last executing test programs:

9.458060541s ago: executing program 3 (id=378):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000300), 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

9.069456113s ago: executing program 3 (id=381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)

6.909321853s ago: executing program 3 (id=388):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5c05}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
move_mount(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', r9, 0x1, 0x8, 0x0, 0x3, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x68, 0x0, 0x6f, 0x2f, 0x0, @empty, @multicast1, {[@generic={0xc0, 0x2}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x28, 0xe3, 0x0, 0x8, [0x0, 0x3, 0xff, 0xceb1, 0x3ff, 0x3, 0x4, 0x4, 0x6]}, @end, @rr={0x7, 0xb, 0x26, [@private=0xa010101, @local]}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x7, [0x7, 0xa, 0x7, 0x3, 0x3, 0xf57f, 0x3, 0xf323, 0x1ff]}]}}}}})
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5.75665988s ago: executing program 3 (id=392):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)

5.416793738s ago: executing program 4 (id=397):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
rmdir(&(0x7f0000000040)='./control\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

5.175566078s ago: executing program 0 (id=399):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000800)={"901a7e7eefec44aa91251e59bb7dd02a", <r4=>0x0, 0x0, {0x0, 0xfffffff9}, {0x9, 0x5}, 0x1, [0x80000000, 0x0, 0x6, 0x2, 0x7, 0x9, 0x100, 0xa, 0x81, 0x1e78, 0x8, 0x7b0d, 0xffffffff, 0x7f, 0x8f, 0x1ff]})
rmdir(&(0x7f0000000200)='./file0\x00')
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000001c0)=<r5=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000900)={"5882a3d35cea25edace129bf6dc3cab1", r4, r5, {0x100, 0x7f}, {0xd7, 0x2}, 0x0, [0x4, 0x8, 0x1, 0x0, 0x9, 0x10902ed6, 0xfffffffffffffff9, 0x10, 0xfffffffffffffff8, 0x9, 0x2a2f0859, 0x5, 0x2, 0x7ff, 0x5, 0x222c]})
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180))
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="181d00282e0cc731e5838a0100"/28], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_adjtime(0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)

4.370997145s ago: executing program 4 (id=401):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x6ea, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
open(0x0, 0x121342, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}})

4.242102486s ago: executing program 4 (id=402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0xc00)
sendfile(r0, r1, 0x0, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(r5, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="f1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0xfc, 0x1000000000000, 0x0})

3.413371475s ago: executing program 4 (id=405):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544eb", 0x81}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e659959943", 0x85}, {0x0}], 0x6, 0x8)
r2 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

3.361770659s ago: executing program 4 (id=406):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6491b6"}}, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==")
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0xb9, &(0x7f0000000240)=""/185, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='pstore\x00', 0x0, 0x0)

3.341617161s ago: executing program 2 (id=407):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150d, &(0x7f0000001180)="$eJzs3AuYjtX6MPD7Xms9DA29TXIY1lr3w5sGy5Akh4QckiTZkuSUEJokSUiMs6QhCTlOksMQksM0Jo3z+ZBzkiRNkoSEJOu7Zu/21967/f/39f/3fa7vP/fvup7rXff7PPd61pp73nmf9cz1vt/0Hlu/ZYM6zYkI/lvwbw/JABADACMB4HoACACgclzluJz9+SQm//dOwv5cD6Vd6xGwa4nrn7tx/XM3rn/uxvXP3bj+uRvXP3fj+uduXH/GcrNd84vdwFvu3fj+f27G7///g2SXn/bFlvI39fkDKQW4/rkav/5zN65/7sb1z924/rkb1z934/rnblx/xnKz//q9Y/7fwf+E7Vr//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyx0u+V8pAPh7+1qPizHGGGOMMcYYY38en/daj4AxxhhjjDHGGGP/9yEIkKAggDyQF2IgH+SH6yAWCkBBuB4icAPEwY1QCG6CwlAEikIxiIfiUAI0GLBAEEJJKAVRuBlKwy2QAGWgLJQDB+UhESpARbgVKsFtUBluhypwB1SFalAdasCdUBPuglpQG+rA3VAX6kF9aAD3QEO4FxrBfdAY7ocm8AA0hQehGfwFmsND0AIehpbwCLSCR6E1tIG20A7a/5fyX4D+8CIMgIGQDINgMAyBoTAMhsMIGAkvwSh4GUbDK5ACY2AsvArj4DUYD6/DBJgIk+ANmAxTYCpMg+kwA1LhTZgJb8EseBtmwxyYC/MgDebDAngHFsIiWAzvwhJ4D5bCMlgOKyAd3ocMWAmZ8AGsgg8hC1bDGlgL62A9bICNsAk2wxbYCttgO+yAnbALPoLdsAf2wj7YDwfgIHwMh+ATOAyfwhH47A/mX/yX/D4ICChQoEKFeTAPxmAM5sf8GIuxWBALYgQjGIdxWAgLYWEsjEWxKMZjPJbAEmjQICFhSSyJUYxiaSyNCZiAZbEsOnSYiIlYEW/FSlgJK2NlrIJVsCpWw2pYA2tgTayJtbAW1sE6WBfrYn2sj/fgPXgvNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIEtsSW2wlbYGltjW2yL7bE9dsAO2BE7YmfsjF2wC3bDbpiESdgdu2MP7IE9sSf2wl7YG3tjH+yLffEFfAFfxBdxINYVg3AwDsahOBSH4wgcgS/hKHwZX8ZXMAXH4Fh8FV/F2gBwASfgRJyEk7CmmIJTcRqSmIGpmIozcSbOwlk4G+fgHJyHaTgfF+ACXIiLcBG+i0vwPXwPl+EyXIHpmI4ZuBIzMRNX4UXMwtW4BtfiOlyP63AjbsKNuAW34hbcjttxJ+7Ej/Aj3IN7cB/uwwOoAPBj/AQ/wRQ8gkfwKB7FY3gMj+NxzMZsPIEn8CSexFN4Ck/jaTyDZ/EcnsXzeB4v4EW8hJfwMl7GK/hc/FctDpTZnAIihxJK5BF5RIyIEflFfhErYkVBUVBERETEiThRSBQShUVhUVQUFfEiXpQQJYQRRpAIRUlRUkRFVJQWpUWCSBBlRVnhhBOJIlFUFBVFJVFJVBa3iyriDlFVVBOdXA1RQ9QUnV0tUVvUEXVEXVFP1BcNRAPRUDQUjUQj0Vg0Fk1EE9FUPCiaiUE4HB8SOZVpKcZgKzEWW4s2oq1oJ17Dx0QHMR47ik6is3hCTMQJ2E10cEniKdFdTMUe4hkxDZ8VvcQM7C2eF31EX9FPvCD6i45ugBgoZuMgMVjMw6FimBguRoiFWE/kVKy+eEWkiDFirHhVrMDXxHjxupggJopJ4g0xWUwRU8U0MV3MEKniTTFTvCVmibfFbDFHzBXzRJqYLxaId8RCsUgsFu+KJeI9sVQsE8vFCpEu3hcZYqXIFB+IVeJDkSVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix1ip9glPhK7xR6xV+wT+8UBcVB8LA6JT8Rh8ak4Ij4TR8Xn4pj4QhwXX4ps8ZU4Ib4WJ8U34pT4VpwW34kz4qw4J74X58UP4oK4KC6JH8Vl8ZO4In4WV4UXIFEKKaWSgcwj88oYmU/ml9fJWFlAFpTXy4i8QcbJG2UheZMsLIvIorKYjJfFZQmppZFWkgxlSVlKRuXNsrS8RSbIMrKsLCedLC8TZQVZUd4qK8nbZGV5u6wi75BVZTVZXdaQd8qa8i5ZS9aWdeTdsq6sJ+vLBvIe2VDeKxvJ+2Rjeb9sIh+QTeWDspn8i2wuH5It5MOypXxEtpKPytayjWwr28n28jHZQT4uO8pOsrN8QnaRXWU3+aRMkk/J7vJp2UM+I3vKZ2Uv+ZzsLZ+XfWRf2U/+LK9KLwfIgTJZDpKD5RA5VA6Tw+UIOVK+JEfJl+Vo+YpMkWPkWPmqHCdfk+Pl63KCnCgnyTfkZDlFTpXT5HQ5Q6bKN+VM+ZacJd+Ws+UcOVfOk2lyvhz+S0+L/w/y3/o3+aP/evadcpf8SO6We+ReuU/ulwfkQXlQHpKH5GF5WB6RR+RReVQek8fkcXlcZstseUKekCflSXlKnpKn5Wl5Rp6VP8rv5Xn5g7wgL8qL8kd5WV6WV375GYBCJZRUSgUqj8qrYlQ+lV9dp2JVAVVQXa8i6gYVp25UhdRNqrAqooqqYipeFVcllFZGWUUqVCVVKRVVN+MvFxSqrCqnnCqvElWFP5KvSqtbVIIq80/5vze+9qq96qA6qI6qo+qsOqsuqovqprqpJJWkuqvuqofqoXqqnqqX6qV6q96qj+qj+ql+qr/qrwaoASpZJavBaogaqoap4WqEGqleUqPUKDVajVYpKkWNVWPVODVOjVfj1QQ1QU1Sk9RkNVlNVVPVdDVdpapUNVPNVLPULDVbzVZz1VyVptLUArVALVQL1WK1WC1RS9RStVQtV8tVukpXGSpDZapMtUqtUllqtVqt1qq1ar1arzaqjWqz2qy2qq1qu9qustQutUvtVrvVXrVX7Vf71UF1UB1Sh9RhdVgdUUfUUXVUHVPH1HF1XGWrbHVCnVAn1Ul1Sp1Sp9VpdUadUefUOXVenVcX1AV1SV1Sl9VldUVdUVfV1ZzLvkAEIlCBCvIEeYKYICbIH+QPYoPYoGBQMIgEkSAuiAsKBTcFhYMiQdGgWBAfFA9KBDowgQ0oCIOSQakgGtwclA5uCRKCMkHZoFzggvJBYlAhqBjcGlQKbgsqB7cHVYI7gqpBtaB6UCO4M6gZ3BXUCmoHdYK7g7pBvaB+0CC4J2gY3Bs0Cu4LGgf3B02CB4KmwYNBs+AvQfPgoaBF8HDQMngkaBU8GrQO2gRtg3ZB+z+1f+8vFHncDdADdbIepAfrIXqoHqaH6xF6pH5Jj9Iv69H6FZ2ix+ix+lU9Tr+mx+vX9QQ9UU/Sb+jJeoqeqqfp6XqGTtVv6pn6LT1Lv61n6zl6rp6n0/R8vUC/oxfqRXqxflcv0e/ppXqZXq5X6HT9vs7QK3Wm/kCv0h/qLL1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S79kd6t9+i9ep/erw/og/pjfUh/og/rT/UR/Zk+qj/Xx/QX+rj+Umfrr/QJ/bU+qb/Rp/S3+rT+Tp/RZ/U5/b0+r3/QF/RFfUn/qC/rn/QV/bO+qn3OxX3O27tRRpk8Jo+JMTEmv8lvYk2sKWgKmoiJmDgTZwqZQqawKWyKmqIm3sSbEqaEyUGGTElT0kRN1JQ2pU2CSTBlTVnjjDOJJtFUNBVNJVPJVDaVTRVTxVQ1VU11U93cae40d5m7TG1T29xt7jb1TD3TwDQwDU1D08g0Mo1NY9PENDFNTVPTzDQzzU1z08K0MC1NS9PKtDKtTWvT1rQ17U1708F0MB1NR9PZdDZdTBfTzXQzSSbJdDfdTQ/Tw/Q0PU0v08v0Nr1NH9PH9DP9TH/T3wwwA0yySTaDzWAz1Aw1w81wM9KMNKPMKDPajDYpJsWMNWPNODPOjDfjzQQz0Uwyb5jJZoqZaqaZ6WaGSTWpZqaZaWaZWWa2mW3mmrkmzaSZBWaBWWgWmsVmsVlilpilZqlZbpabdJNuMkyGyTSZZpVZZbJMlllj1ph1Zp3ZYDaYTWaT2WK2mG1mm9lhdphdZpfZbXabvWav2W/2m4PmoDlkDpnD5rA5Yo6Yo+aoRwBz3Bw32SbbnDAnzElz0pwyp8xpc9qcMWfMOXPOnDfnzQVzwVwyl8xl85O5Yn42V403MTafzW+vs7G2gC1or7f/Ghe1xWy8LW5LWG0L2yL/FBtrbYItY8v+fYlpK9iEmJzHctbZ8jbRVrBVbTVb3dawd9qa9i5b6zdxQ3uvbWTvs43t/baBveef4ib2AdvUPmKb2Udtc9vGtrDtbEv7iG1lH7WtbRvb1razXWxX280+aZPsU7a7ffo3cYZdaTfZzXaL3WoP2U/sJfujPWm/sZftT3aAHWhH2pfsKPuyHW1fsSl2zG/iSfYNO9lOsVPtNDvdzvhNPNfOs2l2vl1g37EL7aLfxOn2fbvEZtqldpldblf8Nc4ZU6b9wK6yH9osu9qusWvtOrvebrAb//dY19rtdofdaQ/aj+1uu8futfvsfnvgr3HOPA7bT+0R+5k9Yb+2x+wX9rg9ZbPtV3+Nc+Z3yn5rT9vv7Bl71p6z39vz9gd7wV7Mmb/Pmfv39md71XoLhCRIkqKA8lBeiqF8lJ+uo1gqQAXpeorQDRRHN1IhuokKUxEqSsUonopTCdJkyBJRSCWpFEXpZipNt1AClaGyVI4cladEqkAV6VaqRLdRZbqdqtAdVJWqUXWqQXdSTbqLalFtqkN3U12qR/WpAd1DDeleakT3UWO6n5rQA9SUHqRm9BdqTg9RC3qYWtIj1IoepdbUhtpSO2pPj1EHepw6UifqTE9QF+pK3ehJSqKnqDs9TT3oGepJz1Iveo560/PUh/pSP3qB+tOLNIAGUjINosE0hIbSMBpOI2gkvUSj6GUaTa9QCo2hsfQqjaPXaDy9ThNoIk2iN2gyTaGpNI2m0wxKpTdpJr1Fs+htmk1zaC7NozSaTwvoHVpIi2gxvUtL6D1aSstoOa2gdHqfMmglZdIHtIo+pCxaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLvqIdtMe2kv7aD8doIP0MR2ifL+84D6jo/Q5HaMv6Dh9Sdn0FZ2gr+kkfUOn6Fs6Td/RGTpL5+h7Ok8/0AW6SJfoR7pMP9EV+pmukicIMRShDFUYhHnCvGFMmC/MH14XxoYFwoLh9WEkvCGMC28MC4U3hYXDImHRsFgYHxYPS4Q6NKENKQzDkmGpMBreHJYObwkTwjJh2bBc6MLyYWJYIawY3hpWCm8LK4e3h1XCO8KqYbXwkftrhHeGNcO7wlph7bBOeHdYN6wX1g8DAGgY3hs2Cu8LG4f3h5XCB8Km4YMh/PJ5lRbhw2HL8JGwVfho2DpsE7YN24Xtw8fCDuHjYcewU9g5fCLsEnYNu4VPhknhU2H38Onf3Z8cDgoHh0PCIaH398nl0RXR9Oj70Yzoymhm9IPoquiH0azo6uia6Nrouuj66Iboxuim6ObolujW6Lbo9uiO6M6o9w3ygkMnnHTKBS6Py+tiXD6X313nYl0BV9Bd7yLuBhfnbnSF3E2usCviirpiLt4VdyWcdsZZRy50JV0pF3U3u9LuFpfgyriyrpxzrrxLdO1ce9fedXCPu46uk+vsnnBPuK6uq3vSPemect3d066He8b1dM+6Xu4595x73vVxfV0/94Lr7150A9xAl+yS3WA32A11Q91wN9yNdCPdKDfKjXajXYpLcWPdWDfOjXPj3Xg3wU1wk9wkN9lNdlPdVDfdTXepLtXNdDPdLDfL5VRprpvr0lyaW+AWuIVuoVvsFrslCUvcUrfULXfLXbpLdxkuw2W6TLfKrXJZLsutcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcLrfL7Xa73V631+13+91Bd9AdcofcYXfYHXFH3FF31B1zx9xx96XLdl+5E+5rd9J94065b91p95074866c+57d9794C64i+6S+9Fddj+5K+5nd9V5lxp5MzIz8lZkVuTtyOzInMjcyLxIWmR+ZEHkncjCyKLI4si7kSWR9yJLI8siyyMrIumR9yMZkZWRzMgHkVWRDyNZkdWRNZG1kXWR9Qp88d2hL+lL+ai/2Zf2t/gEX8aX9eW88+V9oq/gK/pbfSV/m6/sb/dV/B2+qq/mq/tHfWvfxrf17Xx7/5jv4B/3HX0n39k/4bv4rr6bf9In+ad8d/+07+Gf8T39s76Xf8739s/7Pr6v7+df8P39i36AH+iT/SA/2A/xQ/0wP9yP8CP9S36Uf9mP9q/4FD/Gj/Wv+nH+NT/ev+4n+Il+kn/DT/ZT/FQ/zU/3M3yqf9PP9G/5Wf5tP9vP8XP9PJ/m5/sF/h2/0C/yi/27fol/zy/1y/xyv8Kn+/d9hl/pM/0HfpX/0Gf51X6NX+vX+fV+g9/oN/nNfovf6rf57X6H3+l3+Y/8br/H7/X7/H5/wB/0H/tD/hN/2H/qj/jP/FH/uT/mv/DH/Zc+23/lT/iv/Un/jT/lv/Wn/Xf+jD/rz/nv/Xn/g7/gL/pL/kd/2f/kr/if/dU/+Jm1en/mLXTGGGOMsf+PDPmd/YP+zXMKAMQv7Z+89wX2FMv+x/0SALYV/lt7mIjvEgGApwb2fujvW926ycnJvxybJSEotQwAIv9ygl/i1dAZukISdIKK/3Z8w0Tfy/Q7/UdvB8j/Dzkx8Gv8a/+f/wf9P/bEpIwq4aW4/6T/ZQAJpX7NyVmF/z1eDZ1zZgOdoNJ/0H+RDr8z/nxfpAJ0/IecWADomO9fx58Ij8PTkPRPRzLGGGOMMcYYY38zTFTv+Xvr55z1ebz6NScv/Br/3vqcMcYYY4wxxhhj196zffs9+VhSUqee3OAGN3JZo+t/csy1/svEGGOMMcYY+7P9etH/63P5ruWAGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxXOj/xTeNXes5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9fa/woAAP//xvg1gg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000007000000f7ffffff0600000004000000", @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000040000000e000000000000000000000000000052d1c73ef8367337838caccde9122b8fe9cb15f6734d45afb1d4b28067cc2573c6ded1ccf2a11f9b312387e0e08c55f2dc4afe714f2dab85f8ae4c67f20c0582b58029f90892a3a9a45c7e42db84c354ae2089802a1d114fae9eb60f354fdaa97782688167d8a7e759feb9f8833ae189e93c2f71"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pipe(&(0x7f00000045c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb", 0x87}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32", 0x3d}], 0x6, 0x8)
r8 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r6, 0x0, r8, 0x0, 0x8000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22, &(0x7f0000000480), 0xff, 0x451, &(0x7f0000000d00)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x131411, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x1, 0x1}}, 0xe8)
r10 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)

3.263941847s ago: executing program 3 (id=408):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigqueueinfo(0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f447333de39c7095758218a68bc5142f0cb2229fa6c8b0d7c8126aee6d3def94cd964218564fb1d255bce6cef9bea8322326039744a98eead8c59bc75bb5b42123eef53ae4bc331b0ad09a8efc4175c484ad74df9158ff1882cdd83c97c03a35e91c30a0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1700000000000004000000ff0000000000000820f22ef09b7c933cebe2812698adcd5f3a36b2226a914f261a9451ec84118f43b2ad6b95e3d419c8c7cb598ac85735623c9c3e26ba1e8655971bd3b5dc4458a1126d93203e7d070437ee4cc37fa08c0e9c35fa53d9a041d7c8edc919faeb2e678c7f340e0d85c3b46b5308d1c40c6b63417038b036b60b1b62b0d9f70bba294cccef1d4c02c999b581ef15e0f307b782e22f3e5a3af6a7866e999787f149166cc6a1915ff5591d17eca27696dc074cd7579634008a29e7b1d83ce0b4265bf1", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000013850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$FICLONE(r7, 0x40049409, r8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000480)='ext4_sync_file_exit\x00', r4, 0x0, 0x10004}, 0x18)
clock_settime(0xffffffffffffffff, &(0x7f0000000040))
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000004c0)={@loopback, @dev={0xfe, 0x80, '\x00', 0x29}, @loopback, 0x3ff, 0xffff, 0x3ff, 0xc00, 0x6, 0x10006})
syz_emit_ethernet(0xfdef, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.170766225s ago: executing program 0 (id=409):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000300), 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

2.830207153s ago: executing program 0 (id=410):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
eventfd(0x1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef)

2.40115358s ago: executing program 0 (id=413):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2.40005498s ago: executing program 2 (id=414):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x10102, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRESHEX=r0], 0x48) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1000, 0x200}, 0x9, 0x1, 0x1, 0x8, 0x101, 0x0, 0x0, 0x17, 0x5, 0x0, {0x5}}}}]}, 0x78}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.257957351s ago: executing program 2 (id=415):
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r3, &(0x7f0000000300)=""/154, 0x9a)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

2.190074607s ago: executing program 0 (id=416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0xc00)
sendfile(r0, r1, 0x0, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(r5, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000200)="f1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0xfc, 0x1000000000000, 0x0})

1.616079035s ago: executing program 1 (id=417):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb8", 0x8a}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e659959943", 0x85}, {0x0}], 0x6, 0x8)
r2 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

1.354988357s ago: executing program 1 (id=418):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5c05}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
move_mount(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', r9, 0x1, 0x8, 0x0, 0x3, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x68, 0x0, 0x6f, 0x2f, 0x0, @empty, @multicast1, {[@generic={0xc0, 0x2}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x28, 0xe3, 0x0, 0x8, [0x0, 0x3, 0xff, 0xceb1, 0x3ff, 0x3, 0x4, 0x4, 0x6]}, @end, @rr={0x7, 0xb, 0x26, [@private=0xa010101, @local]}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x7, [0x7, 0xa, 0x7, 0x3, 0x3, 0xf57f, 0x3, 0xf323, 0x1ff]}]}}}}})
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.353966087s ago: executing program 2 (id=419):
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r3, &(0x7f0000000300)=""/154, 0x9a)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

1.249901896s ago: executing program 0 (id=420):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000800)={"901a7e7eefec44aa91251e59bb7dd02a", <r4=>0x0, 0x0, {0x0, 0xfffffff9}, {0x9, 0x5}, 0x1, [0x80000000, 0x0, 0x6, 0x2, 0x7, 0x9, 0x100, 0xa, 0x81, 0x1e78, 0x8, 0x7b0d, 0xffffffff, 0x7f, 0x8f, 0x1ff]})
rmdir(&(0x7f0000000200)='./file0\x00')
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000001c0)=<r5=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000900)={"5882a3d35cea25edace129bf6dc3cab1", r4, r5, {0x100, 0x7f}, {0xd7, 0x2}, 0x0, [0x4, 0x8, 0x1, 0x0, 0x9, 0x10902ed6, 0xfffffffffffffff9, 0x10, 0xfffffffffffffff8, 0x9, 0x2a2f0859, 0x5, 0x2, 0x7ff, 0x5, 0x222c]})
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180))
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="181d00282e0cc731e5838a0100"/28], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_adjtime(0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)

438.623643ms ago: executing program 2 (id=421):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6e32684dd331d32f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xff)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

380.835988ms ago: executing program 2 (id=422):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)

312.544634ms ago: executing program 1 (id=423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0)

258.518269ms ago: executing program 1 (id=424):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150d, &(0x7f0000001180)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000007000000f7ffffff0600000004000000", @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000040000000e000000000000000000000000000052d1c73ef8367337838caccde9122b8fe9cb15f6734d45afb1d4b28067cc2573c6ded1ccf2a11f9b312387e0e08c55f2dc4afe714f2dab85f8ae4c67f20c0582b58029f90892a3a9a45c7e42db84c354ae2089802a1d114fae9eb60f354fdaa97782688167d8a7e759feb9f8833ae189e93c2f71"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pipe(&(0x7f00000045c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb", 0x87}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32", 0x3d}], 0x6, 0x8)
r8 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r6, 0x0, r8, 0x0, 0x8000, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22, &(0x7f0000000480), 0xff, 0x451, &(0x7f0000000d00)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mount$bind(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x131411, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x1, 0x1}}, 0xe8)
r10 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)

191.489854ms ago: executing program 3 (id=425):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000300)={[{@init_itable}]}, 0x4, 0x787, &(0x7f0000001000)="$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")
r0 = open(0x0, 0x400141042, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000782ff0a83fe8169bcff9c9270094f758aac98be2316325ab799a34a10e1917ef225cb7cb1e79e74fff1eb754eaf7bd51404f52cba02d25b3"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
socket$inet6(0xa, 0x0, 0x3c)
chdir(&(0x7f0000000140)='./file0\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x4}, {0x8, 0x2, [@TCA_U32_ACT={0x4}]}}]}, 0x34}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)={@loopback, @multicast1, @loopback}, 0xc)
io_setup(0x5, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0xd0, &(0x7f0000000540)=""/208, 0x41100, 0x6, '\x00', 0x0, @fallback=0xd, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0xb, 0xfdcf, 0x7ff}, 0x10, 0x0, r1, 0x0, &(0x7f0000000680)=[0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94)

86.568723ms ago: executing program 4 (id=426):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000408a25886a0000000000010900092100001401220500090501030000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220506000000860e0a"], 0x0}, 0x0)

25.332718ms ago: executing program 1 (id=427):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

0s ago: executing program 1 (id=428):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6491b6"}}, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==")
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0xb9, &(0x7f0000000240)=""/185, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='pstore\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

 overlayfs: missing 'lowerdir'
[   80.951826][  T523] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   80.975158][ T1193] loop2: detected capacity change from 0 to 256
[   81.751262][  T523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.764327][  T523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.774021][  T523] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   81.783014][  T523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.791908][  T523] usb 4-1: config 0 descriptor??
[   82.431225][  T319] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   82.511227][ T1157] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   82.641203][   T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   82.671316][  T319] usb 1-1: Using ep0 maxpacket: 16
[   82.701862][  T523] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[   82.711538][  T523] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input17
[   82.761249][ T1157] usb 2-1: Using ep0 maxpacket: 32
[   82.791325][  T319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[   82.804825][  T523] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   82.841350][    T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   82.881278][ T1157] usb 2-1: config 0 has no interfaces?
[   82.902657][ T1179] UDC core: couldn't find an available UDC or it's busy: -16
[   82.909854][ T1179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   82.917801][  T480] usb 4-1: USB disconnect, device number 13
[   82.971289][  T319] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   82.980223][  T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.988032][  T319] usb 1-1: Product: syz
[   82.992004][  T319] usb 1-1: Manufacturer: syz
[   82.996376][  T319] usb 1-1: SerialNumber: syz
[   83.001840][  T319] usb 1-1: config 0 descriptor??
[   83.031239][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.041331][ T1157] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   83.042436][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.052131][  T319] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   83.061067][   T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   83.068089][ T1157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.077085][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.085472][  T319] usb 1-1: Detected FT232RL
[   83.093933][   T26] usb 3-1: config 0 descriptor??
[   83.100100][ T1157] usb 2-1: Product: syz
[   83.105739][ T1157] usb 2-1: Manufacturer: syz
[   83.110247][ T1157] usb 2-1: SerialNumber: syz
[   83.115556][ T1157] usb 2-1: config 0 descriptor??
[   83.201325][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.212157][    T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.221769][    T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice=11.00
[   83.230572][    T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.238985][    T6] usb 5-1: config 0 descriptor??
[   83.251306][  T319] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   83.356461][ T1157] usb 2-1: USB disconnect, device number 10
[   83.431238][ T1212] loop3: detected capacity change from 0 to 128
[   83.471598][   T30] kauditd_printk_skb: 17 callbacks suppressed
[   83.471614][   T30] audit: type=1326 audit(1729273654.266:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f35c4c59897 code=0x7ffc0000
[   83.500904][   T30] audit: type=1326 audit(1729273654.266:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35c4c5c79a code=0x7ffc0000
[   83.503062][  T319] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   83.533909][ T1212] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   83.548796][ T1212] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff)
[   83.558708][   T30] audit: type=1326 audit(1729273654.346:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35c4c59990 code=0x7ffc0000
[   83.582364][   T30] audit: type=1326 audit(1729273654.346:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f35c4c59d77 code=0x7ffc0000
[   83.606056][   T30] audit: type=1326 audit(1729273654.346:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35c4c59990 code=0x7ffc0000
[   83.629529][   T30] audit: type=1326 audit(1729273654.346:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35c4c5abfb code=0x7ffc0000
[   83.653769][   T30] audit: type=1326 audit(1729273654.346:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f35c4c59c8a code=0x7ffc0000
[   83.676895][   T30] audit: type=1326 audit(1729273654.346:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c4c5aff9 code=0x7ffc0000
[   83.700146][   T30] audit: type=1326 audit(1729273654.346:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c4c5aff9 code=0x7ffc0000
[   83.723826][   T30] audit: type=1326 audit(1729273654.346:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1211 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f35c4c5aff9 code=0x7ffc0000
[   83.734565][ T1200] input: syz1 as /devices/virtual/input/input18
[   83.760210][  T480] usb 1-1: USB disconnect, device number 13
[   83.767250][  T480] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   83.772882][    T6] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0
[   83.778203][  T480] ftdi_sio 1-1:0.0: device disconnected
[   83.787205][    T6] lg-g15 0003:046D:C222.0010: item fetching failed at offset 10/11
[   83.796872][    T6] lg-g15: probe of 0003:046D:C222.0010 failed with error -22
[   83.941238][   T26] usb 3-1: string descriptor 0 read error: -71
[   83.961223][   T26] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71
[   83.969987][   T26] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71
[   83.980280][   T26] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71
[   83.988394][   T26] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[   83.996291][   T26] uclogic: probe of 0003:256C:006D.000F failed with error -71
[   84.009727][   T26] usb 3-1: USB disconnect, device number 10
[   84.059604][ T1218] loop1: detected capacity change from 0 to 40427
[   84.151519][ T1218] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   84.159204][ T1218] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   84.169914][ T1218] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.202701][ T1218] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   84.209644][ T1218] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.424034][ T1231] loop0: detected capacity change from 0 to 2048
[   84.529914][ T1240] loop0: detected capacity change from 0 to 128
[   84.770930][ T1241] binder: 1232:1241 ioctl c0306201 20000580 returned -14
[   84.883436][ T1237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'.
[   84.908181][ T1240] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.915170][ T1237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'.
[   84.926204][ T1240] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   84.975305][ T1245] loop3: detected capacity change from 0 to 256
[   85.592572][   T26] usb 5-1: USB disconnect, device number 14
[   85.853202][ T1260] overlayfs: unrecognized mount option "/" or missing value
[   86.350966][ T1268] syz.3.254[1268] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.351045][ T1268] syz.3.254[1268] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.394540][ T1269] FAULT_INJECTION: forcing a failure.
[   86.394540][ T1269] name failslab, interval 1, probability 0, space 0, times 0
[   86.418092][ T1269] CPU: 0 PID: 1269 Comm: syz.4.253 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[   86.427702][ T1269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   86.437598][ T1269] Call Trace:
[   86.440719][ T1269]  <TASK>
[   86.443500][ T1269]  dump_stack_lvl+0x151/0x1c0
[   86.448009][ T1269]  ? io_uring_drop_tctx_refs+0x190/0x190
[   86.453480][ T1269]  dump_stack+0x15/0x20
[   86.457471][ T1269]  should_fail+0x3c6/0x510
[   86.461721][ T1269]  __should_failslab+0xa4/0xe0
[   86.466324][ T1269]  should_failslab+0x9/0x20
[   86.470664][ T1269]  slab_pre_alloc_hook+0x37/0xd0
[   86.475437][ T1269]  ? __napi_alloc_skb+0x167/0x2e0
[   86.480295][ T1269]  __kmalloc_track_caller+0x6c/0x260
[   86.485417][ T1269]  ? __napi_alloc_skb+0x167/0x2e0
[   86.490274][ T1269]  ? __napi_alloc_skb+0x167/0x2e0
[   86.495134][ T1269]  __alloc_skb+0x10c/0x550
[   86.499393][ T1269]  __napi_alloc_skb+0x167/0x2e0
[   86.504074][ T1269]  napi_get_frags+0x6a/0x170
[   86.508500][ T1269]  tun_get_user+0xd85/0x3aa0
[   86.512927][ T1269]  ? kasan_set_track+0x5d/0x70
[   86.517546][ T1269]  ? putname+0xfa/0x150
[   86.521520][ T1269]  ? __x64_sys_openat+0x201/0x290
[   86.526388][ T1269]  ? x64_sys_call+0x6bf/0x9a0
[   86.530892][ T1269]  ? _kstrtoull+0x3a0/0x4a0
[   86.535236][ T1269]  ? tun_do_read+0x2010/0x2010
[   86.539917][ T1269]  ? kstrtouint_from_user+0x20a/0x2a0
[   86.545131][ T1269]  ? kstrtol_from_user+0x310/0x310
[   86.550180][ T1269]  ? dev_map_hash_lookup_elem+0x11d/0x180
[   86.555740][ T1269]  ? avc_policy_seqno+0x1b/0x70
[   86.560420][ T1269]  ? selinux_file_permission+0x2c4/0x570
[   86.566059][ T1269]  tun_chr_write_iter+0x1e1/0x2e0
[   86.571007][ T1269]  vfs_write+0xd5d/0x1110
[   86.575182][ T1269]  ? file_end_write+0x1c0/0x1c0
[   86.579866][ T1269]  ? __fdget_pos+0x209/0x3a0
[   86.584285][ T1269]  ? ksys_write+0x77/0x2c0
[   86.588542][ T1269]  ksys_write+0x199/0x2c0
[   86.592703][ T1269]  ? exc_page_fault+0x47a/0x7f0
[   86.597393][ T1269]  ? __ia32_sys_read+0x90/0x90
[   86.601990][ T1269]  ? debug_smp_processor_id+0x17/0x20
[   86.607205][ T1269]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   86.613097][ T1269]  __x64_sys_write+0x7b/0x90
[   86.617526][ T1269]  x64_sys_call+0x2f/0x9a0
[   86.621776][ T1269]  do_syscall_64+0x3b/0xb0
[   86.626028][ T1269]  ? clear_bhb_loop+0x35/0x90
[   86.630561][ T1269]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.636273][ T1269] RIP: 0033:0x7f73bf94eff9
[   86.640528][ T1269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.659964][ T1269] RSP: 002b:00007f73be5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   86.668208][ T1269] RAX: ffffffffffffffda RBX: 00007f73bfb07058 RCX: 00007f73bf94eff9
[   86.676022][ T1269] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003
[   86.683831][ T1269] RBP: 00007f73be5a7090 R08: 0000000000000000 R09: 0000000000000000
[   86.691640][ T1269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.699554][ T1269] R13: 0000000000000001 R14: 00007f73bfb07058 R15: 00007ffce4aadf88
[   86.707371][ T1269]  </TASK>
[   87.351918][ T1293] loop3: detected capacity change from 0 to 128
[   87.381180][ T1155] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   87.391716][ T1293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.395492][ T1296] loop2: detected capacity change from 0 to 128
[   87.409431][ T1293] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   87.584839][ T1296] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.595359][ T1296] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff)
[   87.648427][ T1307] loop0: detected capacity change from 0 to 256
[   87.865030][ T1308] binder: 1301:1308 ioctl c0306201 20000580 returned -14
[   87.882514][ T1309] FAULT_INJECTION: forcing a failure.
[   87.882514][ T1309] name failslab, interval 1, probability 0, space 0, times 0
[   87.895069][ T1309] CPU: 1 PID: 1309 Comm: syz.2.261 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[   87.904704][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   87.914594][ T1309] Call Trace:
[   87.917717][ T1309]  <TASK>
[   87.920499][ T1309]  dump_stack_lvl+0x151/0x1c0
[   87.925009][ T1309]  ? io_uring_drop_tctx_refs+0x190/0x190
[   87.930478][ T1309]  ? __kasan_check_read+0x11/0x20
[   87.935341][ T1309]  ? preempt_schedule_irq+0xe7/0x140
[   87.940543][ T1309]  ? __cond_resched+0x20/0x20
[   87.945078][ T1309]  dump_stack+0x15/0x20
[   87.949051][ T1309]  should_fail+0x3c6/0x510
[   87.953303][ T1309]  __should_failslab+0xa4/0xe0
[   87.957901][ T1309]  ? avc_alloc_node+0x8f/0x500
[   87.962512][ T1309]  should_failslab+0x9/0x20
[   87.966843][ T1309]  slab_pre_alloc_hook+0x37/0xd0
[   87.971615][ T1309]  ? avc_alloc_node+0x8f/0x500
[   87.976219][ T1309]  kmem_cache_alloc+0x44/0x200
[   87.980825][ T1309]  avc_alloc_node+0x8f/0x500
[   87.985246][ T1309]  ? is_bpf_text_address+0x172/0x190
[   87.990447][ T1309]  ? avc_xperms_free+0x280/0x280
[   87.995229][ T1309]  ? pick_next_pushable_task+0x210/0x210
[   88.000697][ T1309]  ? __kasan_check_write+0x14/0x20
[   88.005817][ T1309]  avc_update_node+0x31/0xd00
[   88.010335][ T1309]  ? find_lock_lowest_rq+0x75/0x480
[   88.015541][ T1309]  avc_denied+0x13f/0x1b0
[   88.019706][ T1309]  avc_has_perm_noaudit+0x387/0x430
[   88.024729][ T1309]  ? requeue_task_rt+0x410/0x410
[   88.029504][ T1309]  ? avc_denied+0x1b0/0x1b0
[   88.033843][ T1309]  ? __schedule+0xcd4/0x1590
[   88.038273][ T1309]  avc_has_perm+0xd2/0x260
[   88.042523][ T1309]  ? avc_has_perm_noaudit+0x430/0x430
[   88.047731][ T1309]  ? selinux_mount+0x14d/0x580
[   88.052334][ T1309]  ? memcpy+0x56/0x70
[   88.056148][ T1309]  selinux_mount+0x41c/0x580
[   88.060923][ T1309]  ? selinux_sb_statfs+0x250/0x250
[   88.065872][ T1309]  security_sb_mount+0x88/0xc0
[   88.070469][ T1309]  path_mount+0xc4/0x1070
[   88.074638][ T1309]  ? user_path_at_empty+0x14e/0x1a0
[   88.079669][ T1309]  __se_sys_mount+0x2c4/0x3b0
[   88.084185][ T1309]  ? __x64_sys_mount+0xd0/0xd0
[   88.088784][ T1309]  __x64_sys_mount+0xbf/0xd0
[   88.093209][ T1309]  x64_sys_call+0x49d/0x9a0
[   88.097549][ T1309]  do_syscall_64+0x3b/0xb0
[   88.101800][ T1309]  ? clear_bhb_loop+0x35/0x90
[   88.106312][ T1309]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   88.112039][ T1309] RIP: 0033:0x7f342fee8ff9
[   88.116295][ T1309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.135734][ T1309] RSP: 002b:00007f342eb41038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   88.143978][ T1309] RAX: ffffffffffffffda RBX: 00007f34300a1058 RCX: 00007f342fee8ff9
[   88.151788][ T1309] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000
[   88.159599][ T1309] RBP: 00007f342eb41090 R08: 0000000020000780 R09: 0000000000000000
[   88.167415][ T1309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.175226][ T1309] R13: 0000000000000000 R14: 00007f34300a1058 R15: 00007fff31c5c478
[   88.183041][ T1309]  </TASK>
[   88.187231][ T1155] usb 5-1: Using ep0 maxpacket: 32
[   88.200764][ T1157] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   88.201413][ T1309] overlayfs: upper fs needs to support d_type.
[   88.319357][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.334139][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.832911][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.848445][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.881340][ T1155] usb 5-1: config 0 has no interfaces?
[   88.955480][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.971097][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.985527][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   88.999632][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   89.013422][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   89.027564][  T759] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   89.119159][ T1321] loop3: detected capacity change from 0 to 256
[   89.181278][ T1157] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.191558][ T1157] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.896651][ T1322] binder: 1318:1322 ioctl c0306201 20000580 returned -14
[   90.001388][ T1155] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   90.158547][ T1155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.171593][ T1155] usb 5-1: Product: syz
[   90.174910][ T1330] loop4: detected capacity change from 0 to 512
[   90.189923][ T1330] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22
[   90.203947][ T1330] EXT4-fs (loop4): dax option not supported
[   90.210631][  T759] syz-executor (759) used greatest stack depth: 20344 bytes left
[   90.241878][ T1155] usb 5-1: Manufacturer: syz
[   90.247398][ T1155] usb 5-1: config 0 descriptor??
[   90.281207][ T1155] usb 5-1: can't set config #0, error -71
[   90.288893][ T1155] usb 5-1: USB disconnect, device number 15
[   90.603979][ T1157] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.613592][ T1157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.621703][ T1157] usb 2-1: Product: syz
[   90.625683][ T1157] usb 2-1: Manufacturer: syz
[   90.652198][   T30] kauditd_printk_skb: 126 callbacks suppressed
[   90.652215][   T30] audit: type=1400 audit(1729273661.446:577): avc:  denied  { read } for  pid=1328 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   90.682870][ T1157] usb 2-1: SerialNumber: syz
[   90.711189][   T26] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   90.711263][ T1157] usb 2-1: can't set config #1, error -71
[   90.726569][ T1157] usb 2-1: USB disconnect, device number 11
[   90.726743][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.739507][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.746808][ T1335] device bridge_slave_0 entered promiscuous mode
[   90.753650][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.760492][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.767990][ T1335] device bridge_slave_1 entered promiscuous mode
[   90.824638][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.831528][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.838583][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.845406][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.868581][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.875985][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.883763][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.891063][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.900534][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.908830][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.915705][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.926103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.934260][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.941086][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.954984][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.964272][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.980796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.981595][ T1155] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[   90.996292][ T1335] device veth0_vlan entered promiscuous mode
[   91.003257][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.011535][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.019194][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.073670][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.093216][ T1335] device veth1_macvtap entered promiscuous mode
[   91.146913][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.158259][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.168228][   T26] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   91.168614][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.177201][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.197092][   T26] usb 4-1: config 0 descriptor??
[   91.210887][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.321284][ T1155] usb 5-1: Using ep0 maxpacket: 8
[   91.914157][ T1155] usb 5-1: New USB device found, idVendor=09d8, idProduct=0320, bcdDevice=8c.41
[   91.919882][ T1345] loop0: detected capacity change from 0 to 40427
[   91.923220][ T1155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.938023][ T1155] usb 5-1: config 0 descriptor??
[   91.989286][ T1357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[   91.998347][ T1357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'.
[   92.008232][ T1345] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   92.017841][ T1345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   92.027021][   T10] device bridge_slave_1 left promiscuous mode
[   92.033114][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.046777][ T1345] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.087180][   T10] device bridge_slave_0 left promiscuous mode
[   92.093569][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.108550][ T1345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   92.115630][ T1345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   92.115769][   T30] audit: type=1326 audit(1729273662.906:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958451ff9 code=0x7ffc0000
[   92.157322][   T10] device veth1_macvtap left promiscuous mode
[   92.159633][ T1366] loop2: detected capacity change from 0 to 128
[   92.163287][   T10] device veth0_vlan left promiscuous mode
[   92.169843][   T30] audit: type=1326 audit(1729273662.946:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9958451ff9 code=0x7ffc0000
[   92.197952][   T30] audit: type=1326 audit(1729273662.946:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958451ff9 code=0x7ffc0000
[   92.228428][   T30] audit: type=1326 audit(1729273662.946:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9958451ff9 code=0x7ffc0000
[   92.252233][   T30] audit: type=1326 audit(1729273662.946:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9958452033 code=0x7ffc0000
[   92.275327][   T30] audit: type=1326 audit(1729273662.946:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9958450adf code=0x7ffc0000
[   92.276245][   T26] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[   92.298406][   T30] audit: type=1326 audit(1729273662.946:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9958452087 code=0x7ffc0000
[   92.331225][   T30] audit: type=1326 audit(1729273662.946:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9958450990 code=0x7ffc0000
[   92.357066][   T30] audit: type=1326 audit(1729273662.946:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9958451bfb code=0x7ffc0000
[   92.380179][    T6] usb 5-1: USB disconnect, device number 16
[   92.391962][   T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input19
[   92.406138][ T1366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.416801][ T1366] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff)
[   92.497538][   T26] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   92.577362][   T26] usb 4-1: USB disconnect, device number 14
[   92.606360][ T1374] loop1: detected capacity change from 0 to 256
[   92.689972][ T1377] overlayfs: workdir and upperdir must reside under the same mount
[   93.438169][ T1379] binder: 1375:1379 ioctl c0306201 20000580 returned -14
[   93.967302][ T1390] loop1: detected capacity change from 0 to 128
[   93.989983][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.004402][ T1391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[   94.345942][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.416770][ T1398] 9pnet: Insufficient options for proto=fd
[   94.432285][ T1390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   94.449477][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.471039][ T1390] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   94.513230][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.526915][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.546528][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.561785][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.575187][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.589559][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   94.603361][ T1335] EXT4-fs error (device loop2): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory hole found for htree leaf block 0
[   95.864445][  T480] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   95.880366][   T30] kauditd_printk_skb: 27 callbacks suppressed
[   95.880385][   T30] audit: type=1400 audit(1729273666.666:614): avc:  denied  { read append } for  pid=1405 comm="syz.0.292" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   95.956906][   T30] audit: type=1400 audit(1729273666.666:615): avc:  denied  { open } for  pid=1405 comm="syz.0.292" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   96.094567][ T1417] loop0: detected capacity change from 0 to 256
[   96.114239][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.121091][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.128454][ T1416] device bridge_slave_0 entered promiscuous mode
[   96.142397][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.149436][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.734223][ T1422] binder: 1412:1422 ioctl c0306201 20000580 returned -14
[   96.775245][ T1416] device bridge_slave_1 entered promiscuous mode
[   96.965829][  T480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.003875][  T480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.023896][  T480] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice=11.00
[   97.041206][  T480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.065833][  T480] usb 2-1: config 0 descriptor??
[   97.086991][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.093881][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.100945][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.107772][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.136751][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.144897][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.153205][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.160660][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.169952][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.178242][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.186324][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.193284][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.211435][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.219740][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.227897][ T1354] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[   97.228955][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.242124][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.249473][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.257570][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.265796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.273794][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.289528][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.297737][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.309419][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.317467][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.325637][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.331353][ T1155] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[   97.333289][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.350647][ T1416] device veth0_vlan entered promiscuous mode
[   97.360629][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.368844][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.378274][ T1416] device veth1_macvtap entered promiscuous mode
[   97.390083][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.397569][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.405750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.415322][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.423436][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.515251][ T1354] usb 5-1: Using ep0 maxpacket: 32
[   97.544512][  T480] lg-g15 0003:046D:C222.0012: unknown main item tag 0x0
[   97.551760][  T480] lg-g15 0003:046D:C222.0012: item fetching failed at offset 10/11
[   97.559833][  T480] lg-g15: probe of 0003:046D:C222.0012 failed with error -22
[   97.692151][ T1354] usb 5-1: config 0 has no interfaces?
[   97.697937][ T1438] binder: 1430:1438 ioctl c0306201 20000580 returned -14
[   97.801803][ T1155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.814573][ T1155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.826856][ T1155] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   97.840320][ T1155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.852327][ T1155] usb 4-1: config 0 descriptor??
[   97.901556][ T1354] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   97.911355][ T1354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.919169][ T1354] usb 5-1: Product: syz
[   97.923203][ T1354] usb 5-1: Manufacturer: syz
[   97.927584][ T1354] usb 5-1: SerialNumber: syz
[   97.932660][ T1354] usb 5-1: config 0 descriptor??
[   97.951785][   T10] device bridge_slave_1 left promiscuous mode
[   97.957762][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.965169][   T10] device bridge_slave_0 left promiscuous mode
[   97.971093][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.980366][   T10] device veth1_macvtap left promiscuous mode
[   97.986657][   T10] device veth0_vlan left promiscuous mode
[   97.991214][    T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   98.190519][ T1157] usb 5-1: USB disconnect, device number 17
[   98.231240][    T6] usb 3-1: Using ep0 maxpacket: 16
[   98.326508][ T1442] loop0: detected capacity change from 0 to 128
[   98.342050][ T1155] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[   98.351337][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.352259][ T1155] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input20
[   98.362379][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.382815][    T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   98.395588][    T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   98.404550][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.417249][    T6] usb 3-1: config 0 descriptor??
[   98.417282][ T1442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   98.432714][ T1442] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   98.477580][ T1155] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   98.529080][ T1446] FAULT_INJECTION: forcing a failure.
[   98.529080][ T1446] name failslab, interval 1, probability 0, space 0, times 0
[   98.542262][ T1446] CPU: 1 PID: 1446 Comm: syz.0.301 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[   98.546401][ T1157] usb 4-1: USB disconnect, device number 15
[   98.551913][ T1446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   98.551929][ T1446] Call Trace:
[   98.551935][ T1446]  <TASK>
[   98.551944][ T1446]  dump_stack_lvl+0x151/0x1c0
[   98.562780][   T30] audit: type=1400 audit(1729273669.356:616): avc:  denied  { unlink } for  pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   98.567659][ T1446]  ? io_uring_drop_tctx_refs+0x190/0x190
[   98.605595][ T1446]  ? kmem_cache_free+0x116/0x2e0
[   98.610376][ T1446]  ? kasan_set_track+0x5d/0x70
[   98.614963][ T1446]  ? kasan_set_free_info+0x23/0x40
[   98.619911][ T1446]  ? ____kasan_slab_free+0x126/0x160
[   98.625032][ T1446]  dump_stack+0x15/0x20
[   98.629021][ T1446]  should_fail+0x3c6/0x510
[   98.633276][ T1446]  __should_failslab+0xa4/0xe0
[   98.637875][ T1446]  should_failslab+0x9/0x20
[   98.642217][ T1446]  slab_pre_alloc_hook+0x37/0xd0
[   98.646989][ T1446]  __kmalloc+0x6d/0x270
[   98.650979][ T1446]  ? bpf_test_init+0x101/0x1b0
[   98.655582][ T1446]  bpf_test_init+0x101/0x1b0
[   98.660013][ T1446]  bpf_prog_test_run_skb+0x268/0x1420
[   98.665213][ T1446]  ? __kasan_check_write+0x14/0x20
[   98.670159][ T1446]  ? proc_fail_nth_write+0x20b/0x290
[   98.675288][ T1446]  ? selinux_file_permission+0x2c4/0x570
[   98.680749][ T1446]  ? proc_fail_nth_read+0x210/0x210
[   98.685804][ T1446]  ? fsnotify_perm+0x6a/0x5b0
[   98.690299][ T1446]  ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0
[   98.696026][ T1446]  ? __kasan_check_write+0x14/0x20
[   98.700973][ T1446]  ? fput_many+0x160/0x1b0
[   98.705225][ T1446]  ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0
[   98.711107][ T1446]  bpf_prog_test_run+0x3b0/0x630
[   98.715868][ T1446]  ? bpf_prog_query+0x220/0x220
[   98.720552][ T1446]  ? selinux_bpf+0xd2/0x100
[   98.724891][ T1446]  ? security_bpf+0x82/0xb0
[   98.729228][ T1446]  __sys_bpf+0x525/0x760
[   98.733307][ T1446]  ? fput_many+0x160/0x1b0
[   98.737561][ T1446]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[   98.742770][ T1446]  ? debug_smp_processor_id+0x17/0x20
[   98.747974][ T1446]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   98.753963][ T1446]  __x64_sys_bpf+0x7c/0x90
[   98.758218][ T1446]  x64_sys_call+0x87f/0x9a0
[   98.762556][ T1446]  do_syscall_64+0x3b/0xb0
[   98.766806][ T1446]  ? clear_bhb_loop+0x35/0x90
[   98.771321][ T1446]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   98.777050][ T1446] RIP: 0033:0x7f234552cff9
[   98.781305][ T1446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.800743][ T1446] RSP: 002b:00007f23441a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   98.809086][ T1446] RAX: ffffffffffffffda RBX: 00007f23456e4f80 RCX: 00007f234552cff9
[   98.816887][ T1446] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a
[   98.824700][ T1446] RBP: 00007f23441a6090 R08: 0000000000000000 R09: 0000000000000000
[   98.832506][ T1446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.840316][ T1446] R13: 0000000000000000 R14: 00007f23456e4f80 R15: 00007ffc0ce2a498
[   98.848144][ T1446]  </TASK>
[   98.873837][ T1155] usb 2-1: USB disconnect, device number 12
[   98.879839][ T1437] UDC core: couldn't find an available UDC or it's busy: -16
[   98.896259][ T1437] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   98.912884][ T1437] loop2: detected capacity change from 0 to 512
[   98.995307][ T1437] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.030839][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[   99.050296][ T1452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[   99.069316][ T1437] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   99.085131][ T1437] EXT4-fs (loop2): 1 truncate cleaned up
[   99.090663][ T1437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.167698][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'.
[   99.176456][ T1459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'.
[   99.415996][ T1449] loop0: detected capacity change from 0 to 40427
[   99.426673][ T1447] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.440594][ T1447] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.449754][ T1447] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.463363][ T1447] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.472606][ T1447] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.485226][ T1447] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.497555][ T1449] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   99.505469][ T1449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   99.514739][ T1447] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.525437][ T1437] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.537530][ T1437] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.546558][ T1437] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.558450][ T1437] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.567970][ T1449] F2FS-fs (loop0): Found nat_bits in checkpoint
[   99.568941][ T1437] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.585999][ T1437] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   99.594995][ T1437] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.299: corrupted xattr block 19
[   99.628453][ T1449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   99.635483][ T1449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   99.728305][ T1461] loop3: detected capacity change from 0 to 40427
[   99.786271][ T1468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   99.795326][ T1461] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   99.811224][ T1461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   99.826380][ T1459] syz.4.305 (1459) used greatest stack depth: 20216 bytes left
[   99.836677][ T1470] loop0: detected capacity change from 0 to 16
[   99.843560][ T1471] 9pnet: Insufficient options for proto=fd
[   99.853948][ T1461] F2FS-fs (loop3): Found nat_bits in checkpoint
[   99.889991][ T1478] loop4: detected capacity change from 0 to 256
[   99.900108][ T1461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   99.908755][ T1470] erofs: (device loop0): mounted with root inode @ nid 36.
[   99.910005][ T1461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   99.924788][ T1470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'.
[   99.941070][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'.
[   99.951350][    T6] usbhid 3-1:0.0: can't add hid device: -71
[   99.958947][    T6] usbhid: probe of 3-1:0.0 failed with error -71
[   99.981275][    T6] usb 3-1: USB disconnect, device number 11
[  100.062121][ T1470] syz.0.307[1470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.166791][ T1487] FAULT_INJECTION: forcing a failure.
[  100.166791][ T1487] name failslab, interval 1, probability 0, space 0, times 0
[  100.190394][ T1487] CPU: 1 PID: 1487 Comm: syz.4.311 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[  100.199953][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  100.209852][ T1487] Call Trace:
[  100.212971][ T1487]  <TASK>
[  100.215751][ T1487]  dump_stack_lvl+0x151/0x1c0
[  100.220265][ T1487]  ? io_uring_drop_tctx_refs+0x190/0x190
[  100.225731][ T1487]  ? __kasan_check_read+0x11/0x20
[  100.230588][ T1487]  ? preempt_schedule_irq+0xe7/0x140
[  100.235726][ T1487]  ? __cond_resched+0x20/0x20
[  100.240226][ T1487]  ? find_lock_lowest_rq+0x75/0x480
[  100.245258][ T1487]  dump_stack+0x15/0x20
[  100.249257][ T1487]  should_fail+0x3c6/0x510
[  100.253590][ T1487]  __should_failslab+0xa4/0xe0
[  100.258186][ T1487]  ? getname_flags+0xba/0x520
[  100.262699][ T1487]  should_failslab+0x9/0x20
[  100.267038][ T1487]  slab_pre_alloc_hook+0x37/0xd0
[  100.271814][ T1487]  ? getname_flags+0xba/0x520
[  100.276338][ T1487]  kmem_cache_alloc+0x44/0x200
[  100.280941][ T1487]  getname_flags+0xba/0x520
[  100.285265][ T1487]  getname+0x19/0x20
[  100.289002][ T1487]  do_sys_openat2+0xd7/0x820
[  100.293424][ T1487]  ? wait_for_completion_killable_timeout+0x10/0x10
[  100.299952][ T1487]  ? __mutex_lock_slowpath+0x10/0x10
[  100.305081][ T1487]  ? do_sys_open+0x220/0x220
[  100.309497][ T1487]  ? __kasan_check_read+0x11/0x20
[  100.314361][ T1487]  ? preempt_schedule_irq+0xe7/0x140
[  100.319600][ T1487]  ? ksys_write+0x260/0x2c0
[  100.323938][ T1487]  __x64_sys_openat+0x243/0x290
[  100.328637][ T1487]  ? __ia32_sys_open+0x270/0x270
[  100.333398][ T1487]  ? switch_fpu_return+0x15f/0x2e0
[  100.338542][ T1487]  ? exit_to_user_mode_prepare+0x7e/0xa0
[  100.344012][ T1487]  x64_sys_call+0x6bf/0x9a0
[  100.348347][ T1487]  do_syscall_64+0x3b/0xb0
[  100.352599][ T1487]  ? clear_bhb_loop+0x35/0x90
[  100.357122][ T1487]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.362842][ T1487] RIP: 0033:0x7f73bf94eff9
[  100.367095][ T1487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.386628][ T1487] RSP: 002b:00007f73be586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  100.391236][ T1157] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  100.394869][ T1487] RAX: ffffffffffffffda RBX: 00007f73bfb07130 RCX: 00007f73bf94eff9
[  100.394889][ T1487] RDX: 00000000000026e1 RSI: 0000000020000240 RDI: ffffffffffffff9c
[  100.394904][ T1487] RBP: 00007f73be586090 R08: 0000000000000000 R09: 0000000000000000
[  100.394917][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.394930][ T1487] R13: 0000000000000000 R14: 00007f73bfb07130 R15: 00007ffce4aadf88
[  100.441314][ T1487]  </TASK>
[  100.460527][ T1416] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  100.481704][ T1416] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  100.552983][   T30] audit: type=1400 audit(1729273671.346:617): avc:  denied  { write } for  pid=1460 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  100.701257][ T1157] usb 2-1: Using ep0 maxpacket: 32
[  100.769946][   T30] audit: type=1400 audit(1729273671.556:618): avc:  denied  { unmount } for  pid=855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  100.795929][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.821306][ T1157] usb 2-1: config 0 has no interfaces?
[  100.828813][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.838344][ T1490] device bridge_slave_0 entered promiscuous mode
[  100.849713][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.856722][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.864565][ T1490] device bridge_slave_1 entered promiscuous mode
[  100.935370][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.942271][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.949326][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.956158][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.977722][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.985929][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.998574][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.001268][ T1157] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  101.014623][ T1157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.022948][ T1157] usb 2-1: Product: syz
[  101.029284][ T1157] usb 2-1: Manufacturer: syz
[  101.029505][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.042159][ T1157] usb 2-1: SerialNumber: syz
[  101.047473][ T1157] usb 2-1: config 0 descriptor??
[  101.053026][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.060004][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.067751][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.076210][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.083094][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.100880][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.110758][ T1155] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  101.111188][  T532] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  101.127424][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.205148][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  101.216649][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  101.224598][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  101.232158][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  101.240089][   T10] device bridge_slave_1 left promiscuous mode
[  101.246095][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.253413][   T10] device bridge_slave_0 left promiscuous mode
[  101.259376][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.267710][   T10] device veth1_macvtap left promiscuous mode
[  101.273699][   T10] device veth0_vlan left promiscuous mode
[  101.308988][    T6] usb 2-1: USB disconnect, device number 13
[  101.353973][ T1490] device veth0_vlan entered promiscuous mode
[  101.360412][ T1507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'.
[  101.369146][ T1508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'.
[  101.386122][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  101.394406][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  101.404317][ T1490] device veth1_macvtap entered promiscuous mode
[  101.414510][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  101.422135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  101.430264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.440124][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  101.448219][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.472805][ T1155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.483674][ T1155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.493294][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.493328][  T532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.493359][  T532] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  101.504140][ T1155] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice=11.00
[  101.514326][  T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.531566][ T1155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.532594][ T1155] usb 1-1: config 0 descriptor??
[  101.552087][  T532] usb 5-1: config 0 descriptor??
[  101.811241][  T319] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  101.966468][ T1514] loop1: detected capacity change from 0 to 40427
[  102.014779][ T1514] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  102.026232][ T1514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  102.032637][ T1155] lg-g15 0003:046D:C222.0014: unknown main item tag 0x0
[  102.035305][  T532] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor
[  102.041740][ T1155] lg-g15 0003:046D:C222.0014: item fetching failed at offset 10/11
[  102.051268][  T319] usb 3-1: Using ep0 maxpacket: 32
[  102.067027][  T532] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0015/input/input21
[  102.077990][ T1155] lg-g15: probe of 0003:046D:C222.0014 failed with error -22
[  102.087466][ T1517] device lo entered promiscuous mode
[  102.094141][ T1514] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.100581][ T1517] device tunl0 entered promiscuous mode
[  102.108025][ T1517] device gre0 entered promiscuous mode
[  102.115951][ T1517] device gretap0 entered promiscuous mode
[  102.123307][ T1517] device erspan0 entered promiscuous mode
[  102.130325][ T1517] device ip_vti0 entered promiscuous mode
[  102.137128][ T1517] device ip6_vti0 entered promiscuous mode
[  102.139551][ T1514] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  102.149838][ T1517] device sit0 entered promiscuous mode
[  102.149879][ T1514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.158861][  T532] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  102.168303][   T30] audit: type=1400 audit(1729273672.946:619): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=682 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  102.197353][   T30] audit: type=1400 audit(1729273672.946:620): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=682 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  102.214039][  T319] usb 3-1: config 0 has no interfaces?
[  102.225700][ T1517] device ip6tnl0 entered promiscuous mode
[  102.226005][   T30] audit: type=1400 audit(1729273672.946:621): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=682 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  102.255741][ T1517] device ip6gre0 entered promiscuous mode
[  102.264779][ T1517] device syz_tun entered promiscuous mode
[  102.268613][  T349] usb 5-1: USB disconnect, device number 18
[  102.272738][   T30] audit: type=1400 audit(1729273672.976:622): avc:  denied  { mount } for  pid=1513 comm="syz.1.321" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  102.298469][ T1517] device ip6gretap0 entered promiscuous mode
[  102.309599][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.316702][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.324694][ T1517] device bridge0 entered promiscuous mode
[  102.332575][ T1517] device dummy0 entered promiscuous mode
[  102.339636][ T1517] device veth0 entered promiscuous mode
[  102.346975][ T1517] device veth1 entered promiscuous mode
[  102.355726][ T1517] device wg0 entered promiscuous mode
[  102.362201][ T1517] device wg1 entered promiscuous mode
[  102.371487][ T1517] device wg2 entered promiscuous mode
[  102.377811][ T1517] device veth0_to_bridge entered promiscuous mode
[  102.387072][ T1517] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  102.421298][  T319] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  102.430675][  T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.444909][  T319] usb 3-1: Product: syz
[  102.448905][  T319] usb 3-1: Manufacturer: syz
[  102.453640][  T319] usb 3-1: SerialNumber: syz
[  102.463230][  T319] usb 3-1: config 0 descriptor??
[  102.691221][  T480] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  102.801333][ T1354] usb 3-1: USB disconnect, device number 12
[  102.906457][ T1533] syz.4.326 uses obsolete (PF_INET,SOCK_PACKET)
[  102.991230][  T480] usb 4-1: Using ep0 maxpacket: 16
[  103.074760][ T1535] syz.4.326[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.075177][ T1535] syz.4.326[1535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  103.143655][  T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.186301][  T480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.200496][  T480] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  103.217725][  T480] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  103.229454][  T480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.260470][  T480] usb 4-1: config 0 descriptor??
[  103.732516][  T319] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  103.845256][ T1525] UDC core: couldn't find an available UDC or it's busy: -16
[  103.853305][  T532] usb 1-1: USB disconnect, device number 14
[  103.853541][ T1525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.880643][ T1525] loop3: detected capacity change from 0 to 512
[  103.921645][ T1525] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.943538][ T1525] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  103.958407][ T1525] EXT4-fs (loop3): 1 truncate cleaned up
[  103.964139][ T1525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.002377][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.014195][ T1525] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.023064][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.034814][ T1525] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.043648][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.055349][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.055572][ T1554] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.067129][ T1525] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.079238][ T1554] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.095897][  T319] usb 2-1: Using ep0 maxpacket: 16
[  104.096013][ T1554] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.113013][ T1554] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.129789][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.141747][ T1525] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  104.150579][ T1525] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.324: corrupted xattr block 19
[  104.162210][ T1155] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  104.221290][  T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.231958][  T319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  104.241836][  T319] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  104.275986][ T1557] loop2: detected capacity change from 0 to 256
[  104.321243][  T532] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  104.415559][  T319] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.424590][  T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.432469][  T319] usb 2-1: Product: syz
[  104.436417][  T319] usb 2-1: Manufacturer: syz
[  104.440841][  T319] usb 2-1: SerialNumber: syz
[  104.451314][ T1155] usb 5-1: Using ep0 maxpacket: 8
[  104.481407][  T480] usbhid 4-1:0.0: can't add hid device: -71
[  104.487898][  T480] usbhid: probe of 4-1:0.0 failed with error -71
[  104.502214][  T480] usb 4-1: USB disconnect, device number 16
[  104.661391][ T1155] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  104.742915][ T1155] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  104.762841][ T1155] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  104.771938][ T1155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.791187][  T532] usb 1-1: Using ep0 maxpacket: 32
[  104.834333][ T1543] UDC core: couldn't find an available UDC or it's busy: -16
[  104.841652][ T1543] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  104.849220][ T1543] UDC core: couldn't find an available UDC or it's busy: -16
[  104.856505][ T1543] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  104.864323][ T1560] UDC core: couldn't find an available UDC or it's busy: -16
[  104.871759][ T1560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  104.911301][  T532] usb 1-1: config 0 has no interfaces?
[  104.981326][  T319] usb 2-1: unit 4 not found!
[  104.991698][  T319] usb 2-1: USB disconnect, device number 14
[  105.035877][   T30] audit: type=1400 audit(1729273675.826:623): avc:  denied  { setopt } for  pid=1546 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  105.055651][   T30] audit: type=1400 audit(1729273675.826:624): avc:  denied  { bind } for  pid=1546 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  105.075351][  T532] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  105.081297][ T1155] usb 5-1: string descriptor 0 read error: -71
[  105.084391][  T532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.090727][ T1155] hub 5-1:32.0: USB hub found
[  105.099684][  T532] usb 1-1: Product: syz
[  105.106573][  T532] usb 1-1: Manufacturer: syz
[  105.111002][  T532] usb 1-1: SerialNumber: syz
[  105.120493][  T532] usb 1-1: config 0 descriptor??
[  105.161991][ T1015] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  105.180495][ T1015] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  105.201342][ T1155] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[  105.251653][ T1155] usb 5-1: USB disconnect, device number 19
[  105.351211][  T319] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  105.371235][  T349] usb 1-1: USB disconnect, device number 15
[  105.378803][ T1569] loop2: detected capacity change from 0 to 40427
[  105.390457][ T1569] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  105.399044][ T1569] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  105.415629][ T1569] F2FS-fs (loop2): Found nat_bits in checkpoint
[  105.443805][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.450670][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.458452][ T1571] device bridge_slave_0 entered promiscuous mode
[  105.461491][ T1569] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  105.466108][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.471528][ T1569] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  105.486237][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.493792][ T1571] device bridge_slave_1 entered promiscuous mode
[  105.554015][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.560896][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.568026][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.574889][ T1571] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.599963][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.607713][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.615730][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.634019][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.642439][  T412] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.649289][  T412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.656678][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.665615][  T412] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.672496][  T412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.684732][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.692878][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.717614][ T1571] device veth0_vlan entered promiscuous mode
[  105.731276][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.743655][ T1571] device veth1_macvtap entered promiscuous mode
[  105.749833][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.768086][  T319] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  105.781318][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.789650][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.798384][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.798695][  T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.807628][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.818853][  T319] usb 2-1: config 0 descriptor??
[  105.823159][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.833872][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.841899][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.892109][    T8] device bridge_slave_1 left promiscuous mode
[  105.909089][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.909184][ T1584] loop3: detected capacity change from 0 to 256
[  105.928883][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.958015][    T8] device veth1_macvtap left promiscuous mode
[  105.964347][    T8] device veth0_vlan left promiscuous mode
[  105.982748][ T1584] FAT-fs (loop3): Unrecognized mount option "usKfre" or missing value
[  106.095022][ T1584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.337'.
[  106.499794][  T319] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor
[  106.503204][ T1564] UDC core: couldn't find an available UDC or it's busy: -16
[  106.508184][    T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  106.517734][ T1564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  106.524775][  T319] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0016/input/input22
[  106.584514][ T1594] FAULT_INJECTION: forcing a failure.
[  106.584514][ T1594] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  106.597419][ T1594] CPU: 0 PID: 1594 Comm: syz.2.341 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[  106.607004][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  106.616890][ T1594] Call Trace:
[  106.620014][ T1594]  <TASK>
[  106.622798][ T1594]  dump_stack_lvl+0x151/0x1c0
[  106.627305][ T1594]  ? io_uring_drop_tctx_refs+0x190/0x190
[  106.632782][ T1594]  ? __kasan_check_read+0x11/0x20
[  106.637635][ T1594]  dump_stack+0x15/0x20
[  106.641626][ T1594]  should_fail+0x3c6/0x510
[  106.645885][ T1594]  should_fail_usercopy+0x1a/0x20
[  106.650736][ T1594]  copy_page_from_iter_atomic+0x423/0x10e0
[  106.656386][ T1594]  ? pipe_zero+0x4e0/0x4e0
[  106.660633][ T1594]  ? ktime_get_coarse_real_ts64+0x117/0x130
[  106.666375][ T1594]  generic_perform_write+0x337/0x5a0
[  106.671481][ T1594]  ? grab_cache_page_write_begin+0xa0/0xa0
[  106.677123][ T1594]  ? file_remove_privs+0x610/0x610
[  106.682067][ T1594]  ? rwsem_write_trylock+0x153/0x340
[  106.687191][ T1594]  ? rwsem_mark_wake+0x770/0x770
[  106.691961][ T1594]  __generic_file_write_iter+0x25b/0x4b0
[  106.697429][ T1594]  generic_file_write_iter+0xaf/0x1c0
[  106.702638][ T1594]  vfs_write+0xd5d/0x1110
[  106.706923][ T1594]  ? file_end_write+0x1c0/0x1c0
[  106.711609][ T1594]  ? __fdget_pos+0x209/0x3a0
[  106.716030][ T1594]  ? ksys_write+0x77/0x2c0
[  106.720292][ T1594]  ksys_write+0x199/0x2c0
[  106.724458][ T1594]  ? exc_page_fault+0x47a/0x7f0
[  106.729138][ T1594]  ? __ia32_sys_read+0x90/0x90
[  106.733737][ T1594]  __x64_sys_write+0x7b/0x90
[  106.738171][ T1594]  x64_sys_call+0x2f/0x9a0
[  106.742422][ T1594]  do_syscall_64+0x3b/0xb0
[  106.746669][ T1594]  ? clear_bhb_loop+0x35/0x90
[  106.751182][ T1594]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  106.756909][ T1594] RIP: 0033:0x7f14d8ef6adf
[  106.761168][ T1594] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  106.780605][ T1594] RSP: 002b:00007f14d7b70df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  106.788848][ T1594] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f14d8ef6adf
[  106.796659][ T1594] RDX: 0000000000010000 RSI: 00007f14cf751000 RDI: 0000000000000004
[  106.804471][ T1594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000254
[  106.812372][ T1594] R10: 00000000000003b0 R11: 0000000000000293 R12: 0000000000000004
[  106.820183][ T1594] R13: 00007f14d7b70ef0 R14: 00007f14d7b70eb0 R15: 00007f14cf751000
[  106.828085][ T1594]  </TASK>
[  106.831980][ T1594] loop2: detected capacity change from 0 to 128
[  106.836084][  T319] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  106.896141][  T319] usb 2-1: USB disconnect, device number 15
[  106.899040][ T1597] loop3: detected capacity change from 0 to 256
[  106.908150][ T1594] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.341: iget: checksum invalid
[  106.919430][ T1594] EXT4-fs (loop2): get root inode failed
[  106.925168][ T1594] EXT4-fs (loop2): mount failed
[  106.951191][    T6] usb 1-1: Using ep0 maxpacket: 32
[  107.007968][ T1599] loop2: detected capacity change from 0 to 128
[  107.026374][ T1599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.036963][ T1599] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  107.071322][    T6] usb 1-1: config 0 has no interfaces?
[  107.101397][ T1157] Bluetooth: hci0: command 0x1003 tx timeout
[  107.107276][ T1566] Bluetooth: hci0: sending frame failed (-49)
[  107.117594][ T1603] loop2: detected capacity change from 0 to 256
[  107.240952][   T30] audit: type=1400 audit(1729273678.006:625): avc:  denied  { mounton } for  pid=1596 comm="syz.3.342" path="/1/bus/file0" dev="loop3" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  107.462748][ T1608] loop1: detected capacity change from 0 to 16
[  107.521852][ T1608] erofs: (device loop1): mounted with root inode @ nid 36.
[  107.531379][    T6] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  107.536605][ T1608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[  107.540410][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.932890][ T1608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'.
[  107.939001][    T6] usb 1-1: Product: syz
[  107.942304][ T1571] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  107.945645][    T6] usb 1-1: Manufacturer: syz
[  107.957475][    T6] usb 1-1: SerialNumber: syz
[  107.969682][ T1571] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  107.983238][    T6] usb 1-1: config 0 descriptor??
[  108.064108][ T1611] syz.1.345[1611] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.230546][    T6] usb 1-1: USB disconnect, device number 16
[  108.341522][ T1616] loop2: detected capacity change from 0 to 256
[  108.389310][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.396216][ T1617] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.404148][ T1617] device bridge_slave_0 entered promiscuous mode
[  108.411463][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.418384][ T1617] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.425717][ T1617] device bridge_slave_1 entered promiscuous mode
[  108.482530][   T10] device bridge_slave_1 left promiscuous mode
[  108.488803][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.496567][   T10] device bridge_slave_0 left promiscuous mode
[  108.502841][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.511089][   T10] device veth1_macvtap left promiscuous mode
[  108.519066][   T10] device veth0_vlan left promiscuous mode
[  108.631173][  T532] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  108.754544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.763707][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.776021][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.805835][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.829527][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.836434][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.861391][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.891485][  T532] usb 2-1: Using ep0 maxpacket: 16
[  108.896506][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.906456][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.915146][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.922013][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.929687][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.938111][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.946328][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.954580][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.985501][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.993872][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.008114][ T1617] device veth0_vlan entered promiscuous mode
[  109.014162][  T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.014536][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.024982][  T532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.033377][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.049012][  T532] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.049461][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.062500][  T532] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  109.076478][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.077791][  T532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.087649][ T1617] device veth1_macvtap entered promiscuous mode
[  109.097285][  T532] usb 2-1: config 0 descriptor??
[  109.106511][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.114683][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.122972][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.131092][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.181234][ T1157] Bluetooth: hci0: command 0x1001 tx timeout
[  109.181544][  T480] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  109.187541][ T1566] Bluetooth: hci0: sending frame failed (-49)
[  109.342234][ T1630] loop3: detected capacity change from 0 to 40427
[  109.350470][ T1620] UDC core: couldn't find an available UDC or it's busy: -16
[  109.357853][ T1620] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  109.389501][ T1620] loop1: detected capacity change from 0 to 512
[  109.426807][ T1630] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  109.434822][ T1630] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  109.509691][ T1630] F2FS-fs (loop3): Found nat_bits in checkpoint
[  109.516184][  T480] usb 1-1: Using ep0 maxpacket: 32
[  109.564205][ T1620] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  109.646052][ T1630] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  109.653078][ T1630] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  109.654135][ T1620] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  109.675333][ T1620] EXT4-fs (loop1): 1 truncate cleaned up
[  109.680969][ T1620] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.681435][  T480] usb 1-1: config 0 has no interfaces?
[  109.745983][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.758231][ T1620] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.767291][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.779150][ T1620] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.793981][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.806203][ T1643] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.806325][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.830551][ T1620] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.839715][ T1643] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.850327][ T1643] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.863394][ T1643] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.876873][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.889510][ T1620] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  109.898472][  T480] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  109.898588][ T1620] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.346: corrupted xattr block 19
[  109.907998][  T480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.927026][  T480] usb 1-1: Product: syz
[  109.931084][ T1646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'.
[  109.939749][  T480] usb 1-1: Manufacturer: syz
[  109.945408][  T480] usb 1-1: SerialNumber: syz
[  109.955110][  T480] usb 1-1: config 0 descriptor??
[  110.200188][ T1157] usb 1-1: USB disconnect, device number 17
[  110.248195][  T532] usbhid 2-1:0.0: can't add hid device: -71
[  110.254082][  T532] usbhid: probe of 2-1:0.0 failed with error -71
[  110.267543][ T1651] loop3: detected capacity change from 0 to 128
[  110.271094][  T532] usb 2-1: USB disconnect, device number 16
[  110.284157][ T1651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.294672][ T1651] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  110.327625][   T30] audit: type=1400 audit(1729273681.116:626): avc:  denied  { create } for  pid=1647 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  110.842613][ T1660] netlink: 56 bytes leftover after parsing attributes in process `syz.3.355'.
[  110.854711][ T1660] loop3: detected capacity change from 0 to 512
[  110.924103][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[  110.933245][ T1661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[  110.933252][ T1660] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  110.956626][ T1660] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  111.002226][  T949] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  111.031950][  T949] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  111.079751][ T1667] loop2: detected capacity change from 0 to 256
[  111.377142][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.384584][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.397479][ T1670] device bridge_slave_0 entered promiscuous mode
[  111.419585][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.427058][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.463113][ T1670] device bridge_slave_1 entered promiscuous mode
[  111.520018][ T1157] Bluetooth: hci0: command 0x1009 tx timeout
[  111.568401][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.575379][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.582475][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.589224][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.627055][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.635358][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.643001][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.660024][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.668704][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.675591][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.683249][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.691691][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.698670][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.774949][ T1670] device veth0_vlan entered promiscuous mode
[  111.793069][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  111.802064][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  111.809973][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  111.817374][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  111.825133][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.833260][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.849837][ T1670] device veth1_macvtap entered promiscuous mode
[  112.181013][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  112.208637][    T8] device bridge_slave_1 left promiscuous mode
[  112.215393][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.223347][    T8] device bridge_slave_0 left promiscuous mode
[  112.229391][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.246733][    T8] device veth1_macvtap left promiscuous mode
[  112.253158][    T8] device veth0_vlan left promiscuous mode
[  112.306066][ T1677] loop3: detected capacity change from 0 to 40427
[  112.342935][ T1677] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  112.372179][ T1677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  112.402068][ T1677] F2FS-fs (loop3): Found nat_bits in checkpoint
[  112.444040][ T1677] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  112.450939][ T1677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  112.463027][ T1684] loop2: detected capacity change from 0 to 40427
[  112.470344][ T1677] attempt to access beyond end of device
[  112.470344][ T1677] loop3: rw=2049, want=45104, limit=40427
[  112.481987][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  112.490187][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  112.499386][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  112.508453][ T1684] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  112.516936][ T1684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  112.520096][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  112.585842][ T1684] F2FS-fs (loop2): Found nat_bits in checkpoint
[  112.606686][ T1699] loop0: detected capacity change from 0 to 128
[  112.640293][ T1684] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  112.647799][ T1684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  112.665521][ T1699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.689299][ T1699] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  112.871784][ T1155] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  113.241234][    T6] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  113.272747][  T480] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  113.301275][ T1155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.312287][ T1155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.322003][ T1155] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  113.330872][ T1155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.339626][ T1155] usb 2-1: config 0 descriptor??
[  113.551282][  T480] usb 1-1: Using ep0 maxpacket: 32
[  113.601275][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.612302][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.623075][    T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  113.632636][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.641047][    T6] usb 3-1: config 0 descriptor??
[  113.691369][  T480] usb 1-1: config 0 has no interfaces?
[  113.812551][ T1698] UDC core: couldn't find an available UDC or it's busy: -16
[  113.819860][ T1698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  113.851358][  T480] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  113.860209][  T480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.868119][  T480] usb 1-1: Product: syz
[  113.872141][  T480] usb 1-1: Manufacturer: syz
[  113.876537][  T480] usb 1-1: SerialNumber: syz
[  113.881719][  T480] usb 1-1: config 0 descriptor??
[  113.891320][ T1155] usbhid 2-1:0.0: can't add hid device: -71
[  113.897072][ T1155] usbhid: probe of 2-1:0.0 failed with error -71
[  113.904491][ T1155] usb 2-1: USB disconnect, device number 17
[  114.101776][ T1708] UDC core: couldn't find an available UDC or it's busy: -16
[  114.109030][ T1708] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  114.124660][ T1155] usb 1-1: USB disconnect, device number 18
[  114.181242][    T6] usbhid 3-1:0.0: can't add hid device: -71
[  114.187110][    T6] usbhid: probe of 3-1:0.0 failed with error -71
[  114.194111][    T6] usb 3-1: USB disconnect, device number 13
[  114.401838][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.408791][ T1713] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.416202][ T1713] device bridge_slave_0 entered promiscuous mode
[  114.423121][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.429954][ T1713] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.437296][ T1713] device bridge_slave_1 entered promiscuous mode
[  114.485942][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.492833][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.499922][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.506724][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.528462][  T819] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.535704][  T819] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.545902][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.553393][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.562721][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.570800][  T819] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.577662][  T819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.586597][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.594847][  T819] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.601799][  T819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.615736][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.803608][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.242239][ T1730] loop0: detected capacity change from 0 to 256
[  116.836976][ T1730] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  116.868980][   T30] audit: type=1400 audit(1729273687.656:627): avc:  denied  { watch } for  pid=1722 comm="syz.0.380" path="/46/file2/bus" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  116.869024][ T1728] process 'syz.0.380' launched './file1' with NULL argv: empty string added
[  116.901686][  T319] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  116.904005][   T30] audit: type=1400 audit(1729273687.696:628): avc:  denied  { execute } for  pid=1722 comm="syz.0.380" name="file1" dev="loop0" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  116.976768][ T1713] device veth0_vlan entered promiscuous mode
[  116.990925][ T1713] device veth1_macvtap entered promiscuous mode
[  117.005355][   T30] audit: type=1400 audit(1729273687.696:629): avc:  denied  { execute_no_trans } for  pid=1722 comm="syz.0.380" path="/46/file2/file1" dev="loop0" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  117.025856][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  117.038469][   T30] audit: type=1400 audit(1729273687.736:630): avc:  denied  { write } for  pid=1722 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  117.040155][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.067843][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.076312][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.084370][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.092791][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.100879][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.108893][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.117204][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.126809][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.135084][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.143394][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.151449][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.159971][ T1740] loop0: detected capacity change from 0 to 256
[  117.167508][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[  117.186479][ T1741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'.
[  117.271328][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.282285][  T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.291936][  T319] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  117.300732][  T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.308818][ T1157] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  117.471358][ T1155] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  117.561331][  T319] usb 2-1: config 0 descriptor??
[  117.721321][ T1155] usb 5-1: Using ep0 maxpacket: 16
[  117.726977][  T412] device bridge_slave_1 left promiscuous mode
[  117.733006][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.740438][  T412] device bridge_slave_0 left promiscuous mode
[  117.741452][  T319] usbhid 2-1:0.0: can't add hid device: -71
[  117.747107][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.752540][  T319] usbhid: probe of 2-1:0.0 failed with error -71
[  117.766573][  T412] device veth1_macvtap left promiscuous mode
[  117.769841][  T319] usb 2-1: USB disconnect, device number 18
[  117.772965][  T412] device veth0_vlan left promiscuous mode
[  117.801176][ T1157] usb 3-1: Using ep0 maxpacket: 32
[  117.833431][ T1749] loop3: detected capacity change from 0 to 1024
[  117.851255][ T1155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.862379][ T1155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.872608][ T1749] EXT4-fs (loop3): Test dummy encryption mode enabled
[  117.876957][ T1155] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  117.885546][ T1749] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2
[  117.892324][ T1155] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  117.909383][ T1155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.921269][ T1157] usb 3-1: config 0 has no interfaces?
[  117.923876][ T1155] usb 5-1: config 0 descriptor??
[  118.060855][ T1753] loop3: detected capacity change from 0 to 128
[  118.081283][ T1157] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  118.090463][ T1157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.099150][ T1157] usb 3-1: Product: syz
[  118.103429][ T1157] usb 3-1: Manufacturer: syz
[  118.107983][ T1157] usb 3-1: SerialNumber: syz
[  118.113491][ T1157] usb 3-1: config 0 descriptor??
[  118.131267][  T319] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  118.153654][ T1753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.164286][ T1753] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  118.239517][ T1743] UDC core: couldn't find an available UDC or it's busy: -16
[  118.252919][ T1743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  118.281722][ T1743] loop4: detected capacity change from 0 to 512
[  118.383932][ T1743] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  118.480852][  T532] usb 3-1: USB disconnect, device number 14
[  118.490126][ T1743] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  118.504995][ T1743] EXT4-fs (loop4): 1 truncate cleaned up
[  118.510528][ T1743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.556322][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.568225][ T1743] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.577380][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.589196][ T1743] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.598101][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.609805][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.609866][ T1764] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.622937][ T1743] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.633871][ T1764] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.650672][ T1764] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.662745][ T1764] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.678664][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.690581][ T1743] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  118.699498][ T1743] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.369: corrupted xattr block 19
[  118.711264][  T319] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  118.791254][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  118.811227][    T6] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  118.881255][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  118.971263][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.011480][ T1155] usbhid 5-1:0.0: can't add hid device: -71
[  119.017344][ T1155] usbhid: probe of 5-1:0.0 failed with error -71
[  119.025077][ T1155] usb 5-1: USB disconnect, device number 20
[  119.061286][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.134195][ T1769] loop2: detected capacity change from 0 to 40427
[  119.151313][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.171367][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.182259][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.191837][    T6] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  119.200641][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.209176][    T6] usb 4-1: config 0 descriptor??
[  119.221689][ T1769] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  119.229410][ T1769] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  119.240152][ T1769] F2FS-fs (loop2): Found nat_bits in checkpoint
[  119.246359][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.257591][ T1157] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  119.280386][ T1769] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  119.287349][ T1769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  119.341304][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.431272][  T319] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  119.441783][  T319] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  119.450802][  T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.450981][ T1713] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  119.477378][ T1713] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  119.502098][ T1157] usb 1-1: Using ep0 maxpacket: 32
[  119.621266][ T1157] usb 1-1: config 0 has no interfaces?
[  119.652445][ T1775] loop2: detected capacity change from 0 to 40427
[  119.673231][ T1775] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  119.679676][ T1775] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  119.690427][ T1775] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  119.691996][    T6] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor
[  119.726629][ T1775] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  119.734000][ T1775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  119.739372][    T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0017/input/input23
[  119.786473][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.793870][ T1157] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  119.803279][ T1777] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.810497][ T1157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.819208][ T1777] device bridge_slave_0 entered promiscuous mode
[  119.825834][ T1157] usb 1-1: Product: syz
[  119.826782][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.836851][ T1157] usb 1-1: Manufacturer: syz
[  119.839173][ T1777] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.850058][    T6] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  119.853662][ T1777] device bridge_slave_1 entered promiscuous mode
[  119.862067][ T1157] usb 1-1: SerialNumber: syz
[  119.877949][ T1157] usb 1-1: config 0 descriptor??
[  119.988939][ T1763] UDC core: couldn't find an available UDC or it's busy: -16
[  120.043866][ T1763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  120.086817][  T349] usb 4-1: USB disconnect, device number 17
[  120.216617][ T1157] usb 1-1: USB disconnect, device number 19
[  120.252344][  T412] device bridge_slave_1 left promiscuous mode
[  120.258309][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.265698][  T412] device bridge_slave_0 left promiscuous mode
[  120.271742][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.279453][  T412] device veth1_macvtap left promiscuous mode
[  120.285493][  T412] device veth0_vlan left promiscuous mode
[  120.367823][ T1490] attempt to access beyond end of device
[  120.367823][ T1490] loop2: rw=2049, want=45104, limit=40427
[  120.388458][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.395364][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.402547][ T1777] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.409294][ T1777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.431311][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.438785][  T819] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.446020][  T819] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.464346][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.472757][  T819] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.479606][  T819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.487106][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.496071][  T819] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.502965][  T819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.520197][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.528233][  T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.587575][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.595864][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.607350][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.615307][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.623402][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.630710][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.755984][ T1795] binder: 1790:1795 ioctl c0306201 20000580 returned -14
[  120.889772][ T1777] device veth0_vlan entered promiscuous mode
[  120.908975][ T1777] device veth1_macvtap entered promiscuous mode
[  120.921346][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.929567][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.938269][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.947398][ T1803] loop0: detected capacity change from 0 to 256
[  120.953821][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.962124][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.970334][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.978561][  T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.017966][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'.
[  121.028777][ T1796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'.
[  121.407000][ T1810] loop4: detected capacity change from 0 to 256
[  121.551064][ T1810] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  121.746926][ T1812] loop2: detected capacity change from 0 to 128
[  121.758956][    T6] usb 2-1: USB disconnect, device number 19
[  121.833140][ T1821] FAULT_INJECTION: forcing a failure.
[  121.833140][ T1821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.875665][ T1821] CPU: 0 PID: 1821 Comm: syz.0.395 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0
[  121.885317][ T1821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  121.895220][ T1821] Call Trace:
[  121.898329][ T1821]  <TASK>
[  121.901285][ T1821]  dump_stack_lvl+0x151/0x1c0
[  121.905797][ T1821]  ? io_uring_drop_tctx_refs+0x190/0x190
[  121.911355][ T1821]  ? fsnotify_perm+0x6a/0x5b0
[  121.915867][ T1821]  dump_stack+0x15/0x20
[  121.919853][ T1821]  should_fail+0x3c6/0x510
[  121.924114][ T1821]  should_fail_usercopy+0x1a/0x20
[  121.925725][ T1812] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.928968][ T1821]  _copy_from_user+0x20/0xd0
[  121.928995][ T1821]  __sys_sendto+0x33a/0x720
[  121.940033][ T1812] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  121.943832][ T1821]  ? __ia32_sys_getpeername+0x90/0x90
[  121.943868][ T1821]  ? __ia32_sys_read+0x90/0x90
[  121.989277][ T1821]  ? debug_smp_processor_id+0x17/0x20
[  121.994472][ T1821]  __x64_sys_sendto+0xe5/0x100
[  121.999073][ T1821]  x64_sys_call+0x15c/0x9a0
[  122.003672][ T1821]  do_syscall_64+0x3b/0xb0
[  122.007942][ T1821]  ? clear_bhb_loop+0x35/0x90
[  122.012439][ T1821]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.018163][ T1821] RIP: 0033:0x7f234552cff9
[  122.022420][ T1821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.042035][ T1821] RSP: 002b:00007f23441a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  122.050276][ T1821] RAX: ffffffffffffffda RBX: 00007f23456e4f80 RCX: 00007f234552cff9
[  122.058087][ T1821] RDX: 000000000000e90c RSI: 00000000200000c0 RDI: 0000000000000006
[  122.065983][ T1821] RBP: 00007f23441a6090 R08: 0000000020000540 R09: 0000000000000014
[  122.073970][ T1821] R10: 000000000000a0c4 R11: 0000000000000246 R12: 0000000000000001
[  122.081929][ T1821] R13: 0000000000000000 R14: 00007f23456e4f80 R15: 00007ffc0ce2a498
[  122.089685][ T1821]  </TASK>
[  122.454527][ T1157] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  122.781477][ T1155] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  123.031193][ T1155] usb 1-1: Using ep0 maxpacket: 32
[  123.071180][    T6] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  123.101208][ T1157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.125889][ T1157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.135516][ T1157] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  123.144420][ T1157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.165180][ T1157] usb 4-1: config 0 descriptor??
[  123.174862][ T1155] usb 1-1: config 0 has no interfaces?
[  123.229472][ T1842] EXT4-fs (sda1): shut down requested (2)
[  123.235633][ T1842] Aborting journal on device sda1-8.
[  123.386106][ T1155] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  123.395247][ T1155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.403458][ T1155] usb 1-1: Product: syz
[  123.407465][ T1155] usb 1-1: Manufacturer: syz
[  123.411936][ T1155] usb 1-1: SerialNumber: syz
[  123.494946][ T1848] binder: 1843:1848 ioctl c0306201 20000580 returned -14
[  123.601045][ T1155] usb 1-1: config 0 descriptor??
[  123.623344][ T1849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'.
[  123.631325][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.635488][ T1849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'.
[  123.642762][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.660978][    T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  123.669901][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.678468][    T6] usb 2-1: config 0 descriptor??
[  123.761536][ T1814] UDC core: couldn't find an available UDC or it's busy: -16
[  123.768833][ T1814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  123.851215][ T1157] usbhid 4-1:0.0: can't add hid device: -71
[  123.857188][ T1157] usbhid: probe of 4-1:0.0 failed with error -71
[  123.859436][  T480] usb 1-1: USB disconnect, device number 20
[  123.867787][ T1157] usb 4-1: USB disconnect, device number 18
[  124.161886][    T6] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor
[  124.172270][    T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0018/input/input24
[  124.217711][ T1856] loop2: detected capacity change from 0 to 256
[  124.253080][    T6] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  124.385879][ T1838] UDC core: couldn't find an available UDC or it's busy: -16
[  124.388905][ T1863] loop0: detected capacity change from 0 to 128
[  124.399475][ T1838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  124.407312][    T6] usb 2-1: USB disconnect, device number 20
[  124.424840][ T1863] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.435952][ T1863] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  124.467691][  T480] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  124.591342][ T1155] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  124.709247][ T1868] loop0: detected capacity change from 0 to 512
[  124.791518][  T480] usb 5-1: Using ep0 maxpacket: 16
[  124.793696][ T1868] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[  124.813340][ T1868] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff)
[  124.827247][ T1868] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  124.841705][ T1868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 28
[  124.854079][ T1868] EXT4-fs (loop0): This should not happen!! Data will be lost
[  124.854079][ T1868] 
[  124.863883][ T1868] EXT4-fs (loop0): Total free blocks count 0
[  124.869784][ T1868] EXT4-fs (loop0): Free/Dirty block details
[  124.875794][ T1868] EXT4-fs (loop0): free_blocks=39626
[  124.881014][ T1868] EXT4-fs (loop0): dirty_blocks=31
[  124.886158][ T1868] EXT4-fs (loop0): Block reservation details
[  124.891993][ T1868] EXT4-fs (loop0): i_reserved_data_blocks=31
[  124.901281][ T1155] usb 4-1: Using ep0 maxpacket: 16
[  124.941265][  T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.952374][  T480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.962388][  T480] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  124.975468][  T480] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  124.984684][  T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.010740][  T480] usb 5-1: config 0 descriptor??
[  125.031367][ T1155] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.053964][ T1871] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[  125.066817][ T1871] EXT4-fs (loop0): This should not happen!! Data will be lost
[  125.066817][ T1871] 
[  125.160897][ T1155] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  125.169905][ T1155] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.179264][ T1155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.278737][ T1155] usb 4-1: config 0 descriptor??
[  125.326713][ T1853] UDC core: couldn't find an available UDC or it's busy: -16
[  125.353344][ T1853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  125.372905][ T1853] loop4: detected capacity change from 0 to 512
[  125.402260][ T1853] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  125.436072][ T1853] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  125.450996][ T1853] EXT4-fs (loop4): 1 truncate cleaned up
[  125.456812][ T1853] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.669234][ T1890] overlayfs: unrecognized mount option "/" or missing value
[  126.019440][ T1853] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.031477][   T30] audit: type=1326 audit(1729273696.786:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.085044][ T1853] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  126.093996][ T1853] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.107924][ T1853] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  126.116880][ T1853] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.128892][   T30] audit: type=1326 audit(1729273696.796:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.161331][ T1853] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.173033][ T1899] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.188524][   T30] audit: type=1326 audit(1729273696.806:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.276256][ T1853] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  126.320037][ T1899] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  126.349056][   T30] audit: type=1326 audit(1729273696.846:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.386555][ T1899] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.406: corrupted xattr block 19
[  126.398783][   T30] audit: type=1326 audit(1729273696.896:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.449383][ T1899] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  126.484614][ T1912] overlayfs: unrecognized mount option "/" or missing value
[  126.562756][   T30] audit: type=1326 audit(1729273696.896:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.691327][ T1155] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  126.693539][   T30] audit: type=1326 audit(1729273696.896:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.738058][   T30] audit: type=1326 audit(1729273696.896:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.814483][   T30] audit: type=1326 audit(1729273696.896:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.877010][   T30] audit: type=1326 audit(1729273696.906:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f344adcbff9 code=0x7ffc0000
[  126.908591][ T1908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'.
[  126.962631][ T1913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'.
[  126.981184][ T1155] usb 1-1: Using ep0 maxpacket: 32
[  126.991203][  T480] usbhid 5-1:0.0: can't add hid device: -71
[  126.997115][  T480] usbhid: probe of 5-1:0.0 failed with error -71
[  127.017278][  T480] usb 5-1: USB disconnect, device number 21
[  127.123746][ T1915] capability: warning: `syz.2.421' uses deprecated v2 capabilities in a way that may be insecure
[  127.141278][ T1155] usb 1-1: config 0 has no interfaces?
[  127.305424][  T532] usb 4-1: USB disconnect, device number 19
[  127.312071][ T1921] loop1: detected capacity change from 0 to 256
[  127.321374][ T1155] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  127.332800][ T1155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.340616][ T1155] usb 1-1: Product: syz
[  127.345774][ T1155] usb 1-1: Manufacturer: syz
[  127.347277][ T1923] loop3: detected capacity change from 0 to 2048
[  127.350189][ T1155] usb 1-1: SerialNumber: syz
[  127.362636][ T1155] usb 1-1: config 0 descriptor??
[  127.412715][ T1923] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  127.445376][ T1777] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  127.464587][ T1777] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
SYZFAIL: posix_spawn failed
 (errno 5: Input/output error)
[  127.561162][   T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  127.614684][    T6] usb 1-1: USB disconnect, device number 21
[  127.821332][  T532] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  127.861343][   T26] usb 3-1: device descriptor read/all, error -71
[  128.301823][  T412] device bridge_slave_1 left promiscuous mode
[  128.307862][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.315259][  T412] device bridge_slave_0 left promiscuous mode
[  128.321296][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.329113][  T412] device veth1_macvtap left promiscuous mode
[  128.334969][  T412] device veth0_vlan left promiscuous mode
[  129.542346][  T412] device bridge_slave_1 left promiscuous mode
[  129.548325][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.555752][  T412] device bridge_slave_0 left promiscuous mode
[  129.561758][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.569679][  T412] device bridge_slave_1 left promiscuous mode
[  129.575737][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.583150][  T412] device bridge_slave_0 left promiscuous mode
[  129.589071][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.597171][  T412] device bridge_slave_1 left promiscuous mode
[  129.603298][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.610976][  T412] device bridge_slave_0 left promiscuous mode
[  129.617050][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.625102][  T412] device bridge_slave_1 left promiscuous mode
[  129.631019][  T412] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.638449][  T412] device bridge_slave_0 left promiscuous mode
[  129.644477][  T412] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.653058][  T412] device veth1_macvtap left promiscuous mode
[  129.658887][  T412] device veth0_vlan left promiscuous mode
[  129.664848][  T412] device veth1_macvtap left promiscuous mode
[  129.670668][  T412] device veth0_vlan left promiscuous mode
[  129.676496][  T412] device veth1_macvtap left promiscuous mode
[  129.682394][  T412] device veth0_vlan left promiscuous mode
[  129.687993][  T412] device veth1_macvtap left promiscuous mode
[  129.693955][  T412] device veth0_vlan left promiscuous mode