b
[ 1062.440866][ T8192]  ? panic+0x812/0x812
[ 1062.444785][ T8192]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 1062.450074][ T8192]  dump_stack+0x15/0x17
[ 1062.454070][ T8192]  should_fail+0x3c6/0x510
[ 1062.458321][ T8192]  ? __ip_append_data+0x2404/0x3630
[ 1062.463359][ T8192]  __should_failslab+0xa4/0xe0
[ 1062.467965][ T8192]  should_failslab+0x9/0x20
[ 1062.472300][ T8192]  __kmalloc_track_caller+0x5f/0x320
[ 1062.477419][ T8192]  ? kmem_cache_alloc+0x168/0x2e0
[ 1062.482276][ T8192]  ? __alloc_skb+0x80/0x510
[ 1062.486617][ T8192]  ? __ip_append_data+0x2404/0x3630
[ 1062.491661][ T8192]  __alloc_skb+0xbc/0x510
[ 1062.495824][ T8192]  __ip_append_data+0x2404/0x3630
[ 1062.500709][ T8192]  ? raw_send_hdrinc+0x1240/0x1240
[ 1062.505633][ T8192]  ? ip_setup_cork+0x890/0x890
[ 1062.510230][ T8192]  ? __kasan_check_read+0x11/0x20
[ 1062.515087][ T8192]  ? ip_setup_cork+0x542/0x890
[ 1062.519702][ T8192]  ip_append_data+0x120/0x190
[ 1062.524288][ T8192]  ? raw_send_hdrinc+0x1240/0x1240
[ 1062.529241][ T8192]  raw_sendmsg+0x12d2/0x1ea0
[ 1062.533697][ T8192]  ? compat_raw_ioctl+0x10/0x10
[ 1062.538351][ T8192]  ? arch_stack_walk+0xf3/0x140
[ 1062.543048][ T8192]  ? selinux_socket_sendmsg+0x243/0x340
[ 1062.548443][ T8192]  ? kmem_cache_free+0xa9/0x1e0
[ 1062.553114][ T8192]  ? inet_send_prepare+0x5e/0x4a0
[ 1062.557982][ T8192]  inet_sendmsg+0xa1/0xc0
[ 1062.562136][ T8192]  ? inet_send_prepare+0x4a0/0x4a0
[ 1062.567085][ T8192]  ____sys_sendmsg+0x59e/0x8f0
[ 1062.571691][ T8192]  ? __sys_sendmsg_sock+0x40/0x40
[ 1062.576546][ T8192]  ? import_iovec+0xe5/0x120
[ 1062.580977][ T8192]  ___sys_sendmsg+0x252/0x2e0
[ 1062.585502][ T8192]  ? __sys_sendmsg+0x280/0x280
[ 1062.590090][ T8192]  ? rw_verify_area+0x1c3/0x360
[ 1062.594800][ T8192]  ? __fdget+0x1bc/0x240
[ 1062.598853][ T8192]  __se_sys_sendmsg+0x1b1/0x280
[ 1062.603540][ T8192]  ? __x64_sys_sendmsg+0x90/0x90
[ 1062.608313][ T8192]  ? ksys_write+0x260/0x2c0
[ 1062.612660][ T8192]  ? debug_smp_processor_id+0x17/0x20
[ 1062.617869][ T8192]  __x64_sys_sendmsg+0x7b/0x90
[ 1062.622547][ T8192]  do_syscall_64+0x34/0x70
[ 1062.626806][ T8192]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1062.632520][ T8192] RIP: 0033:0x7fa1ce206ff9
[ 1062.636956][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1062.656393][ T8192] RSP: 002b:00007fa1cce5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1062.664637][ T8192] RAX: ffffffffffffffda RBX: 00007fa1ce3bf058 RCX: 00007fa1ce206ff9
[ 1062.672449][ T8192] RDX: 0000000000000000 RSI: 0000000020000780 RDI: 000000000000000d
[ 1062.680261][ T8192] RBP: 00007fa1cce5f090 R08: 0000000000000000 R09: 0000000000000000
[ 1062.688072][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1062.695882][ T8192] R13: 0000000000000000 R14: 00007fa1ce3bf058 R15: 00007ffca3d34c68
[ 1063.104322][  T442] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1063.354322][  T442] usb 5-1: Using ep0 maxpacket: 16
[ 1063.392367][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1064.314470][  T442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.334824][  T442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.359065][  T442] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1064.364456][  T324] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1064.424301][ T5924] usb 2-1: Using ep0 maxpacket: 32
[ 1064.486359][  T442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.496281][  T442] usb 5-1: config 0 descriptor??
[ 1064.674391][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.685634][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.734848][ T5924] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1065.743704][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.763679][  T324] usb 1-1: Using ep0 maxpacket: 16
[ 1065.775383][ T5924] usb 2-1: config 0 descriptor??
[ 1066.183781][ T8198] udc-core: couldn't find an available UDC or it's busy
[ 1066.261974][ T8198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1066.584314][  T324] usb 1-1: device descriptor read/all, error -71
[ 1066.614780][ T5924] usbhid 2-1:0.0: can't add hid device: -71
[ 1066.621018][ T5924] usbhid: probe of 2-1:0.0 failed with error -71
[ 1066.657561][  T442] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[ 1066.669831][ T5924] usb 2-1: USB disconnect, device number 30
[ 1066.702791][ T8234] tmpfs: Unknown parameter '01777777777777777777777'
[ 1066.745643][   T24] kauditd_printk_skb: 6 callbacks suppressed
[ 1066.745689][   T24] audit: type=1400 audit(1729274486.961:1509): avc:  denied  { unlink } for  pid=5746 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1066.778547][ T5746] ------------[ cut here ]------------
[ 1066.793367][ T5746] WARNING: CPU: 1 PID: 5746 at fs/inode.c:304 drop_nlink+0xc1/0x110
[ 1066.808568][  T442] usb 5-1: USB disconnect, device number 44
[ 1066.809794][ T8237] xt_hashlimit: size too large, truncated to 1048576
[ 1066.821338][ T5746] Modules linked in:
[ 1066.825273][ T5746] CPU: 1 PID: 5746 Comm: syz-executor Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1066.875122][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1066.889590][ T5746] RIP: 0010:drop_nlink+0xc1/0x110
[ 1066.899956][ T5746] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a7 cc f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 30 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c
[ 1066.941388][ T5746] RSP: 0018:ffffc9000104fb08 EFLAGS: 00010293
[ 1066.954738][ T5746] RAX: ffffffff81b77c41 RBX: 0000000000000000 RCX: ffff888118c0cf00
[ 1066.970960][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1066.987244][ T5746] RBP: ffffc9000104fb30 R08: ffffffff81b77bc4 R09: 0000000000000003
[ 1067.007679][ T5746] R10: fffff52000209f50 R11: dffffc0000000001 R12: dffffc0000000000
[ 1067.034337][ T5746] R13: 1ffff1102293e2cd R14: ffff8881149f1620 R15: ffff8881149f1668
[ 1067.042247][ T5746] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 1067.051594][ T5746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1067.058845][ T5746] CR2: 000000002018f000 CR3: 0000000113d8d000 CR4: 00000000003506a0
[ 1067.066921][ T5746] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1067.075430][ T5746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1067.083266][ T5746] Call Trace:
[ 1067.086692][ T5746]  ? show_regs+0x58/0x60
[ 1067.090813][ T5746]  ? __warn+0x160/0x2f0
[ 1067.095225][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.099600][ T5746]  ? report_bug+0x3d9/0x5b0
[ 1067.103988][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.108677][ T5746]  ? handle_bug+0x41/0x70
[ 1067.112971][ T5746]  ? exc_invalid_op+0x1b/0x50
[ 1067.117822][ T5746]  ? asm_exc_invalid_op+0x12/0x20
[ 1067.125101][ T5746]  ? drop_nlink+0x44/0x110
[ 1067.129398][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.133658][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.138547][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.142820][ T5746]  shmem_rmdir+0x59/0x90
[ 1067.147244][ T5746]  vfs_rmdir+0x2b7/0x3f0
[ 1067.149672][   T24] audit: type=1400 audit(1729274487.361:1510): avc:  denied  { map } for  pid=8238 comm="syz.2.1682" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1067.151379][ T5746]  incfs_kill_sb+0x108/0x220
[ 1067.179578][ T5746]  deactivate_locked_super+0xad/0x110
[ 1067.185005][ T5746]  deactivate_super+0xbe/0xf0
[ 1067.189601][ T5746]  cleanup_mnt+0x45c/0x510
[ 1067.193864][ T5746]  __cleanup_mnt+0x19/0x20
[ 1067.198397][ T5746]  task_work_run+0x129/0x190
[ 1067.202880][ T5746]  do_exit+0xc83/0x2a50
[ 1067.207324][ T5746]  ? put_task_struct+0x80/0x80
[ 1067.208279][   T24] audit: type=1400 audit(1729274487.391:1511): avc:  denied  { execute } for  pid=8238 comm="syz.2.1682" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1067.211949][ T5746]  ? __kasan_check_read+0x11/0x20
[ 1067.212004][ T5746]  ? __fdget_pos+0x209/0x3a0
[ 1067.248200][ T5746]  ? ksys_write+0x24f/0x2c0
[ 1067.252598][ T5746]  ? fsnotify_link_count+0x90/0x90
[ 1067.258313][ T5746]  ? __ia32_sys_read+0x90/0x90
[ 1067.263235][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1067.268795][ T5746]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1067.275485][ T5746]  do_group_exit+0x141/0x310
[ 1067.280031][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1067.285536][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1067.294273][ T5746]  do_syscall_64+0x34/0x70
[ 1067.301363][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1067.319782][ T8244] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1682: casefold flag without casefold feature
[ 1067.323747][ T5746] RIP: 0033:0x7f69ba481ff9
[ 1067.336755][ T5746] Code: Unable to access opcode bytes at RIP 0x7f69ba481fcf.
[ 1067.344014][ T5746] RSP: 002b:00007fff800ccc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1067.345509][ T8244] EXT4-fs error (device loop2): __ext4_iget:4986: inode #12: block 2: comm syz.2.1682: invalid block
[ 1067.352596][ T5746] RAX: ffffffffffffffda RBX: 00007f69ba4f4194 RCX: 00007f69ba481ff9
[ 1067.370823][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1067.379037][ T5746] RBP: 0000000000000009 R08: 00007fff800ca9d7 R09: 00007fff800cdef0
[ 1067.387840][ T5746] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff800cdef0
[ 1067.402423][ T5746] R13: 00007f69ba4f4134 R14: 00005555825934a8 R15: 00007fff800cefb0
[ 1067.410484][ T5746] ---[ end trace 21f5c125abacddc6 ]---
[ 1067.416201][ T5746] ------------[ cut here ]------------
[ 1067.421594][ T5746] WARNING: CPU: 0 PID: 5746 at fs/inode.c:304 drop_nlink+0xc1/0x110
[ 1067.432620][ T5746] Modules linked in:
[ 1067.436545][ T5746] CPU: 0 PID: 5746 Comm: syz-executor Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1067.448000][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1067.458044][ T5746] RIP: 0010:drop_nlink+0xc1/0x110
[ 1067.462968][ T5746] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a7 cc f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 30 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c
[ 1067.482577][ T5746] RSP: 0018:ffffc9000104fb08 EFLAGS: 00010293
[ 1067.488586][ T5746] RAX: ffffffff81b77c41 RBX: 0000000000000000 RCX: ffff888118c0cf00
[ 1067.496420][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1067.504319][ T5746] RBP: ffffc9000104fb30 R08: ffffffff81b77bc4 R09: 0000000000000003
[ 1067.512201][ T5746] R10: fffff52000209f50 R11: dffffc0000000001 R12: dffffc0000000000
[ 1067.534759][ T5746] R13: 1ffff1102293e429 R14: ffff8881149f2100 R15: ffff8881149f2148
[ 1067.559338][ T5746] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1067.588856][ T5746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1067.604438][ T8244] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1682: error while reading EA inode 12 err=-117
[ 1067.618737][ T5746] CR2: 00007f6fb5ff4a8c CR3: 000000011cf99000 CR4: 00000000003506b0
[ 1067.635971][ T5746] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1067.658416][ T5746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1067.667311][ T8244] EXT4-fs (loop2): 1 orphan inode deleted
[ 1067.677323][ T5746] Call Trace:
[ 1067.682250][ T5746]  ? show_regs+0x58/0x60
[ 1067.689717][ T5746]  ? __warn+0x160/0x2f0
[ 1067.694772][ T8244] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,max_dir_size_kb=0x0000000000000008,,errors=continue
[ 1067.944339][ T5746]  ? drop_nlink+0xc1/0x110
[ 1067.953845][ T5746]  ? report_bug+0x3d9/0x5b0
[ 1067.985396][ T5746]  ? drop_nlink+0xc1/0x110
[ 1068.000179][ T5746]  ? handle_bug+0x41/0x70
[ 1068.011535][ T5746]  ? exc_invalid_op+0x1b/0x50
[ 1068.029771][ T5746]  ? asm_exc_invalid_op+0x12/0x20
[ 1068.100240][ T5746]  ? drop_nlink+0x44/0x110
[ 1068.104630][ T5746]  ? drop_nlink+0xc1/0x110
[ 1068.109000][ T5746]  ? drop_nlink+0xc1/0x110
[ 1068.113314][ T5746]  ? drop_nlink+0xc1/0x110
[ 1068.117647][ T5746]  shmem_rmdir+0x59/0x90
[ 1068.121841][ T5746]  vfs_rmdir+0x2b7/0x3f0
[ 1068.133360][ T5746]  incfs_kill_sb+0x1a2/0x220
[ 1068.150381][ T5746]  deactivate_locked_super+0xad/0x110
[ 1068.175850][ T5746]  deactivate_super+0xbe/0xf0
[ 1068.189791][ T5746]  cleanup_mnt+0x45c/0x510
[ 1068.203559][ T5746]  __cleanup_mnt+0x19/0x20
[ 1068.218251][ T5746]  task_work_run+0x129/0x190
[ 1068.236442][ T5746]  do_exit+0xc83/0x2a50
[ 1068.249881][ T5746]  ? put_task_struct+0x80/0x80
[ 1068.374429][ T5746]  ? __kasan_check_read+0x11/0x20
[ 1068.384284][ T5746]  ? __fdget_pos+0x209/0x3a0
[ 1068.388754][ T5746]  ? ksys_write+0x24f/0x2c0
[ 1068.393353][ T5746]  ? fsnotify_link_count+0x90/0x90
[ 1068.424413][ T5746]  ? __ia32_sys_read+0x90/0x90
[ 1068.429881][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1068.459437][ T5746]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1068.474780][ T5746]  do_group_exit+0x141/0x310
[ 1068.480197][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1068.485930][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1068.491078][ T5746]  do_syscall_64+0x34/0x70
[ 1068.495933][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1068.507988][ T5746] RIP: 0033:0x7f69ba481ff9
[ 1068.512256][ T5746] Code: Unable to access opcode bytes at RIP 0x7f69ba481fcf.
[ 1068.520161][ T5746] RSP: 002b:00007fff800ccc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1068.528755][ T5746] RAX: ffffffffffffffda RBX: 00007f69ba4f4194 RCX: 00007f69ba481ff9
[ 1068.537050][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1068.545473][ T5746] RBP: 0000000000000009 R08: 00007fff800ca9d7 R09: 00007fff800cdef0
[ 1068.553484][ T5746] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff800cdef0
[ 1068.561751][ T5746] R13: 00007f69ba4f4134 R14: 00005555825934a8 R15: 00007fff800cefb0
[ 1068.570400][ T5746] ---[ end trace 21f5c125abacddc7 ]---
[ 1068.665001][ T5746] ==================================================================
[ 1068.673033][ T5746] BUG: KASAN: use-after-free in fast_dput+0x1f2/0x2a0
[ 1068.679624][ T5746] Read of size 4 at addr ffff888123b4a660 by task syz-executor/5746
[ 1068.687403][ T5746] 
[ 1068.689596][ T5746] CPU: 0 PID: 5746 Comm: syz-executor Tainted: G        W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1068.700868][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1068.710765][ T5746] Call Trace:
[ 1068.713914][ T5746]  dump_stack_lvl+0x1e2/0x24b
[ 1068.718427][ T5746]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 1068.723717][ T5746]  ? panic+0x812/0x812
[ 1068.727636][ T5746]  print_address_description+0x81/0x3b0
[ 1068.733002][ T5746]  ? detach_if_pending+0xcd/0x390
[ 1068.737872][ T5746]  kasan_report+0x179/0x1c0
[ 1068.742207][ T5746]  ? fast_dput+0x1f2/0x2a0
[ 1068.746464][ T5746]  ? fast_dput+0x1f2/0x2a0
[ 1068.750725][ T5746]  __asan_report_load4_noabort+0x14/0x20
[ 1068.756185][ T5746]  fast_dput+0x1f2/0x2a0
[ 1068.760263][ T5746]  ? __kasan_check_write+0x14/0x20
[ 1068.765211][ T5746]  dput+0x21/0x80
[ 1068.768687][ T5746]  incfs_free_mount_info+0x60/0x210
[ 1068.773711][ T5746]  incfs_kill_sb+0x1c2/0x220
[ 1068.778152][ T5746]  deactivate_locked_super+0xad/0x110
[ 1068.783358][ T5746]  deactivate_super+0xbe/0xf0
[ 1068.787871][ T5746]  cleanup_mnt+0x45c/0x510
[ 1068.792120][ T5746]  __cleanup_mnt+0x19/0x20
[ 1068.796371][ T5746]  task_work_run+0x129/0x190
[ 1068.800805][ T5746]  do_exit+0xc83/0x2a50
[ 1068.804798][ T5746]  ? put_task_struct+0x80/0x80
[ 1068.809406][ T5746]  ? __kasan_check_read+0x11/0x20
[ 1068.814247][ T5746]  ? __fdget_pos+0x209/0x3a0
[ 1068.818678][ T5746]  ? ksys_write+0x24f/0x2c0
[ 1068.823020][ T5746]  ? fsnotify_link_count+0x90/0x90
[ 1068.827979][ T5746]  ? __ia32_sys_read+0x90/0x90
[ 1068.832566][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1068.837780][ T5746]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1068.843678][ T5746]  do_group_exit+0x141/0x310
[ 1068.848107][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1068.853318][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1068.858174][ T5746]  do_syscall_64+0x34/0x70
[ 1068.862436][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1068.868147][ T5746] RIP: 0033:0x7f69ba481ff9
[ 1068.872394][ T5746] Code: Unable to access opcode bytes at RIP 0x7f69ba481fcf.
[ 1068.879606][ T5746] RSP: 002b:00007fff800ccc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1068.887853][ T5746] RAX: ffffffffffffffda RBX: 00007f69ba4f4194 RCX: 00007f69ba481ff9
[ 1068.895659][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1068.903476][ T5746] RBP: 0000000000000009 R08: 00007fff800ca9d7 R09: 00007fff800cdef0
[ 1068.911284][ T5746] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff800cdef0
[ 1068.919104][ T5746] R13: 00007f69ba4f4134 R14: 00005555825934a8 R15: 00007fff800cefb0
[ 1068.926906][ T5746] 
[ 1068.929071][ T5746] Allocated by task 8231:
[ 1068.933250][ T5746]  __kasan_slab_alloc+0xb1/0xe0
[ 1068.937955][ T5746]  slab_post_alloc_hook+0x61/0x2f0
[ 1068.942987][ T5746]  kmem_cache_alloc+0x168/0x2e0
[ 1068.947665][ T5746]  __d_alloc+0x2d/0x6c0
[ 1068.951657][ T5746]  d_alloc_parallel+0xec/0x1370
[ 1068.956340][ T5746]  __lookup_slow+0x154/0x400
[ 1068.960787][ T5746]  lookup_one_len+0x180/0x2c0
[ 1068.965283][ T5746]  incfs_lookup_dentry+0x5f/0xb0
[ 1068.970061][ T5746]  open_or_create_special_dir+0x4f/0x1d0
[ 1068.975611][ T5746]  incfs_mount_fs+0x48d/0xa10
[ 1068.980123][ T5746]  legacy_get_tree+0xf1/0x190
[ 1068.984646][ T5746]  vfs_get_tree+0x88/0x290
[ 1068.988890][ T5746]  do_new_mount+0x2ba/0xb30
[ 1068.993233][ T5746]  path_mount+0x56f/0xcb0
[ 1068.997401][ T5746]  __se_sys_mount+0x2c4/0x3b0
[ 1069.001912][ T5746]  __x64_sys_mount+0xbf/0xd0
[ 1069.006338][ T5746]  do_syscall_64+0x34/0x70
[ 1069.010608][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1069.016294][ T5746] 
[ 1069.018485][ T5746] Freed by task 8242:
[ 1069.022318][ T5746]  kasan_set_track+0x4b/0x70
[ 1069.026742][ T5746]  kasan_set_free_info+0x23/0x40
[ 1069.031510][ T5746]  ____kasan_slab_free+0x121/0x160
[ 1069.036461][ T5746]  __kasan_slab_free+0x11/0x20
[ 1069.041056][ T5746]  slab_free_freelist_hook+0xc0/0x190
[ 1069.046272][ T5746]  kmem_cache_free+0xa9/0x1e0
[ 1069.050784][ T5746]  __d_free+0x23/0x30
[ 1069.054602][ T5746]  rcu_do_batch+0x597/0xc40
[ 1069.058957][ T5746]  rcu_core+0x5ad/0xe40
[ 1069.062949][ T5746]  rcu_core_si+0x9/0x10
[ 1069.066923][ T5746]  __do_softirq+0x268/0x5bb
[ 1069.071243][ T5746] 
[ 1069.073415][ T5746] Last potentially related work creation:
[ 1069.079000][ T5746]  kasan_save_stack+0x3b/0x60
[ 1069.083508][ T5746]  __kasan_record_aux_stack+0xd3/0x100
[ 1069.088798][ T5746]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1069.094439][ T5746]  call_rcu+0x135/0x11f0
[ 1069.098516][ T5746]  dentry_free+0xbf/0x160
[ 1069.102690][ T5746]  __dentry_kill+0x505/0x650
[ 1069.107119][ T8257] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1069.107152][ T5746]  dentry_kill+0xc0/0x2a0
[ 1069.107202][ T5746]  dput+0x40/0x80
[ 1069.116063][ T8257] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff)
[ 1069.119983][ T5746]  incfs_free_mount_info+0x60/0x210
[ 1069.138105][ T5746]  incfs_kill_sb+0x1c2/0x220
[ 1069.142528][ T5746]  deactivate_locked_super+0xad/0x110
[ 1069.147730][ T5746]  deactivate_super+0xbe/0xf0
[ 1069.152252][ T5746]  cleanup_mnt+0x45c/0x510
[ 1069.156500][ T5746]  __cleanup_mnt+0x19/0x20
[ 1069.160758][ T5746]  task_work_run+0x129/0x190
[ 1069.165181][ T5746]  do_exit+0xc83/0x2a50
[ 1069.169181][ T5746]  do_group_exit+0x141/0x310
[ 1069.173608][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1069.178465][ T5746]  do_syscall_64+0x34/0x70
[ 1069.182721][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1069.188419][ T5746] 
[ 1069.190610][ T5746] Second to last potentially related work creation:
[ 1069.197042][ T5746]  kasan_save_stack+0x3b/0x60
[ 1069.201558][ T5746]  __kasan_record_aux_stack+0xd3/0x100
[ 1069.206847][ T5746]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 1069.212484][ T5746]  call_rcu+0x135/0x11f0
[ 1069.216568][ T5746]  dentry_free+0xbf/0x160
[ 1069.220735][ T5746]  __dentry_kill+0x505/0x650
[ 1069.225156][ T5746]  dentry_kill+0xc0/0x2a0
[ 1069.229324][ T5746]  dput+0x40/0x80
[ 1069.232801][ T5746]  do_renameat2+0xadf/0x1240
[ 1069.237231][ T5746]  __x64_sys_rename+0x86/0x90
[ 1069.241737][ T5746]  do_syscall_64+0x34/0x70
[ 1069.246000][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1069.251697][ T5746] 
[ 1069.253885][ T5746] The buggy address belongs to the object at ffff888123b4a660
[ 1069.253885][ T5746]  which belongs to the cache dentry of size 208
[ 1069.267353][ T5746] The buggy address is located 0 bytes inside of
[ 1069.267353][ T5746]  208-byte region [ffff888123b4a660, ffff888123b4a730)
[ 1069.280262][ T5746] The buggy address belongs to the page:
[ 1069.285763][ T5746] page:ffffea00048ed280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123b4a
[ 1069.295807][ T5746] flags: 0x4000000000000200(slab)
[ 1069.300696][ T5746] raw: 4000000000000200 ffffea0004416740 0000000800000006 ffff888100192180
[ 1069.309111][ T5746] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
[ 1069.317502][ T5746] page dumped because: kasan: bad access detected
[ 1069.323755][ T5746] page_owner tracks the page as allocated
[ 1069.329338][ T5746] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 94, ts 813749987453, free_ts 813514940272
[ 1069.346858][ T5746]  prep_new_page+0x166/0x180
[ 1069.351284][ T5746]  get_page_from_freelist+0x2d8c/0x2f30
[ 1069.356669][ T5746]  __alloc_pages_nodemask+0x435/0xaf0
[ 1069.361871][ T5746]  new_slab+0x80/0x400
[ 1069.365780][ T5746]  ___slab_alloc+0x302/0x4b0
[ 1069.370202][ T5746]  __slab_alloc+0x63/0xa0
[ 1069.374379][ T5746]  kmem_cache_alloc+0x1b9/0x2e0
[ 1069.379058][ T5746]  __d_alloc+0x2d/0x6c0
[ 1069.383045][ T5746]  d_alloc+0x4b/0x1d0
[ 1069.386869][ T5746]  __lookup_hash+0xe7/0x290
[ 1069.391211][ T5746]  do_unlinkat+0x28b/0x8b0
[ 1069.395466][ T5746]  __x64_sys_unlink+0x49/0x50
[ 1069.399977][ T5746]  do_syscall_64+0x34/0x70
[ 1069.404236][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1069.409943][ T5746] page last free stack trace:
[ 1069.414477][ T5746]  __free_pages_ok+0x82c/0x850
[ 1069.419072][ T5746]  free_the_page+0x76/0x370
[ 1069.423415][ T5746]  __free_pages+0x67/0xc0
[ 1069.427574][ T5746]  __free_slab+0xcf/0x190
[ 1069.431750][ T5746]  discard_slab+0x29/0x40
[ 1069.435916][ T5746]  __slab_free+0x30d/0x3a0
[ 1069.440174][ T5746]  ___cache_free+0x111/0x130
[ 1069.444589][ T5746]  qlink_free+0x50/0x90
[ 1069.448585][ T5746]  qlist_free_all+0x47/0xb0
[ 1069.452929][ T5746]  kasan_quarantine_reduce+0x15a/0x170
[ 1069.458233][ T5746]  __kasan_slab_alloc+0x2f/0xe0
[ 1069.462914][ T5746]  slab_post_alloc_hook+0x61/0x2f0
[ 1069.467860][ T5746]  kmem_cache_alloc+0x168/0x2e0
[ 1069.472545][ T5746]  getname_flags+0xba/0x520
[ 1069.476986][ T5746]  __x64_sys_unlink+0x3c/0x50
[ 1069.481507][ T5746]  do_syscall_64+0x34/0x70
[ 1069.485724][ T5746] 
[ 1069.487896][ T5746] Memory state around the buggy address:
[ 1069.493388][ T5746]  ffff888123b4a500: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb
[ 1069.501287][ T5746]  ffff888123b4a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1069.509188][ T5746] >ffff888123b4a600: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[ 1069.517068][ T5746]                                                        ^
[ 1069.524117][ T5746]  ffff888123b4a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1069.532014][ T5746]  ffff888123b4a700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 1069.539897][ T5746] ==================================================================
[ 1069.547789][ T5746] Disabling lock debugging due to kernel taint
[ 1069.620399][ T5746] ------------[ cut here ]------------
[ 1069.625813][ T5746] WARNING: CPU: 0 PID: 5746 at fs/dcache.c:766 fast_dput+0x256/0x2a0
[ 1069.633740][ T5746] Modules linked in:
[ 1069.637493][ T5746] CPU: 0 PID: 5746 Comm: syz-executor Tainted: G    B   W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1069.648765][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1069.658742][ T5746] RIP: 0010:fast_dput+0x256/0x2a0
[ 1069.663643][ T5746] Code: f1 ff e9 d4 fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f7 fe ff ff 4c 89 ef e8 44 bb f1 ff e9 ea fe ff ff e8 da 20 b4 ff <0f> 0b e9 c0 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2a ff ff
[ 1069.683192][ T5746] RSP: 0018:ffffc9000104fb20 EFLAGS: 00010293
[ 1069.689152][ T5746] RAX: ffffffff81b68c16 RBX: ffff888123b4a6bc RCX: ffff888118c0cf00
[ 1069.696960][ T5746] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001
[ 1069.704798][ T5746] RBP: ffffc9000104fb58 R08: ffffffff81b68b6b R09: 0000000000000003
[ 1069.712563][ T5746] R10: fffff52000209f54 R11: dffffc0000000001 R12: 00000000ffffff80
[ 1069.720411][ T5746] R13: ffff888123b4a660 R14: ffff888123b4a6b8 R15: dffffc0000000000
[ 1069.728317][ T5746] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 1069.737064][ T5746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1069.743465][ T5746] CR2: 0000001b31a19ff8 CR3: 00000001156ae000 CR4: 00000000003506b0
[ 1069.751298][ T5746] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1069.759102][ T5746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1069.766931][ T5746] Call Trace:
[ 1069.770045][ T5746]  ? show_regs+0x58/0x60
[ 1069.774110][ T5746]  ? __warn+0x160/0x2f0
[ 1069.778145][ T5746]  ? fast_dput+0x256/0x2a0
[ 1069.782372][ T5746]  ? report_bug+0x3d9/0x5b0
[ 1069.786744][ T5746]  ? fast_dput+0x256/0x2a0
[ 1069.790968][ T5746]  ? handle_bug+0x41/0x70
[ 1069.795152][ T5746]  ? exc_invalid_op+0x1b/0x50
[ 1069.799640][ T5746]  ? asm_exc_invalid_op+0x12/0x20
[ 1069.804585][ T5746]  ? fast_dput+0x1ab/0x2a0
[ 1069.808865][ T5746]  ? fast_dput+0x256/0x2a0
[ 1069.813173][ T5746]  ? fast_dput+0x256/0x2a0
[ 1069.817474][ T5746]  dput+0x21/0x80
[ 1069.820912][ T5746]  incfs_free_mount_info+0x60/0x210
[ 1069.825983][ T5746]  incfs_kill_sb+0x1c2/0x220
[ 1069.830365][ T5746]  deactivate_locked_super+0xad/0x110
[ 1069.835632][ T5746]  deactivate_super+0xbe/0xf0
[ 1069.840098][ T5746]  cleanup_mnt+0x45c/0x510
[ 1069.844369][ T5746]  __cleanup_mnt+0x19/0x20
[ 1069.848586][ T5746]  task_work_run+0x129/0x190
[ 1069.853017][ T5746]  do_exit+0xc83/0x2a50
[ 1069.857082][ T5746]  ? put_task_struct+0x80/0x80
[ 1069.861629][ T5746]  ? __kasan_check_read+0x11/0x20
[ 1069.866522][ T5746]  ? __fdget_pos+0x209/0x3a0
[ 1069.870898][ T5746]  ? ksys_write+0x24f/0x2c0
[ 1069.875337][ T5746]  ? fsnotify_link_count+0x90/0x90
[ 1069.880325][ T5746]  ? __ia32_sys_read+0x90/0x90
[ 1069.884979][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1069.890230][ T5746]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1069.896188][ T5746]  do_group_exit+0x141/0x310
[ 1069.900573][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1069.905810][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1069.910636][ T5746]  do_syscall_64+0x34/0x70
[ 1069.914931][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1069.920610][ T5746] RIP: 0033:0x7f69ba481ff9
[ 1069.924877][ T5746] Code: Unable to access opcode bytes at RIP 0x7f69ba481fcf.
[ 1069.932067][ T5746] RSP: 002b:00007fff800ccc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1069.940371][ T5746] RAX: ffffffffffffffda RBX: 00007f69ba4f4194 RCX: 00007f69ba481ff9
[ 1069.948286][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1069.956087][ T5746] RBP: 0000000000000009 R08: 00007fff800ca9d7 R09: 00007fff800cdef0
[ 1069.963856][ T5746] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff800cdef0
[ 1069.971711][ T5746] R13: 00007f69ba4f4134 R14: 00005555825934a8 R15: 00007fff800cefb0
[ 1069.979483][ T5746] ---[ end trace 21f5c125abacddc8 ]---
[ 1070.014312][ T5746] list_del corruption. prev->next should be ffff88811059d1a0, but was ffff88813627da20
[ 1070.024137][ T5746] ------------[ cut here ]------------
[ 1070.029507][ T5746] kernel BUG at lib/list_debug.c:61!
[ 1070.034708][ T5746] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1070.040557][ T5746] CPU: 1 PID: 5746 Comm: syz-executor Tainted: G    B   W         5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 1070.051824][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1070.061738][ T5746] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[ 1070.067712][ T5746] Code: 4c 89 f6 e8 6c e6 55 02 0f 0b 48 c7 c7 00 2a 60 85 4c 89 f6 e8 5b e6 55 02 0f 0b 48 c7 c7 60 2a 60 85 4c 89 f6 e8 4a e6 55 02 <0f> 0b 48 c7 c7 c0 2a 60 85 4c 89 f6 e8 39 e6 55 02 0f 0b cc 55 48
[ 1070.087153][ T5746] RSP: 0018:ffffc9000104fa98 EFLAGS: 00010246
[ 1070.093137][ T5746] RAX: 0000000000000054 RBX: ffff88813627da20 RCX: 0f8dbf9acf888000
[ 1070.100951][ T5746] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 1070.108863][ T5746] RBP: ffffc9000104fab8 R08: ffffffff81522098 R09: ffffed103ee2a5f8
[ 1070.116668][ T5746] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 1070.124481][ T5746] R13: ffff88811059d168 R14: ffff88811059d1a0 R15: ffff88810c640810
[ 1070.132295][ T5746] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 1070.141056][ T5746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1070.147479][ T5746] CR2: 00007f0b6f462ab8 CR3: 000000010a84c000 CR4: 00000000003506a0
[ 1070.155291][ T5746] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1070.163096][ T5746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1070.170901][ T5746] Call Trace:
[ 1070.174053][ T5746]  ? __die_body+0x62/0xb0
[ 1070.178214][ T5746]  ? die+0x88/0xb0
[ 1070.181767][ T5746]  ? do_trap+0x1a4/0x310
[ 1070.185854][ T5746]  ? __list_del_entry_valid+0x10c/0x120
[ 1070.191229][ T5746]  ? handle_invalid_op+0x95/0xc0
[ 1070.196006][ T5746]  ? __list_del_entry_valid+0x10c/0x120
[ 1070.201389][ T5746]  ? exc_invalid_op+0x32/0x50
[ 1070.205896][ T5746]  ? asm_exc_invalid_op+0x12/0x20
[ 1070.210767][ T5746]  ? wake_up_klogd+0xb8/0xf0
[ 1070.215192][ T5746]  ? __list_del_entry_valid+0x10c/0x120
[ 1070.220577][ T5746]  ? __list_del_entry_valid+0x10c/0x120
[ 1070.225960][ T5746]  __dentry_kill+0x250/0x650
[ 1070.230382][ T5746]  dentry_kill+0xc0/0x2a0
[ 1070.234548][ T5746]  dput+0x40/0x80
[ 1070.238018][ T5746]  incfs_free_mount_info+0x80/0x210
[ 1070.243047][ T5746]  incfs_kill_sb+0x1c2/0x220
[ 1070.247487][ T5746]  deactivate_locked_super+0xad/0x110
[ 1070.252693][ T5746]  deactivate_super+0xbe/0xf0
[ 1070.257205][ T5746]  cleanup_mnt+0x45c/0x510
[ 1070.261464][ T5746]  __cleanup_mnt+0x19/0x20
[ 1070.265706][ T5746]  task_work_run+0x129/0x190
[ 1070.270134][ T5746]  do_exit+0xc83/0x2a50
[ 1070.274134][ T5746]  ? put_task_struct+0x80/0x80
[ 1070.278727][ T5746]  ? __kasan_check_read+0x11/0x20
[ 1070.283582][ T5746]  ? __fdget_pos+0x209/0x3a0
[ 1070.288019][ T5746]  ? ksys_write+0x24f/0x2c0
[ 1070.292356][ T5746]  ? fsnotify_link_count+0x90/0x90
[ 1070.297306][ T5746]  ? __ia32_sys_read+0x90/0x90
[ 1070.301907][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1070.307118][ T5746]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1070.313014][ T5746]  do_group_exit+0x141/0x310
[ 1070.317445][ T5746]  ? debug_smp_processor_id+0x17/0x20
[ 1070.322650][ T5746]  __x64_sys_exit_group+0x3f/0x40
[ 1070.327509][ T5746]  do_syscall_64+0x34/0x70
[ 1070.331771][ T5746]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 1070.337482][ T5746] RIP: 0033:0x7f69ba481ff9
[ 1070.341732][ T5746] Code: Unable to access opcode bytes at RIP 0x7f69ba481fcf.
[ 1070.348942][ T5746] RSP: 002b:00007fff800ccc38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1070.357189][ T5746] RAX: ffffffffffffffda RBX: 00007f69ba4f4194 RCX: 00007f69ba481ff9
[ 1070.364993][ T5746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1070.372811][ T5746] RBP: 0000000000000009 R08: 00007fff800ca9d7 R09: 00007fff800cdef0
[ 1070.380624][ T5746] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff800cdef0
[ 1070.388432][ T5746] R13: 00007f69ba4f4134 R14: 00005555825934a8 R15: 00007fff800cefb0
[ 1070.396239][ T5746] Modules linked in:
[ 1070.400954][ T5746] ---[ end trace 21f5c125abacddc9 ]---
[ 1070.406848][ T5746] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[ 1070.412847][ T5746] Code: 4c 89 f6 e8 6c e6 55 02 0f 0b 48 c7 c7 00 2a 60 85 4c 89 f6 e8 5b e6 55 02 0f 0b 48 c7 c7 60 2a 60 85 4c 89 f6 e8 4a e6 55 02 <0f> 0b 48 c7 c7 c0 2a 60 85 4c 89 f6 e8 39 e6 55 02 0f 0b cc 55 48
[ 1070.432387][ T5746] RSP: 0018:ffffc9000104fa98 EFLAGS: 00010246
[ 1070.438351][ T5746] RAX: 0000000000000054 RBX: ffff88813627da20 RCX: 0f8dbf9acf888000
[ 1070.446148][ T5746] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 1070.453945][ T5746] RBP: ffffc9000104fab8 R08: ffffffff81522098 R09: ffffed103ee2a5f8
[ 1070.461789][ T5746] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 1070.469593][ T5746] R13: ffff88811059d168 R14: ffff88811059d1a0 R15: ffff88810c640810
[ 1070.477404][ T5746] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 1070.486198][ T5746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1070.492566][ T5746] CR2: 00007f0b6f462ab8 CR3: 000000010a84c000 CR4: 00000000003506a0
[ 1070.500406][ T5746] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1070.508225][ T5746] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1070.516041][ T5746] Kernel panic - not syncing: Fatal exception
[ 1070.522205][ T5746] Kernel Offset: disabled
[ 1070.526368][ T5746] Rebooting in 86400 seconds..