last executing test programs:

7.725138118s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f0760001000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000eeffffff00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000795"], 0x0, 0xac26, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
preadv(r5, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f000000012001307"], 0xf0}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd32}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000270000002700e042803eebabce6b4790ea16d6253f3f2c3ca1370842121c6318d304148cd161563e000051"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa20000000000000008000000b704000000000000850000000300070095f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00eb6e00bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000ac4aa779107d68ae0e926496"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='afs_cb_miss\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e563541", 0x66}], 0x1, 0x0, 0x0, 0x40000}, 0x40)
r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r10)
recvmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})

6.901841865s ago: executing program 2:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getrlimit(0xf, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0xfffffffb, 0x3)

6.009635673s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

5.539266045s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b8000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x0, 0x6, 0x12626260, 0x401, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x5, 0x3, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000005bef9c75cc5c17e43ae353b53aaced63931c9ec72f4a8eb11f6fdf794c6ca3c61d0bad085b8471d075c74864eae558f5d6732aae1a179fc13dd26b58a9ffc4ab7487a79121dfcf439dca4b329c06b5850c130132708b9ec147c9aef171caa10c952a256b7194a97bc2929bf2a330b61b91013f62028f55795a4ac17ec820cf443753867757c85bd7d5f244edabe36cf52433c71a1d4cadf8b8cd800d2e25ea27f289424eddea3cf393bffd46cfa99ab01d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000200000000000000851000180600000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="00040000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/135], 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0xc}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000800c000000020000000000000000000006040000000000ab48a807e209d4801e0699bf83ca8811e1d3853cb1123ad3ae57"], &(0x7f0000000380)=""/223, 0x26, 0xdf, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r10}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)

5.458539378s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd64}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)

4.808911978s ago: executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)={[{@uni_xlateno}, {@utf8}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2000000, &(0x7f0000000180), 0x81, 0x4db, &(0x7f0000000240)="$eJzs3VFrHF0ZAOB3JtnvS9vUTVGkFmyLjaRFu5s0tg0itYLoVUGt9zEmmxCyyYbspjahaIo/QBBRwSuvvBH8AYL0J4hQ0HvRooi2euGFdmR3J7Zpd5PFpFm/zfPA6ZwzZ2bec6bZszs7h50ATqzLEXE3IoYi4lpEFPP1aZ5mm4Wd9nYvnj+ab6Yksuz+X5NI8nW7x2qWhyPiTHuXGImIr3054pvJ23HrW9src9VqZSMvlxur6+X61vb15dW5pcpSZW16eurWzO2ZmzOTWe5Q/bwQEXe++OyH3/vZl+786tPf+v3sn69+u9msz3203e6ImD9UgC7axy60zsWu5jnaeBfB+mAo70+h3w0BAKAn4xFxJSI+0fr8X4yh1qc5AAAAYJBknx+NfyURGQAAADCw0ogYjSQt5fN9RyNNS6X2HN6PxOm0Wqs3PrVY21xbaNZFjEUhXVyuVibzucJjUUia5alW/lX5xhvl6Yg4FxE/KJ5qlUvztepCv7/8AAAAgBPizKW91///KKatPAAAADBgxroWAAAAgEHhkh8AAAAGn+t/AAAAGGhfuXevmbLd53gvPNjaXKk9uL5Qqa+UVjfnS/O1jfXSUq221PrNvtWDjlet1dY/E2ubD8uNSr1Rrm9tz67WNtcas8t7HoENAAAAHKNzl578LomInc+eaqXIfwcQYI8/9rsBwFEa6ncDgL4Z7ncDgL4pHLiFEQIGXXJAfdfJO78++rYAAADvxsTH3r7//170cEEAfOCZ6wMAJ4+7e3ByFcwAhBNvvL14v1v9Ye7/t79KzLL/qWEAAMCRGW2lJC3l9wJHI01LpYizrccCFJLF5WplMiI+FBG/LRbeb5anWnsmpggAAAAAAAAAAAAAAAAAAAAAAAAAQI+yLIkMAAAAGGgR6Z+S/BldE8Xx0Te/H3gv+WcxnuWFn9z/0cO5RmNjqrn+b8VWfUQ0fpyvv5F5JAAAAAD8H2hfp+fLqX63BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB8+L5o/nddJxx//KFiBjrFH84RlrLkShExOm/JzH82n5JRAwdQfydxxFxvlP8JF5mWTaWt6JT/FPvOP5Y69R0jp9GxJkjiA8n2ZPm+HO30+svjcutZefX33CeDqv7+Jf+d/wb6jL+nO0xxoWnvyh3jf844sJw5/FnN37SJf6VHuN/4+vb293qsp9GTHR8/0n2xCo3VtfL9a3t68urc0uVpcra9PTUrZnbMzdnJsuLy9VK/m/HGN//+C9f7tf/013ijx3Q//Ee+//vpw+ff7idLXSKf/VK5/ff813ip/l73yfzfLN+Yje/086/7uLPf3Nxv/4vdOn/Qf//V3vs/7WvfvcPPW4KAByD+tb2yly1WtnYJzPSwzYyMofJZN9p/z0e7jiH3P2tTNbv09LHTL9HJgAA4Ki9+tDf75YAAAAAAAAAAAAAAAAAAADAyXUcPyf2Zsyd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBf/wkAAP//GObebA==")
pipe2$9p(&(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x2009)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)={[{}, {@noacl}, {@nouser_xattr}, {@noacl}]}, 0x3, 0x1b1, &(0x7f0000000380)="$eJzsmM1LG0EYxp+Z3WxIT+21FFpooOmhm91NWwql0Jxy6KXQD/EiBrOG6MZIsgcTEOLRk3+Df4J4Fw9evQleVRC8ePS8MrOjOxrzISRB8P0d3jwz82Y+3t08AwFBEM+Ws9Ork/XN81cc6GaQRVr1XxhJDtfymzu/cm8OS+7e3MH3493S0f353gGIotHXF3PvFw2Eqh1Fd7+dVZ9/wZFFRup/4Pio+mfAYCs9D47/SvtgmFV6SdMNkW/bi7XAtxcaQUUIRwRXBE+Egr6+CeByg6Gi7Y9p4612Z7kcBH6zV1j9hx4nBtVP7q/I8QOI1COL9Od1UxtH1i/GBYerdAEMf5T+hrSqDe85/2szOb8x2vnHKVLi1RuUszW51U1M4YAkhgh0Y5FGMsSn9fpNRojfzxPYxoRE4h/RNsMHzT9NzT/yYX31Z6vd+VSrl6t+1V/xvMJX57PjfPHy0pvjOMD/MtKfXmjzp/rkWszCWjkMm24cb9teHB9yXEv6H0fufdxmqk9H3gcvmbj6kDNUmyAIgiAIgiAIgiAIgiAIYuy8BZP/gg7B+y2zrwMAAP//Ub9tHw==")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0}, 0x90)
stat(&(0x7f0000000340)='./file0\x00', 0x0)

4.66350154s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
mkdir(0x0, 0x0)

4.228478598s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4.214296899s ago: executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getrlimit(0xf, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)

3.873570262s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r1 = socket(0xa, 0x2, 0x3a)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0xffffc0fe}, 0x1c, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000500e40000000000060014010000000006001200000001000a000600ffffffffffff00001c001180040004000400040004000600040001000400020004000500060014010000000006003600000000000500c20000000000"], 0x5dc}, 0x5}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r6, 0x0)
pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0x42400)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0xa, 0x8001)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x10)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffe, 0x0, 0x1}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.781169517s ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r4, &(0x7f0000001a40), 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
llistxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/167, 0xa7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
socket(0x10, 0x802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @initdev, <r8=>0x0}, &(0x7f0000000340)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x118, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x51)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x280, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x280}, 0x1, 0x0, 0x0, 0x14}, 0x8090)

3.766016249s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000001e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xa}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
write$cgroup_type(r2, &(0x7f0000000140), 0x9)

3.645125028s ago: executing program 0:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)=@random={'user.', ':%%}.:\x00'}, 0x0, 0x0)

3.63002581s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
rmdir(&(0x7f0000000040)='./file0\x00')
rmdir(&(0x7f0000000000)='.\x00')
pipe(0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
syz_pidfd_open(0x0, 0x0)
setns(0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
eventfd2(0x0, 0x0)
io_getevents(r7, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r7, 0x0, &(0x7f0000000140))
ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000400))
shutdown(r4, 0x0)

3.301347021s ago: executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)={[{@uni_xlateno}, {@utf8}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2000000, &(0x7f0000000180), 0x81, 0x4db, &(0x7f0000000240)="$eJzs3VFrHF0ZAOB3JtnvS9vUTVGkFmyLjaRFu5s0tg0itYLoVUGt9zEmmxCyyYbspjahaIo/QBBRwSuvvBH8AYL0J4hQ0HvRooi2euGFdmR3J7Zpd5PFpFm/zfPA6ZwzZ2bec6bZszs7h50ATqzLEXE3IoYi4lpEFPP1aZ5mm4Wd9nYvnj+ab6Yksuz+X5NI8nW7x2qWhyPiTHuXGImIr3054pvJ23HrW9src9VqZSMvlxur6+X61vb15dW5pcpSZW16eurWzO2ZmzOTWe5Q/bwQEXe++OyH3/vZl+786tPf+v3sn69+u9msz3203e6ImD9UgC7axy60zsWu5jnaeBfB+mAo70+h3w0BAKAn4xFxJSI+0fr8X4yh1qc5AAAAYJBknx+NfyURGQAAADCw0ogYjSQt5fN9RyNNS6X2HN6PxOm0Wqs3PrVY21xbaNZFjEUhXVyuVibzucJjUUia5alW/lX5xhvl6Yg4FxE/KJ5qlUvztepCv7/8AAAAgBPizKW91///KKatPAAAADBgxroWAAAAgEHhkh8AAAAGn+t/AAAAGGhfuXevmbLd53gvPNjaXKk9uL5Qqa+UVjfnS/O1jfXSUq221PrNvtWDjlet1dY/E2ubD8uNSr1Rrm9tz67WNtcas8t7HoENAAAAHKNzl578LomInc+eaqXIfwcQYI8/9rsBwFEa6ncDgL4Z7ncDgL4pHLiFEQIGXXJAfdfJO78++rYAAADvxsTH3r7//170cEEAfOCZ6wMAJ4+7e3ByFcwAhBNvvL14v1v9Ye7/t79KzLL/qWEAAMCRGW2lJC3l9wJHI01LpYizrccCFJLF5WplMiI+FBG/LRbeb5anWnsmpggAAAAAAAAAAAAAAAAAAAAAAAAAQI+yLIkMAAAAGGgR6Z+S/BldE8Xx0Te/H3gv+WcxnuWFn9z/0cO5RmNjqrn+b8VWfUQ0fpyvv5F5JAAAAAD8H2hfp+fLqX63BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB8+L5o/nddJxx//KFiBjrFH84RlrLkShExOm/JzH82n5JRAwdQfydxxFxvlP8JF5mWTaWt6JT/FPvOP5Y69R0jp9GxJkjiA8n2ZPm+HO30+svjcutZefX33CeDqv7+Jf+d/wb6jL+nO0xxoWnvyh3jf844sJw5/FnN37SJf6VHuN/4+vb293qsp9GTHR8/0n2xCo3VtfL9a3t68urc0uVpcra9PTUrZnbMzdnJsuLy9VK/m/HGN//+C9f7tf/013ijx3Q//Ee+//vpw+ff7idLXSKf/VK5/ff813ip/l73yfzfLN+Yje/086/7uLPf3Nxv/4vdOn/Qf//V3vs/7WvfvcPPW4KAByD+tb2yly1WtnYJzPSwzYyMofJZN9p/z0e7jiH3P2tTNbv09LHTL9HJgAA4Ki9+tDf75YAAAAAAAAAAAAAAAAAAADAyXUcPyf2Zsyd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBf/wkAAP//GObebA==")
pipe2$9p(&(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x2009)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)={[{}, {@noacl}, {@nouser_xattr}, {@noacl}]}, 0x3, 0x1b1, &(0x7f0000000380)="$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")
syz_open_procfs(0x0, &(0x7f0000002380)='mounts\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0}, 0x90)
stat(&(0x7f0000000340)='./file0\x00', 0x0)

3.299129621s ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
renameat2(r6, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000040)='./file1\x00', 0x2)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040))
socket(0x10, 0x3, 0x9)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd64}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
mkdir(0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)

2.823277444s ago: executing program 1:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b11180000000000950000000000b313"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$rtc(&(0x7f0000000000), 0x2000000003, 0x50dc82)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

2.336021729s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
close(0xffffffffffffffff)

2.242399714s ago: executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.902821996s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.406951523s ago: executing program 2:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getrlimit(0xf, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

1.273479533s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
mkdir(0x0, 0x0)

1.096843791s ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r4, &(0x7f0000001a40), 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
llistxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/167, 0xa7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000))
pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
socket(0x10, 0x802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @initdev, <r8=>0x0}, &(0x7f0000000340)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x118, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x51)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x280, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x280}, 0x1, 0x0, 0x0, 0x14}, 0x8090)

935.054356ms ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
r1 = socket(0xa, 0x2, 0x3a)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0xffffc0fe}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001200000008000300", @ANYBLOB="0c00990000000000000000000500e40000000000060014010000000006001200000001000a000600ffffffffffff00001c001180040004000400040004000600040001000400020004000500060014010000000006003600000000000500c20000000000"], 0x5dc}, 0x5}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r6, 0x0)
pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0x42400)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0xa, 0x8001)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x10)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffe, 0x0, 0x1}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

539.208047ms ago: executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)={[{@uni_xlateno}, {@utf8}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2000000, &(0x7f0000000180), 0x81, 0x4db, &(0x7f0000000240)="$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")
pipe2$9p(&(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x2009)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)={[{}, {@noacl}, {@nouser_xattr}, {@noacl}]}, 0x3, 0x1b1, &(0x7f0000000380)="$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")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0}, 0x90)
stat(&(0x7f0000000340)='./file0\x00', 0x0)

345.957897ms ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd64}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)

304.463233ms ago: executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)={[{@uni_xlateno}, {@utf8}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x2000000, &(0x7f0000000180), 0x81, 0x4db, &(0x7f0000000240)="$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")
pipe2$9p(&(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r5, &(0x7f0000000180), 0x2009)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)={[{}, {@noacl}, {@nouser_xattr}, {@noacl}]}, 0x3, 0x1b1, &(0x7f0000000380)="$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")
syz_open_procfs(0x0, &(0x7f0000002380)='mounts\x00')
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
stat(0x0, 0x0)

158.338446ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffe, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x0, 0xe9, 0x40, 0x66b, 0x20f9, 0xff94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x6a, 0xba}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x2, "73eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000060000008a323aecf7351e1cd31695244e7efbd1880782446e36f4ba6abc022342498ef3c3ba7e60188ac76cfa53d0e869218106e68b4c85e97e92fdb74b931cb87d4e43859300ba"], 0x0, 0x0, 0x0, 0x0})
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x40, 0x10, 0x2, 0x1bfe5e3, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2}}}})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @jmp={0x5, 0x0, 0x4, 0x8, 0x3, 0xc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x32, &(0x7f0000000d00)=""/50, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x10, 0x40000000, 0x42}, 0x10, 0x187af, 0xffffffffffffffff, 0x6, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x3, 0x1, 0xb, 0xa}, {0x5, 0x3, 0x0, 0x7}, {0x0, 0x1, 0xe, 0x5}, {0x4, 0x1, 0x7, 0x9}, {0x2, 0x4, 0x4, 0xd}, {0x0, 0x3, 0x1, 0xc}], 0x10, 0x1}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0x1c, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c41c5cb, 0x0, 0x0, 0x0, 0x1bfe}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3d4d9ff0}, @jmp={0x5, 0x1, 0xb, 0xb, 0x4, 0x1, 0xfffffffffffffff0}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x97c}, @map_val], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x8, 0x6b, &(0x7f0000000a40)=""/107, 0x41000, 0x4, '\x00', r4, 0x24, r5, 0x8, &(0x7f0000000b00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x87, 0xc464, 0x20}, 0x10, 0xffffffffffffffff, r6, 0x2, &(0x7f0000000f40)=[0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x3, 0xe, 0x9}, {0x5, 0x4, 0x9, 0x9}], 0x10, 0x3}, 0x90)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000003640), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x24, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000e1270000000000000200000098110000e60a83", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001842000008000000000000000000000085200000020000004f550c00f0ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001869000001000000000000007f00000018400000020000000000000000000000180100002020702500000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b90100008500000006000000bf91000000000000b7020000010000008500000085000007cba22217d848fb009500000000000000", @ANYRESHEX, @ANYRES16, @ANYRESOCT=r7], &(0x7f0000000380)='GPL\x00', 0x2, 0xe1, &(0x7f0000000640)=""/225, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0x9, 0x9}, {0x3, 0x4, 0x6, 0x9}, {0x2, 0x5, 0x5, 0x2}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x90)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x18946d9c6384dece}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000001)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x21, 0x24, {0x24, 0x2, "3586a480063a6d969aeceeab9bd0333e15cdca4f37f1c18fc3cf7af772348ab0c81c"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0x26, 0x3d, "b4873ca3881859b45e10b0d74647d14f8d9338c67ea5fd17ea62ad340c0e5a312ed0b603ee02060befc7b29e6b8bc395e22c0ae88f2ec9e90fa8f2e11e"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1a}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000600)={0x20, 0x81, 0x2, "1f34"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000680)={0x20, 0x83, 0x2, "bcfd"}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "e9c694"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "fcc19e"}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_usb_connect(0x4, 0xc5e, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x76, 0x75, 0x14, 0x20, 0x2639, 0x1, 0x451f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4c, 0x4, 0x2, 0x5, 0x10, 0x40, [{{0x9, 0x4, 0xfb, 0x4, 0x3, 0x94, 0x2, 0x8e, 0x2, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x20, 0x80, 0x40}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xa8, 0x2, 0x53}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x4, 0x9, 0x1, [@generic={0x4c, 0x21, "bec7aaa3d3525c7b68539f19679af7722d090c1326ab6c8f45227373d6e90135b00383ef2f929a4a95b8812dcf47830f2699bd5a2cf369fb9cadc2f71976edcbbab71c196c0118ecd32b"}, @generic={0x44, 0x37, "25b8c5f1e05772ac1125eb90611fc4959e2e5943cceda8837c052ed6eb6bfbd230bad865a304b51b845adefa23a740d1840b05b08c05e81bcba451568e20ed2af66b"}]}}]}}, {{0x9, 0x4, 0xac, 0x2, 0xd, 0xff, 0x10, 0x77, 0x5, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x40, 0x4, '\"z', 'a'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0x31}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7f, 0x7f, 0x2c}}, {{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x8, 0x6, 0x40, [@generic={0xfa, 0x23, "05c9e6e3e616664146aa1cf9a944f884d5605ac4d44c128542621414ee976c0e8b473d9ae50761d0d48e65945ca0d57aa3c411d971adbc9b40670cd5470251cd0a6949d1e0f7e2a90850397855f1fc87adcdd52836eda9b58bdc77b7ab17016f8f8bfe097e6ebfc3cf2c3bb7743f31bcb3de143b7db08b43a1b3d21a798a09bd459254970d445adee1f3517566d66938a885d669e3d6047a323c0abe155b697865094120a69a694fd535c4ed7f4d7c14a2a7b1e0a5ab94f67d201a08ffaa7db44e3061cb8d96a4866d33a4b8e1777d34ffb96aa7923453a1c898ee3c7becb818971d25ac85d45018196a495403a8e6f801063f1acafdff45"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x20, 0xc, [@generic={0xa9, 0xa, "b3919a6dd65740345439d02a125754ba4c686f7ec9f58a1abdb42d3b37ad4bf769dca6098de994aa540083548059ef64afac6693c7088d6056c6b1c70818cadc970ebde542d56b174340d45a12a3df3a03ec6db77adf8166a7c8fb92cc3d20cada4250970524132d76a98544a70487c4932e13beb7911924f72b54227b324bed32d85ebf3645fbca85332b89f038601a019adbf5b3696af5c9d105d3eb02222503d17f920d7531"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x72, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x34, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe0, 0xf000}, @generic={0xb3, 0xf, "8b9ac011aaac6a00695e8d784fac5d38a563bcac06e038fbe99cdc45dc37d7b6be1a8d1bb635dd9d5763bc99ec580efa70a227bc39adfc33c38aefa450d5f1fe1c7dfec451743a10062b67141b13a2b9dbc5b69f85d968de4b57ca49373cecd1a569b7b27959dec8fd4628279b1ca60ed5d0d9cf8eeed5448b2278fd06bc35c6e2fe9999000e7161043cf4a53bcfafd3a30ccd9334ba7dbed7683da504bf99b26ee2fd2f691ccedfaf167263f4ad967da3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xc8, 0xe5, 0x1, [@generic={0xae, 0x2, "0f783b1eaea9ad605a3015461beceaff774bfc47cb6ff5f9531653c0721ecba835b7b75ed2ba6add99ebd89dba1fffecd77b2f6e1adc61a576a3c716acc9c243882616e461c867c5c882fa676593ffe13e3b0466d945217b687d7f2fa9d051193aac0f029d3c36817ea07fb72da860077429b379e9e16283c7ee5beb1bdf33fb452164732b90bf332fb1a95bd106386b024c21af0a7e8c76bdfcb7c00c6dc5c14d47c73cb34159d1d3490c7e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5, 0x0, 0x40, [@generic={0xe5, 0xe, "7e45b8b4a6aa4325e22c27a3c9fa8f8c28a3faff27ddd7ee959c329cceae8119782ee18be3204da735ed85da6dff66b1c038c6ff270256e398229c27c7c42c8f1f281ca7d034085ea1a56b8166a9d6c292a4b88b04f0c8f784d0f95eff3a5643ecedd3ec8f4f6a3dc16299fedf5adf6556781ec62945204503d4a8050be825e60ea27da23ae221821bc7718f50103d39c6bf160f62af6c95c8493364a4aeddc2d7eef7d9926e5561b13e34559f29678b41564234d78ad377424b6319b10460290b5053417671c9b7d2c42b8f053dbd5ce2985ad9371a27a9fd38c0c2035ce06096a74b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x2, 0x1, [@generic={0xb2, 0xd, "5a09050c5485d911e0506de050b7c304cd34f1df635b5f57b5691f737762c403b7c23e6716fc9f4e8a1fe66e52a15831b0ae7ed9ae81913da91a30a7983151c2df719a1de8fff04c470302d56a5727c0d9e5fa27264e5b4fcc341aeab73f11ac0960bd69bae051ec3b697bd89d4181089fecbfbf2a199a6b36bad7785c36570cd15a7b8910a52a9db77ad3fad3e960937c6f5a0602acadbcbec0b40733a3c95b851029b3a19c5f8dcff4c12d9e7118d9"}, @generic={0xdb, 0x31, "604834223506dcf87ee1267688711fc9d7fc1b812352e3dddaf7364278e2015b67165c97d1a1c5f8967ecdbf7392ebe244f458e10e06e5279179c8e9b1d09d2d6d28fd0ac941f3ee2c82f82540a55df139124a318de0d7724dfe2343b611ced87fedd1f3bdba25cc40645ee7d32df7d5e9c5d97de1b749e7bfe5ed791a9442580331c92a9435ce80d47aa80e65d7248b3dd1f808952dce835eae201b37602ed1d72b244f7ca045ac9a46e560d8e787214ef33670ce5061add3d125eaf9da096d930c9d84363ee6ec8905969581bdbe53f63baa9f70e006516b"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x7bf, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x401}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x0, 0x8, 0xff, [@generic={0x5b, 0x21, "281247822ee87fe23f24ba652199e1ca11b697b786459468f706a54224b3c77ab4b02fded885d64da8635f6496dbffb88286e06c87b99bbbe87d56b204f3f4035bd3c324af7ae49da1214cae196a3dcd75969d8a16bb8a484e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0xd, 0x0, 0xff, 0x2, 0x5, [@generic={0xc5, 0x23, "979a08de451712fb686e26e342d1c1a2e5c206ee7cd0bd49da008c1c33955f5525e08c83f088c7a8f2ff9ed3bd145ee382d11efab32fec9c7a46abe2742431c2d8762848909a545995904c3b54d70f0a226bd8ac9fa963fc169276643e5a43690d878c80234a7a77f7044446d5d3d86e71383bfb24cb470cb134e6e80493b1ba0367fa17df2504f9c9403bc7782b90bff895d7a6664aa5a024a47ee088e9bfdd9279bd22e469bbf722fed9ee83a6b8ec99daa183974166c7e2957a2ebc1f50655eef5f"}]}}, {{0x9, 0x5, 0x83, 0x18, 0x3ff, 0x28, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x97, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xfa, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1800}]}}]}}, {{0x9, 0x4, 0x6c, 0x9, 0xe, 0x1, 0x67, 0xae, 0x7f, [@uac_as], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0xa7, 0x5, 0x8, [@generic={0xd, 0xe, "02318b95d40a243dbc0bc9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x30, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}, @generic={0x59, 0x5, "9692e1fee15ccf6b1624a6ec9dfa9cc79eea611bf5a7e6ccd14f50be5bb9167402c91567e6bc7d5f503ade1748120b5554016e376f9237610c40576648aff82cbd3288e1a89beeeedf13542f75b07e5586339211b08a74"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x5ef, 0x5, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x57, 0x2, [@generic={0x9c, 0x3, "f5c9c58443c3c04fb9f44d4a06c7885e9d8cbda46a159904cca875dcd60503193adc819ab323d6dad286fe2f7959eec9160d860bd1ca1891fa23314105c1c1ab3e8c23c704f15f8396299af4153194e8f49277a01c0463564037329ee5aacc62822b323054a7f5eaa9a36d9ea6eb92827137c75ba196ceefd5a272b2738d652d60d2c47926b8b5853dfb5419306940ef820dbfdc331e420aa49e"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x1, 0x7b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0xa82c}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x0, 0x6, 0x6d, [@generic={0x91, 0x2c, "f3b063783914b010790de53c822721d5064ac57255a4d86092e59b1ebdfcb47c7a9690dd5490ab39a4cad6a2a8bda6deded0196cea71c134ef9386ecf86fec42a0824f8216421b8cc5f74935c930c6a8adbf52964954fb9392e5466a0b8908078829570398aaf2552aa9eb17757c89f44beade3114b305cffd984851a81a9ea1af82b96fcc1d8b858aba9ccb98fb97"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x5, 0x1, 0x8d}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x4, 0x4, 0x1, [@generic={0x25, 0x11, "d2ebda13f496ccf11ede30aa117f9461898b36347872ac45e97d28c1c3490d23705f56"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x5, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x4, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x6, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x4, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xaa0}]}}]}}, {{0x9, 0x4, 0x59, 0x80, 0x4, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x62, 0x9, [@generic={0xee, 0x4, "2b1b1550bdf3a175d166349363e89881d00b2526d3ef9f13d0f095bb9be01a1a1f22edbe72e9f75f54f84fbb5d7301c13781eafb43a579089c3c542d3eabef4d2da53a2aa9fd969222cdbdbb0137a17298e1f267ae7304f2819c674e26f083eac2151c064d45f817f73a021cec132bac521c4f0ae5c40f9ca75c46d80ef7b76b78eb75b99dc67c9f2fa81e81c1c17781530e9a3d8960785232aa132a217db2d15c6b5ab3b165d6b3868fee06c950f880b8f08f97c0bc305721df764cb7d6a3e4799b3c793c66c80b2d5122f74574462c19fcd0dd9e664a61965bcf1fa3f606c756891e4a22e646bcd93b7825"}, @generic={0x7c, 0x9, "7676b58b1ab3b825ae1f9477f387f9c137dd0a3cbbd9f851d3da0edfeda38dc296a671ca3694b041b6d447ee1b702d6438b36c9343b4dc34ddffc2b46d329760468b613f375a56e6f516ff4b7d99cbcceef5d1d67e92e5820252d963426a693d5929f25cbb6617ee218a20df14ffab425b53767f9d9791d4a6b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x3f, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x20}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffb}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0xb8, 0x3}}]}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x25, 0x80, 0x7f, 0x20, 0xf8}, 0x4d, &(0x7f0000000800)={0x5, 0xf, 0x4d, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x7ff, 0xf00, 0xffff, [0x60, 0xffa0, 0xc0c0, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0f6e07aa3dbeeb8cdaa2f2dfb7787d04"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x42, 0x81, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x480a}}, {0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "bf135cd96ab78d3799d84a5e42b3b40ec926e831d30eb8e2d6ed959b4d87c66e954cf31e92dfbbe3082df0edf98599d47d7b03ebe5e4e6e3b886dbcdab0a3bc2ae7b465b8f92bc994040c7a5ab393e67"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x438}}, {0x5d, &(0x7f00000016c0)=@string={0x5d, 0x3, "8093c4e9b59ca76ed964c2218fb43753455397c32408e919a73417680337c173478ed811148cf8a70d1a52cda2c5d5587432b0501ea82761189e5e329f8daafb4c662f2c7674377366947be70ed382a3f57fb99d5849fbd6385c87"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x427}}, {0xc8, &(0x7f0000001780)=@string={0xc8, 0x3, "f1edd999cf77e1998ee7bf3d692ee72e18717c4e0951abd073357fd2e8ee34d76d61b79c40b0289d2e4f58a7ebfb934646db2fb613d521e93477fc58a22228104313f2cd93ecb1c5e0b8b838880857a3c313af8e44c048024ef8d8b88664956654bf9dfc8ab1878e7d41c48c79ef23fa03e4e1309526337721bb29f0ea57926b81c14f50a8470f48fb11eda874884dd963398b5859db073208e47205451ebf5106f122c55df708d87eb72ba38ed917742d9f2be42108832fc48cb755c12850c3c18de275390f"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x412}}]})
clock_gettime(0x0, &(0x7f0000000280))
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

89.166726ms ago: executing program 4:
socket(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 4:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$rtc(&(0x7f0000000000), 0x2000000003, 0x50dc82)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

  152.467501][   T24] usb 2-1: config 2 interface 108 has no altsetting 0
[  152.494488][ T2485] loop4: detected capacity change from 0 to 1024
[  152.515026][ T2485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  152.526456][ T2485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  152.535777][ T2485] EXT4-fs (loop4): unmounting filesystem.
[  152.560999][  T436] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  152.571594][  T436] usb 4-1: USB disconnect, device number 32
[  152.629581][   T24] usb 2-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f
[  152.641722][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.650475][   T24] usb 2-1: Product: и
[  152.654604][   T24] usb 2-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾
[  152.669114][   T24] usb 2-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸
[  152.723946][ T2459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  152.747005][ T2492] loop4: detected capacity change from 0 to 256
[  152.759606][ T1692] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  153.009580][  T518] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  153.102989][   T24] usb 2-1: USB disconnect, device number 34
[  153.129599][ T1692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.140547][ T1692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.149548][  T436] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  153.154753][ T1692] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  153.166978][ T1692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.182569][ T1692] usb 3-1: config 0 descriptor??
[  153.223994][ T2496] loop3: detected capacity change from 0 to 256
[  153.420901][ T2479] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  153.549609][  T518] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  153.558602][  T518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.566414][  T518] usb 1-1: Product: syz
[  153.570377][  T518] usb 1-1: Manufacturer: syz
[  153.574772][  T518] usb 1-1: SerialNumber: syz
[  153.584534][  T518] usb 1-1: config 0 descriptor??
[  153.878123][ T1692] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  154.009592][  T436] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  154.018521][  T436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.026332][  T436] usb 5-1: Product: syz
[  154.030291][  T436] usb 5-1: Manufacturer: syz
[  154.034727][  T436] usb 5-1: SerialNumber: syz
[  154.048139][  T436] usb 5-1: config 0 descriptor??
[  154.057592][  T518] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  154.107352][  T518] usb 1-1: USB disconnect, device number 26
[  154.116262][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.138718][ T2128] usb 3-1: USB disconnect, device number 32
[  154.348465][  T436] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  154.373718][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.390515][  T436] usb 5-1: USB disconnect, device number 32
[  154.601719][ T2511] loop2: detected capacity change from 0 to 512
[  154.616781][ T2511] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  154.625653][   T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  154.949870][   T24] usb 2-1: Using ep0 maxpacket: 16
[  155.069609][   T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  155.080592][   T24] usb 2-1: config 0 has no interface number 0
[  155.099032][   T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  155.167083][   T24] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  155.430068][   T24] usb 2-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  155.439346][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.546729][ T2519] loop2: detected capacity change from 0 to 16
[  155.574177][   T24] usb 2-1: Product: syz
[  155.578357][   T24] usb 2-1: Manufacturer: syz
[  155.578786][ T2519] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  155.582937][   T24] usb 2-1: SerialNumber: syz
[  155.593665][ T2519] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  155.611416][   T24] usb 2-1: config 0 descriptor??
[  155.616779][ T2519] erofs: (device loop2): mounted with root inode @ nid 36.
[  155.851873][ T2509] loop1: detected capacity change from 0 to 128
[  155.863762][ T2509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.872123][ T2509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.909655][  T436] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  155.910042][  T518] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  156.169975][  T518] usb 1-1: Using ep0 maxpacket: 16
[  156.215461][ T2537] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  156.274401][ T2537] File: /root/syzkaller-testdir2032029587/syzkaller.cZdTfP/28/memory.events PID: 2537 Comm: syz-executor.4
[  156.294239][   T24] usb 2-1: USB disconnect, device number 35
[  156.309808][  T518] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  156.372075][  T518] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  156.406493][  T518] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  156.418451][  T518] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  156.435544][  T518] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  156.459714][  T518] usb 1-1: config 1 interface 0 has no altsetting 0
[  156.466137][  T518] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  156.489516][  T518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.550038][  T518] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  156.619565][  T436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  156.634425][ T2544] loop4: detected capacity change from 0 to 256
[  156.799593][  T436] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  156.808501][  T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.816558][  T436] usb 3-1: Product: syz
[  156.823142][  T436] usb 3-1: Manufacturer: syz
[  156.827562][  T436] usb 3-1: SerialNumber: syz
[  156.833019][  T436] usb 3-1: config 0 descriptor??
[  156.894451][  T518] ums-sddr09: probe of 1-1:1.0 failed with error -22
[  156.952034][  T518] usb 1-1: USB disconnect, device number 27
[  157.090686][ T2511] syz-executor.2: attempt to access beyond end of device
[  157.090686][ T2511] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[  157.104987][ T2511] syz-executor.2: attempt to access beyond end of device
[  157.104987][ T2511] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[  157.123097][ T2551] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.130054][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.137211][ T2551] device bridge_slave_0 entered promiscuous mode
[  157.144075][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.151495][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.153031][  T436] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  157.159437][ T2551] device bridge_slave_1 entered promiscuous mode
[  157.166526][  T436] usb 3-1: USB disconnect, device number 33
[  157.178518][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  157.249378][ T2551] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.256248][ T2551] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.263367][ T2551] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.270221][ T2551] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.300587][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.308287][  T518] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.316044][  T518] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.329015][ T2128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.344298][ T2556] loop4: detected capacity change from 0 to 256
[  157.344829][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.357232][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.369302][ T2128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.378381][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.385280][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.407435][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.415435][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.441400][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.453994][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.462415][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.480046][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.487877][ T2551] device veth0_vlan entered promiscuous mode
[  157.508758][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.519567][ T2551] device veth1_macvtap entered promiscuous mode
[  157.529676][ T2128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.552936][ T2128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.565199][  T343] device bridge_slave_1 left promiscuous mode
[  157.575908][  T343] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.598190][  T343] device bridge_slave_0 left promiscuous mode
[  157.608730][  T343] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.622628][  T343] device veth1_macvtap left promiscuous mode
[  157.632028][  T343] device veth0_vlan left promiscuous mode
[  158.109524][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  158.179530][  T427] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  158.236262][ T2572] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program
[  158.360960][ T2577] loop0: detected capacity change from 0 to 256
[  158.662713][  T427] usb 3-1: Using ep0 maxpacket: 16
[  158.679149][ T2580] loop1: detected capacity change from 0 to 1024
[  158.688041][ T2580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.697858][ T2580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  158.712867][ T2580] EXT4-fs (loop1): unmounting filesystem.
[  158.789632][  T427] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  158.797642][  T427] usb 3-1: config 0 has no interface number 0
[  158.800886][   T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  158.806981][  T427] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  158.812630][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.822360][  T427] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  158.829997][   T24] usb 5-1: Product: syz
[  158.843301][   T24] usb 5-1: Manufacturer: syz
[  158.847697][   T24] usb 5-1: SerialNumber: syz
[  158.853099][   T24] usb 5-1: config 0 descriptor??
[  159.151763][   T24] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  159.160083][   T24] usb 5-1: USB disconnect, device number 33
[  159.172806][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  159.209579][  T331] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  159.217088][  T427] usb 3-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  159.226053][  T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.234497][  T427] usb 3-1: Product: syz
[  159.238530][  T427] usb 3-1: Manufacturer: syz
[  159.243204][  T427] usb 3-1: SerialNumber: syz
[  159.248393][  T427] usb 3-1: config 0 descriptor??
[  159.491900][ T2569] loop2: detected capacity change from 0 to 128
[  159.503345][ T2569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.512262][ T2569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.589626][  T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.600445][  T331] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  159.644119][ T2556] syz-executor.4 (2556) used greatest stack depth: 18816 bytes left
[  159.762080][  T427] usb 3-1: USB disconnect, device number 34
[  159.779603][  T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.788850][  T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.799554][ T2601] loop1: detected capacity change from 0 to 256
[  159.809879][  T331] usb 1-1: Product: syz
[  159.813948][  T331] usb 1-1: Manufacturer: syz
[  159.818504][  T331] usb 1-1: SerialNumber: syz
[  160.080663][ T2585] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  160.419620][  T427] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  160.447799][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.454817][ T2606] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.462594][ T2606] device bridge_slave_0 entered promiscuous mode
[  160.469653][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.476651][ T2606] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.484038][ T2606] device bridge_slave_1 entered promiscuous mode
[  160.539765][  T331] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  160.546528][  T331] cdc_ncm 1-1:1.0: bind() failure
[  160.562826][  T331] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  160.578246][  T331] cdc_ncm 1-1:1.1: bind() failure
[  160.611829][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.618793][ T2606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.625916][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.632692][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.679912][  T427] usb 4-1: Using ep0 maxpacket: 16
[  160.689448][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.698407][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.709640][ T2616] loop4: detected capacity change from 0 to 1024
[  160.719151][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.742745][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.753816][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.760695][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.768015][ T2616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  160.777187][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.787177][ T2616] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  160.796555][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.803419][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.810756][  T427] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  160.818582][  T427] usb 4-1: config 0 has no interface number 0
[  160.825401][ T2616] EXT4-fs (loop4): unmounting filesystem.
[  160.831199][  T427] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  160.842261][  T427] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  160.859952][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.867753][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.885020][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.898035][ T2606] device veth0_vlan entered promiscuous mode
[  160.921010][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.934892][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.942949][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.957700][ T2606] device veth1_macvtap entered promiscuous mode
[  160.981296][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.999064][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.007423][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.015743][  T427] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  161.031399][  T481] device bridge_slave_1 left promiscuous mode
[  161.034585][  T427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.042067][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.058907][  T427] usb 4-1: Product: syz
[  161.074321][  T481] device bridge_slave_0 left promiscuous mode
[  161.075915][  T427] usb 4-1: Manufacturer: syz
[  161.085870][  T427] usb 4-1: SerialNumber: syz
[  161.094077][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.095384][  T427] usb 4-1: config 0 descriptor??
[  161.109229][  T481] device veth1_macvtap left promiscuous mode
[  161.115713][  T481] device veth0_vlan left promiscuous mode
[  161.239561][ T2128] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  161.509704][ T2128] usb 5-1: Using ep0 maxpacket: 32
[  161.581060][  T427] usb 4-1: USB disconnect, device number 33
[  161.654511][ T2631] loop1: detected capacity change from 0 to 256
[  161.730166][  T518] usb 1-1: USB disconnect, device number 28
[  161.740183][ T2128] usb 5-1: config 2 has an invalid interface number: 251 but max is 1
[  161.748534][ T2128] usb 5-1: config 2 has an invalid interface number: 172 but max is 1
[  161.759902][ T2128] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  161.768413][ T2128] usb 5-1: config 2 has no interface number 0
[  161.774687][ T2128] usb 5-1: config 2 has no interface number 1
[  161.780981][ T2128] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  161.793511][ T2128] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  161.805768][ T2128] usb 5-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16
[  161.817708][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[  161.829160][ T2128] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64
[  161.840557][ T2128] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  161.851681][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  161.862215][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  161.872734][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  161.883137][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping
[  161.894471][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  161.905034][ T2128] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping
[  161.917253][ T2128] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  161.950381][ T2128] usb 5-1: config 2 interface 251 has no altsetting 0
[  161.957285][ T2128] usb 5-1: config 2 interface 172 has no altsetting 0
[  162.119575][  T427] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  162.119615][ T2128] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f
[  162.136030][ T2128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.143884][ T2128] usb 5-1: Product: и
[  162.147741][ T2128] usb 5-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾
[  162.161591][  T518] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  162.169034][ T2128] usb 5-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸
[  162.199634][ T2622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  162.259535][   T19] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  162.369534][  T331] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  162.509545][   T19] usb 3-1: Using ep0 maxpacket: 32
[  162.519583][  T518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.530380][  T518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.539865][  T518] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  162.548674][  T518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.558605][ T2128] usb 5-1: USB disconnect, device number 34
[  162.565067][  T518] usb 1-1: config 0 descriptor??
[  162.629621][  T331] usb 4-1: Using ep0 maxpacket: 16
[  162.639600][  T427] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  162.648472][  T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.656414][  T427] usb 2-1: Product: syz
[  162.660432][  T427] usb 2-1: Manufacturer: syz
[  162.664817][  T427] usb 2-1: SerialNumber: syz
[  162.669952][  T427] usb 2-1: config 0 descriptor??
[  162.749640][   T19] usb 3-1: config 2 has an invalid interface number: 251 but max is 1
[  162.757632][   T19] usb 3-1: config 2 has an invalid interface number: 172 but max is 1
[  162.765660][   T19] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  162.774183][  T331] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  162.781975][   T19] usb 3-1: config 2 has no interface number 0
[  162.787840][   T19] usb 3-1: config 2 has no interface number 1
[  162.793868][  T331] usb 4-1: config 0 has no interface number 0
[  162.799800][  T331] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  162.809209][  T331] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  162.811611][ T2635] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  162.818753][   T19] usb 3-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  162.838876][   T19] usb 3-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  162.849650][   T19] usb 3-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16
[  162.859366][   T19] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[  162.870007][   T19] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64
[  162.871412][   T28] audit: type=1400 audit(1717582247.553:155): avc:  denied  { rename } for  pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.880709][   T19] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  162.902849][   T28] audit: type=1400 audit(1717582247.553:156): avc:  denied  { unlink } for  pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.935272][   T19] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  162.946239][   T19] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  162.957397][   T19] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  162.960651][   T28] audit: type=1400 audit(1717582247.553:157): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  162.967993][   T19] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping
[  162.998787][   T19] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  163.010616][  T427] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  163.017837][   T19] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping
[  163.024607][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  163.028889][  T427] usb 2-1: USB disconnect, device number 36
[  163.049701][  T331] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  163.058447][  T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.063325][  T518] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  163.066521][   T19] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  163.088686][  T331] usb 4-1: Product: syz
[  163.092688][  T331] usb 4-1: Manufacturer: syz
[  163.097068][  T331] usb 4-1: SerialNumber: syz
[  163.102068][   T19] usb 3-1: config 2 interface 251 has no altsetting 0
[  163.109574][   T19] usb 3-1: config 2 interface 172 has no altsetting 0
[  163.116326][  T331] usb 4-1: config 0 descriptor??
[  163.229579][  T518] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  163.269263][  T311] usb 1-1: USB disconnect, device number 29
[  163.310193][   T19] usb 3-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f
[  163.319046][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.327007][   T19] usb 3-1: Product: и
[  163.330920][   T19] usb 3-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾
[  163.344710][   T19] usb 3-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸
[  163.362122][ T2639] loop3: detected capacity change from 0 to 128
[  163.371959][ T2639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.380482][ T2639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.389632][ T2637] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  163.610911][  T427] usb 4-1: USB disconnect, device number 34
[  163.692097][ T2646] loop1: detected capacity change from 0 to 256
[  163.727820][   T19] usb 3-1: USB disconnect, device number 35
[  163.749633][  T518] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  163.759229][  T518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.767428][  T518] usb 5-1: Product: syz
[  163.775096][  T518] usb 5-1: Manufacturer: syz
[  163.789427][  T518] usb 5-1: SerialNumber: syz
[  163.795193][  T518] usb 5-1: config 0 descriptor??
[  164.079592][  T331] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  164.146514][ T2652] loop2: detected capacity change from 0 to 1024
[  164.153227][ T2652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  164.163306][ T2652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.173680][ T2652] EXT4-fs (loop2): unmounting filesystem.
[  164.329565][  T331] usb 1-1: Using ep0 maxpacket: 16
[  164.351657][ T2659] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.358502][ T2659] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.366062][ T2659] device bridge_slave_0 entered promiscuous mode
[  164.375631][ T2659] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.382729][ T2659] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.390285][ T2659] device bridge_slave_1 entered promiscuous mode
[  164.753349][ T2667] loop1: detected capacity change from 0 to 512
[  164.771727][ T2667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  164.780663][  T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  164.780862][ T2667] ext4 filesystem being mounted at /root/syzkaller-testdir57630507/syzkaller.Vt4sNH/7/file0 supports timestamps until 2038 (0x7fffffff)
[  164.789449][  T331] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  164.812953][  T331] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  164.822632][  T331] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  164.832236][  T331] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  164.841761][  T331] usb 1-1: config 1 interface 0 has no altsetting 0
[  164.848188][  T331] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  164.857073][  T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.872999][ T2551] EXT4-fs (loop1): unmounting filesystem.
[  164.896284][ T2659] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.903136][ T2659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.910284][ T2659] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.917138][ T2659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.924933][  T331] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  164.952993][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.960623][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.968656][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.979575][  T518] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  164.982058][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.989444][  T518] asix: probe of 5-1:0.0 failed with error -71
[  164.997670][  T427] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.004418][  T518] usb 5-1: USB disconnect, device number 35
[  165.009964][  T427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.025562][  T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.033700][  T427] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.040568][  T427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.048749][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.062671][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.085962][ T2659] device veth0_vlan entered promiscuous mode
[  165.092256][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.100581][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.108372][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.118122][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.128924][  T343] device bridge_slave_1 left promiscuous mode
[  165.134942][  T343] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.142385][  T343] device bridge_slave_0 left promiscuous mode
[  165.148323][  T343] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.156616][  T343] device veth1_macvtap left promiscuous mode
[  165.162500][  T343] device veth0_vlan left promiscuous mode
[  165.180365][ T2677] loop2: detected capacity change from 0 to 256
[  165.209560][   T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  165.251457][  T331] ums-sddr09: probe of 1-1:1.0 failed with error -22
[  165.264977][  T331] usb 1-1: USB disconnect, device number 30
[  165.328686][ T2659] device veth1_macvtap entered promiscuous mode
[  165.335400][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.343664][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.351952][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.372437][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.381087][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.393569][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.401958][  T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.493263][ T2682] loop4: detected capacity change from 0 to 256
[  165.589579][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.612204][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  165.639547][   T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  165.648475][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.657375][   T24] usb 2-1: config 0 descriptor??
[  165.669673][  T518] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  165.700140][   T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  165.999562][  T331] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  166.199589][  T518] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  166.208520][  T518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.216506][  T518] usb 3-1: Product: syz
[  166.221337][  T518] usb 3-1: Manufacturer: syz
[  166.225794][  T518] usb 3-1: SerialNumber: syz
[  166.231305][  T518] usb 3-1: config 0 descriptor??
[  166.249558][  T311] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  166.490976][  T518] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  166.498426][  T518] usb 3-1: USB disconnect, device number 36
[  166.505744][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  166.560654][  T331] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  166.569651][  T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.577405][  T331] usb 1-1: Product: syz
[  166.581601][  T331] usb 1-1: Manufacturer: syz
[  166.586018][  T331] usb 1-1: SerialNumber: syz
[  166.591158][  T331] usb 1-1: config 0 descriptor??
[  166.609544][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  166.779609][  T311] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  166.788499][  T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.796338][  T311] usb 5-1: Product: syz
[  166.800386][  T311] usb 5-1: Manufacturer: syz
[  166.804801][  T311] usb 5-1: SerialNumber: syz
[  166.810274][  T311] usb 5-1: config 0 descriptor??
[  166.849595][   T24] usb 4-1: Using ep0 maxpacket: 16
[  166.970379][   T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  166.978192][   T24] usb 4-1: config 0 has no interface number 0
[  166.984249][   T24] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  166.993704][   T24] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  167.071042][  T311] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  167.078829][  T311] usb 5-1: USB disconnect, device number 36
[  167.085820][  T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  167.159574][   T24] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  167.168479][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.176327][   T24] usb 4-1: Product: syz
[  167.180274][   T24] usb 4-1: Manufacturer: syz
[  167.184748][   T24] usb 4-1: SerialNumber: syz
[  167.190314][   T24] usb 4-1: config 0 descriptor??
[  167.299646][  T518] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  167.431578][ T2692] loop3: detected capacity change from 0 to 128
[  167.441648][ T2692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.449939][ T2692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.539534][  T518] usb 3-1: Using ep0 maxpacket: 16
[  167.659577][  T518] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  167.667455][  T518] usb 3-1: config 0 has no interface number 0
[  167.673665][  T518] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  167.681449][  T436] usb 4-1: USB disconnect, device number 35
[  167.683436][  T518] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  167.719927][  T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  167.729833][  T331] asix: probe of 1-1:0.0 failed with error -71
[  167.736648][  T331] usb 1-1: USB disconnect, device number 31
[  167.849621][  T518] usb 3-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  167.858526][  T518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.866346][  T518] usb 3-1: Product: syz
[  167.870316][  T518] usb 3-1: Manufacturer: syz
[  167.874732][  T518] usb 3-1: SerialNumber: syz
[  167.880210][  T518] usb 3-1: config 0 descriptor??
[  167.989545][  T446] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  168.121990][ T2697] loop2: detected capacity change from 0 to 128
[  168.135494][ T2697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.143851][ T2697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.329250][  T436] usb 2-1: USB disconnect, device number 37
[  168.424937][ T2716] loop0: detected capacity change from 0 to 256
[  168.441889][  T331] usb 3-1: USB disconnect, device number 37
[  168.469274][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.620443][ T2711] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.658011][ T2711] device bridge_slave_0 entered promiscuous mode
[  168.705855][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.735228][ T2711] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.751539][ T2711] device bridge_slave_1 entered promiscuous mode
[  168.789556][  T446] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  168.798423][  T446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.806496][  T446] usb 5-1: Product: syz
[  168.810525][  T446] usb 5-1: Manufacturer: syz
[  168.814909][  T446] usb 5-1: SerialNumber: syz
[  168.820275][  T446] usb 5-1: config 0 descriptor??
[  168.886692][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.893719][ T2711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.900788][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.907556][ T2711] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.934903][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.942214][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.949235][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.959907][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.967873][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.974724][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.979174][   T28] audit: type=1400 audit(1717582253.653:158): avc:  denied  { unmount } for  pid=2606 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  168.982148][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.009808][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.016643][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.038566][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.051678][ T2722] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  169.056801][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.079627][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.089680][  T343] device bridge_slave_1 left promiscuous mode
[  169.096153][  T343] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.103843][  T343] device bridge_slave_0 left promiscuous mode
[  169.110912][  T343] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.119086][  T343] device veth1_macvtap left promiscuous mode
[  169.125090][  T343] device veth0_vlan left promiscuous mode
[  169.549234][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.558907][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.567519][ T2711] device veth0_vlan entered promiscuous mode
[  169.574716][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.590557][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.631730][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.648486][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.659207][ T2711] device veth1_macvtap entered promiscuous mode
[  169.671820][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  169.680376][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  169.688671][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  169.706544][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  169.725506][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  169.795275][ T2737] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  169.817105][ T2736] loop3: detected capacity change from 0 to 512
[  169.830127][ T2737] File: /root/syzkaller-testdir57630507/syzkaller.Vt4sNH/11/memory.events PID: 2737 Comm: syz-executor.1
[  169.856114][ T2736] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  169.865478][ T2736] ext4 filesystem being mounted at /root/syzkaller-testdir4121350297/syzkaller.CAikHb/0/file0 supports timestamps until 2038 (0x7fffffff)
[  169.990437][ T2711] EXT4-fs (loop3): unmounting filesystem.
[  170.009604][  T446] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  170.022816][  T446] asix: probe of 5-1:0.0 failed with error -71
[  170.031750][  T446] usb 5-1: USB disconnect, device number 37
[  170.082037][ T2748] loop2: detected capacity change from 0 to 1024
[  170.085782][ T2745] loop3: detected capacity change from 0 to 2048
[  170.095515][ T2748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.125309][ T2748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  170.140085][ T2748] EXT4-fs (loop2): unmounting filesystem.
[  170.140510][ T2745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  170.189748][ T2755] loop0: detected capacity change from 0 to 1024
[  170.200840][ T2755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.240039][ T2755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  170.255282][ T2755] EXT4-fs (loop0): unmounting filesystem.
[  171.229049][ T2711] EXT4-fs (loop3): unmounting filesystem.
[  171.618207][ T2785] futex_wake_op: syz-executor.0 tries to shift op by 32; fix this program
[  171.983916][  T311] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  172.081648][ T2783] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  172.093368][ T2796] loop4: detected capacity change from 0 to 1024
[  172.096337][ T2796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  172.104130][ T2783] File: /root/syzkaller-testdir4121350297/syzkaller.CAikHb/2/memory.events PID: 2783 Comm: syz-executor.3
[  172.116969][ T2796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  172.128530][ T2796] EXT4-fs (loop4): unmounting filesystem.
[  172.142425][ T2799] loop3: detected capacity change from 0 to 256
[  172.339608][  T311] usb 3-1: Using ep0 maxpacket: 16
[  172.459622][  T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  172.474115][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  172.484146][  T331] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  172.493205][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  172.503956][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  172.520197][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  172.532325][  T311] usb 3-1: config 1 interface 0 has no altsetting 0
[  172.539248][  T311] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  172.549714][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.600052][  T311] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  172.618706][ T2811] loop0: detected capacity change from 0 to 1024
[  172.632308][ T2811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  172.640866][  T446] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  172.649320][ T2811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  172.658938][ T2811] EXT4-fs (loop0): unmounting filesystem.
[  172.883918][  T311] scsi host1: usb-storage 3-1:1.0
[  173.140984][  T436] usb 3-1: USB disconnect, device number 38
[  173.391547][  T331] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  173.406738][  T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.415790][  T331] usb 5-1: Product: syz
[  173.421894][  T331] usb 5-1: Manufacturer: syz
[  173.426275][  T331] usb 5-1: SerialNumber: syz
[  173.500087][  T446] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  173.509598][  T331] usb 5-1: config 0 descriptor??
[  173.514403][  T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.532886][  T446] usb 4-1: Product: syz
[  173.536893][  T446] usb 4-1: Manufacturer: syz
[  173.541358][  T446] usb 4-1: SerialNumber: syz
[  173.546465][  T446] usb 4-1: config 0 descriptor??
[  174.081344][  T446] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  174.095163][  T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  174.110859][  T446] usb 4-1: USB disconnect, device number 36
[  174.262061][ T2840] loop0: detected capacity change from 0 to 1024
[  174.268728][ T2840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  174.278225][ T2840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  174.287298][ T2840] EXT4-fs (loop0): unmounting filesystem.
[  176.154397][  T446] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  176.161996][  T331] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  176.203029][  T331] asix: probe of 5-1:0.0 failed with error -71
[  176.210739][  T331] usb 5-1: USB disconnect, device number 38
[  176.290570][ T2868] loop1: detected capacity change from 0 to 2048
[  176.344526][ T2868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  176.828120][ T2883] loop4: detected capacity change from 0 to 1024
[  176.834676][  T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.850598][  T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.868973][ T2883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.879800][  T446] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  176.896963][  T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.905525][ T2883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.922790][  T446] usb 1-1: config 0 descriptor??
[  176.930945][ T2883] EXT4-fs (loop4): unmounting filesystem.
[  177.189459][ T2843] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  177.548894][  T446] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  177.576502][ T2551] EXT4-fs (loop1): unmounting filesystem.
[  177.609601][  T331] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  177.693149][  T446] usb 1-1: USB disconnect, device number 32
[  177.969559][  T313] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  178.259601][  T331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.269698][  T331] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.282548][  T331] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  178.291496][  T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.299981][  T331] usb 5-1: config 0 descriptor??
[  178.619225][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.648188][  T331] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  178.664897][  T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.674836][  T313] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  178.683803][  T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.727995][  T313] usb 2-1: config 0 descriptor??
[  178.876918][ T2920] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  178.888531][ T2920] File: /root/syzkaller-testdir4121350297/syzkaller.CAikHb/7/memory.events PID: 2920 Comm: syz-executor.3
[  178.922049][ T2922] loop3: detected capacity change from 0 to 1024
[  178.935249][ T2922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.945894][ T2922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  178.955194][ T2922] EXT4-fs (loop3): unmounting filesystem.
[  178.982995][ T2899] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  179.206242][ T2934] 9pnet_fd: Insufficient options for proto=fd
[  179.231305][  T313] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  179.646149][  T313] usb 2-1: USB disconnect, device number 38
[  179.769536][  T331] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  180.019517][  T331] usb 4-1: Using ep0 maxpacket: 16
[  180.169663][  T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  180.180709][  T331] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  180.190359][  T331] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  180.199951][  T331] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  180.209655][  T331] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  180.222411][  T331] usb 4-1: config 1 interface 0 has no altsetting 0
[  180.228885][  T331] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  180.237964][  T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.300104][  T331] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  180.567745][  T313] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  180.929603][  T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.940393][  T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.955105][  T313] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  180.964189][  T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.973121][  T313] usb 3-1: config 0 descriptor??
[  180.991865][  T331] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  181.003019][  T331] usb 4-1: USB disconnect, device number 37
[  181.073819][  T311] usb 5-1: USB disconnect, device number 39
[  181.133071][ T2964] loop0: detected capacity change from 0 to 256
[  181.211677][ T2949] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  181.439526][   T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  181.451474][  T313] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  181.519547][  T311] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  181.569523][ T1692] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  181.655398][  T313] usb 3-1: USB disconnect, device number 39
[  181.679518][   T24] usb 2-1: Using ep0 maxpacket: 16
[  181.739538][ T2128] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  181.799627][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  181.808434][   T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  181.818091][   T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  181.827837][   T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  181.837414][   T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  181.846988][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  181.853451][   T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  181.862596][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.910179][   T24] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  181.979535][ T2128] usb 4-1: Using ep0 maxpacket: 16
[  182.039570][  T311] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  182.048486][  T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.056363][  T311] usb 5-1: Product: syz
[  182.060433][  T311] usb 5-1: Manufacturer: syz
[  182.064756][  T311] usb 5-1: SerialNumber: syz
[  182.069929][  T311] usb 5-1: config 0 descriptor??
[  182.089580][ T1692] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  182.098599][ T1692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.106466][ T2128] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  182.115198][   T24] scsi host1: usb-storage 2-1:1.0
[  182.120630][ T1692] usb 1-1: Product: syz
[  182.124694][ T1692] usb 1-1: Manufacturer: syz
[  182.129120][ T1692] usb 1-1: SerialNumber: syz
[  182.134316][ T2128] usb 4-1: config 0 has no interface number 0
[  182.140239][ T2128] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  182.150007][ T2128] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  182.159716][ T1692] usb 1-1: config 0 descriptor??
[  182.177788][ T2978] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  182.319600][ T2128] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  182.328467][ T2128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.336451][ T2128] usb 4-1: Product: syz
[  182.340958][ T2128] usb 4-1: Manufacturer: syz
[  182.345366][ T2128] usb 4-1: SerialNumber: syz
[  182.346343][ T2978] overlayfs: failed to resolve './file2': -2
[  182.351708][ T2128] usb 4-1: config 0 descriptor??
[  182.361517][   T24] usb 2-1: USB disconnect, device number 39
[  182.420862][ T1692] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  182.430622][ T1692] usb 1-1: USB disconnect, device number 33
[  182.434581][  T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  182.601762][ T2972] loop3: detected capacity change from 0 to 128
[  182.612886][ T2972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.621299][ T2972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.906033][  T331] usb 4-1: USB disconnect, device number 38
[  183.429711][  T311] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  183.463634][  T311] asix: probe of 5-1:0.0 failed with error -71
[  183.475349][  T311] usb 5-1: USB disconnect, device number 40
[  183.925173][ T3002] loop3: detected capacity change from 0 to 256
[  184.143741][ T1692] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  184.252731][ T3010] 9pnet_fd: Insufficient options for proto=fd
[  184.278095][ T3013] loop4: detected capacity change from 0 to 256
[  184.324506][ T3018] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  184.389583][ T1692] usb 3-1: Using ep0 maxpacket: 16
[  184.439521][ T2128] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  184.512606][ T3018] overlayfs: failed to resolve './file2': -2
[  184.516419][ T1692] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  184.527682][ T1692] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  184.537519][ T1692] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  184.550713][ T1692] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  184.560446][ T1692] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  184.570066][ T1692] usb 3-1: config 1 interface 0 has no altsetting 0
[  184.576429][ T1692] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  184.585325][ T1692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.618413][ T3026] loop3: detected capacity change from 0 to 1024
[  184.625136][ T3026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.634239][ T1692] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  184.636347][ T3026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  184.650184][ T3026] EXT4-fs (loop3): unmounting filesystem.
[  184.747253][   T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  184.819647][ T2128] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.830298][ T2128] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.910085][ T2128] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  184.925983][ T2128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.981865][ T2128] usb 1-1: config 0 descriptor??
[  185.061335][ T2128] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  185.150294][ T1692] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  185.158046][ T1692] usb 3-1: USB disconnect, device number 40
[  185.269560][   T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  185.278475][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.286512][   T24] usb 5-1: Product: syz
[  185.290702][   T24] usb 5-1: Manufacturer: syz
[  185.295528][   T24] usb 5-1: SerialNumber: syz
[  185.300889][   T24] usb 5-1: config 0 descriptor??
[  185.564058][   T24] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  185.571658][   T24] usb 5-1: USB disconnect, device number 41
[  185.578027][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  185.614189][ T3048] loop3: detected capacity change from 0 to 256
[  185.626142][ T3048] FAT-fs (loop3): bogus logical sector size 0
[  185.632209][ T3048] FAT-fs (loop3): Can't find a valid FAT filesystem
[  185.712832][ T3052] Zero length message leads to an empty skb
[  185.754686][ T1692] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  186.488114][ T1692] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  186.497279][ T1692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.505233][ T1692] usb 2-1: Product: syz
[  186.509278][ T1692] usb 2-1: Manufacturer: syz
[  186.513709][ T1692] usb 2-1: SerialNumber: syz
[  186.533142][ T1692] usb 2-1: config 0 descriptor??
[  186.616084][ T3070] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  187.679554][ T2128] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  187.705816][ T3096] loop3: detected capacity change from 0 to 256
[  187.839525][  T436] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  187.877483][  T331] usb 1-1: USB disconnect, device number 34
[  187.882323][ T1692] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  187.895527][ T1692] asix: probe of 2-1:0.0 failed with error -71
[  187.904598][ T1692] usb 2-1: USB disconnect, device number 40
[  187.919564][ T2128] usb 5-1: Using ep0 maxpacket: 16
[  188.079557][ T2128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  188.088347][ T2128] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  188.097980][ T2128] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  188.099521][  T436] usb 3-1: Using ep0 maxpacket: 16
[  188.107461][ T2128] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  188.112835][  T332] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  188.122094][ T2128] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  188.138981][ T2128] usb 5-1: config 1 interface 0 has no altsetting 0
[  188.146366][ T2128] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  188.155874][ T2128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.314798][ T2128] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  188.477627][ T3107] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  188.612629][ T2128] ums-sddr09: probe of 5-1:1.0 failed with error -22
[  188.625456][ T2128] usb 5-1: USB disconnect, device number 42
[  188.847519][  T436] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  188.855578][  T436] usb 3-1: config 0 has no interface number 0
[  188.862026][  T436] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  188.871778][  T436] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  189.049643][  T436] usb 3-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  189.058533][  T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.066386][  T436] usb 3-1: Product: syz
[  189.070619][  T436] usb 3-1: Manufacturer: syz
[  189.075014][  T436] usb 3-1: SerialNumber: syz
[  189.087312][  T436] usb 3-1: config 0 descriptor??
[  189.249823][  T332] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  189.272313][  T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.281185][  T332] usb 4-1: Product: syz
[  189.740883][ T3093] loop2: detected capacity change from 0 to 128
[  189.822561][  T332] usb 4-1: Manufacturer: syz
[  189.826991][  T332] usb 4-1: SerialNumber: syz
[  189.837277][  T332] usb 4-1: config 0 descriptor??
[  189.843631][ T3093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.853081][ T3093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.855316][ T3128] futex_wake_op: syz-executor.4 tries to shift op by 32; fix this program
[  190.283455][  T436] usb 3-1: USB disconnect, device number 41
[  190.293091][  T332] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  190.301876][  T332] usb 4-1: USB disconnect, device number 39
[  190.313881][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  190.569533][   T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  190.955667][ T3146] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.962652][ T3146] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.970113][ T3146] device bridge_slave_0 entered promiscuous mode
[  190.976762][ T3146] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.983642][ T3146] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.991016][ T3146] device bridge_slave_1 entered promiscuous mode
[  191.019591][ T2128] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  191.039563][  T311] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  191.049605][ T1692] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  191.055071][ T3146] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.063927][ T3146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.071042][ T3146] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.078155][ T3146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.102213][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.109966][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.117016][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.130384][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.138522][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.145387][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.153051][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.159593][   T24] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  191.161079][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.170392][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.176537][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.191419][   T24] usb 1-1: Product: syz
[  191.191870][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.195374][   T24] usb 1-1: Manufacturer: syz
[  191.195394][   T24] usb 1-1: SerialNumber: syz
[  191.204141][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.212131][   T24] usb 1-1: config 0 descriptor??
[  191.212784][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.238183][ T3146] device veth0_vlan entered promiscuous mode
[  191.244942][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.252738][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.260089][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.270111][ T2128] usb 2-1: Using ep0 maxpacket: 16
[  191.274410][ T3146] device veth1_macvtap entered promiscuous mode
[  191.282172][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.297930][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.306746][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.309600][ T1692] usb 4-1: Using ep0 maxpacket: 16
[  191.334342][ T3151] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  191.419559][ T2128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  191.428382][ T2128] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  191.437902][  T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.448675][  T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.458392][ T2128] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  191.467915][  T311] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  191.485655][  T348] device bridge_slave_1 left promiscuous mode
[  191.515850][ T1692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  191.526723][ T2128] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  191.536824][  T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.547849][ T1692] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  191.559553][ T2128] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  191.605112][  T311] usb 5-1: config 0 descriptor??
[  191.610263][ T1692] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  191.622109][ T2128] usb 2-1: config 1 interface 0 has no altsetting 0
[  191.628852][ T1692] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  191.640426][ T2128] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  191.651239][  T348] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.658485][ T1692] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  191.669922][ T2128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.677866][ T1692] usb 4-1: config 1 interface 0 has no altsetting 0
[  191.680792][  T348] device bridge_slave_0 left promiscuous mode
[  191.690379][  T348] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.691391][ T1692] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  191.706190][ T1692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.714367][  T348] device veth1_macvtap left promiscuous mode
[  191.720310][  T348] device veth0_vlan left promiscuous mode
[  191.730228][ T2128] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  191.760222][ T1692] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  191.886616][ T3140] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'.
[  192.060929][ T2128] ums-sddr09: probe of 2-1:1.0 failed with error -22
[  192.067481][ T1692] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  192.076155][ T2128] usb 2-1: USB disconnect, device number 41
[  192.081944][ T1692] usb 4-1: USB disconnect, device number 40
[  192.122841][  T311] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  192.324989][ T2128] usb 5-1: USB disconnect, device number 43
[  192.429607][   T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  192.439578][   T24] asix: probe of 1-1:0.0 failed with error -71
[  192.446560][   T24] usb 1-1: USB disconnect, device number 35
[  192.519545][  T311] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  192.549820][ T3165] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  192.799810][  T311] usb 3-1: Using ep0 maxpacket: 16
[  192.932398][ T3175] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program
[  192.983211][  T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  192.997892][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  193.007995][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  193.017752][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  193.029193][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  193.032070][ T3178] loop0: detected capacity change from 0 to 256
[  193.039029][  T311] usb 3-1: config 1 interface 0 has no altsetting 0
[  193.052304][  T311] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  193.062288][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.213022][  T311] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  193.440109][  T311] scsi host1: usb-storage 3-1:1.0
[  193.690994][  T332] usb 3-1: USB disconnect, device number 42
[  193.719556][  T436] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  193.852360][  T311] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  193.917181][ T3195] loop3: detected capacity change from 0 to 1024
[  193.924161][ T3195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  193.934214][ T3195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  193.943488][ T3195] EXT4-fs (loop3): unmounting filesystem.
[  193.969511][  T436] usb 2-1: Using ep0 maxpacket: 16
[  194.064964][ T3200] loop3: detected capacity change from 0 to 256
[  194.089560][  T436] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  194.099661][  T436] usb 2-1: config 0 has no interface number 0
[  194.112184][  T436] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  194.132945][  T436] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  194.309597][  T436] usb 2-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  194.318488][  T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.338401][  T436] usb 2-1: Product: syz
[  194.346962][  T436] usb 2-1: Manufacturer: syz
[  194.355836][  T436] usb 2-1: SerialNumber: syz
[  194.370113][  T436] usb 2-1: config 0 descriptor??
[  194.409557][  T311] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  194.418756][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.426716][  T311] usb 1-1: Product: syz
[  194.431200][  T311] usb 1-1: Manufacturer: syz
[  194.435995][  T311] usb 1-1: SerialNumber: syz
[  194.443447][  T311] usb 1-1: config 0 descriptor??
[  194.509542][  T331] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  194.611422][ T3186] loop1: detected capacity change from 0 to 128
[  194.623636][ T3186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.632609][ T3186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.659531][  T518] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  194.701406][  T311] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  194.708992][  T311] usb 1-1: USB disconnect, device number 36
[  194.719309][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  194.753446][ T3209] loop4: detected capacity change from 0 to 256
[  194.759585][  T331] usb 3-1: Using ep0 maxpacket: 16
[  194.879581][  T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  194.888498][  T331] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  194.898337][  T331] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  194.908155][  T331] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  194.924635][  T331] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  194.934264][  T331] usb 3-1: config 1 interface 0 has no altsetting 0
[  194.940646][  T331] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  194.949634][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.958106][   T19] usb 2-1: USB disconnect, device number 42
[  194.999972][  T331] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  195.190046][ T1692] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  195.249629][  T518] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  195.258502][  T518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.266928][  T518] usb 4-1: Product: syz
[  195.271171][  T518] usb 4-1: Manufacturer: syz
[  195.275905][  T518] usb 4-1: SerialNumber: syz
[  195.281230][  T518] usb 4-1: config 0 descriptor??
[  195.320790][  T331] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  195.330744][  T331] usb 3-1: USB disconnect, device number 43
[  195.609713][  T518] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  195.705866][  T518] usb 4-1: USB disconnect, device number 41
[  195.714523][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  195.779638][ T1692] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  195.795087][ T1692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.810205][ T1692] usb 5-1: Product: syz
[  195.814640][ T1692] usb 5-1: Manufacturer: syz
[  195.819058][ T1692] usb 5-1: SerialNumber: syz
[  195.876614][ T1692] usb 5-1: config 0 descriptor??
[  195.961440][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.968670][ T3223] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.062104][ T3223] device bridge_slave_0 entered promiscuous mode
[  196.121430][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.128737][ T3223] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.201489][ T3223] device bridge_slave_1 entered promiscuous mode
[  196.212756][ T1692] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  196.226839][ T1692] usb 5-1: USB disconnect, device number 44
[  196.257721][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  196.410313][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.417186][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.424410][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.431173][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.457935][  T343] device bridge_slave_1 left promiscuous mode
[  196.464094][  T343] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.472268][  T343] device bridge_slave_0 left promiscuous mode
[  196.478229][  T343] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.486137][  T343] device veth1_macvtap left promiscuous mode
[  196.492150][  T343] device veth0_vlan left promiscuous mode
[  196.889552][  T436] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  196.921699][   T24] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.928964][   T24] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.953972][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.965186][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.293097][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.301802][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.311763][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.318634][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.322586][ T3252] loop4: detected capacity change from 0 to 256
[  197.325956][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.341159][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.349217][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.356096][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.377963][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.386064][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.393949][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.402525][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.410434][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  197.418664][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  197.429395][ T3223] device veth0_vlan entered promiscuous mode
[  197.436980][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.444999][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.453241][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.464763][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.483419][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.491671][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.500552][ T3223] device veth1_macvtap entered promiscuous mode
[  197.513901][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  197.523474][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  197.529754][  T436] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.532441][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  197.543012][  T436] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  197.562426][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.570722][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.580733][  T311] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  197.719883][  T436] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.729177][  T436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.737519][  T436] usb 4-1: Product: syz
[  197.741533][  T436] usb 4-1: Manufacturer: syz
[  197.745922][  T436] usb 4-1: SerialNumber: syz
[  197.800450][ T3263] loop2: detected capacity change from 0 to 256
[  197.829622][  T311] usb 1-1: Using ep0 maxpacket: 16
[  197.830112][  T331] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  197.969597][  T311] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  197.977563][  T311] usb 1-1: config 0 has no interface number 0
[  197.983611][   T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  197.991355][ T3234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  197.991662][  T311] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  198.007825][  T311] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  198.169591][  T311] usb 1-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  198.178568][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.186582][  T311] usb 1-1: Product: syz
[  198.190609][  T311] usb 1-1: Manufacturer: syz
[  198.194967][  T311] usb 1-1: SerialNumber: syz
[  198.200411][  T311] usb 1-1: config 0 descriptor??
[  198.229890][   T19] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  198.249550][   T24] usb 2-1: Using ep0 maxpacket: 16
[  198.359615][  T331] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  198.368505][  T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.376333][  T331] usb 5-1: Product: syz
[  198.379591][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  198.380330][  T331] usb 5-1: Manufacturer: syz
[  198.389122][   T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  198.393756][  T331] usb 5-1: SerialNumber: syz
[  198.403581][   T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  198.408340][  T331] usb 5-1: config 0 descriptor??
[  198.417529][   T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  198.431337][   T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  198.440874][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  198.447709][   T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  198.452025][ T3251] loop0: detected capacity change from 0 to 128
[  198.456625][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.468004][ T3251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.479968][ T3251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.530297][   T24] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  198.650005][ T3234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  198.681096][  T331] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  198.690280][  T331] usb 5-1: USB disconnect, device number 45
[  198.694964][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  198.750295][   T24] scsi host1: usb-storage 2-1:1.0
[  198.759165][   T24] usb 1-1: USB disconnect, device number 37
[  198.760141][   T19] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  198.776380][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.784253][   T19] usb 3-1: Product: syz
[  198.788179][   T19] usb 3-1: Manufacturer: syz
[  198.792805][   T19] usb 3-1: SerialNumber: syz
[  198.798351][   T19] usb 3-1: config 0 descriptor??
[  198.889557][  T436] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  198.896026][  T436] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  198.903264][  T436] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  199.010117][   T24] usb 2-1: USB disconnect, device number 43
[  199.062045][   T19] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  199.069723][   T19] usb 3-1: USB disconnect, device number 44
[  199.076580][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  199.092143][  T436] cdc_ncm 4-1:1.0: setting tx_max = 184
[  199.099434][  T436] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  199.113377][  T436] usb 4-1: USB disconnect, device number 42
[  199.115790][   T28] audit: type=1400 audit(1717582283.793:159): avc:  denied  { read } for  pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  199.119886][  T436] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  201.339233][ T3327] loop4: detected capacity change from 0 to 256
[  202.044245][ T3337] loop3: detected capacity change from 0 to 256
[  202.082310][  T481] device bridge_slave_1 left promiscuous mode
[  202.089646][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.119517][  T436] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  202.132734][  T481] device bridge_slave_0 left promiscuous mode
[  202.148404][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.170741][  T481] device veth1_macvtap left promiscuous mode
[  202.200006][  T481] device veth0_vlan left promiscuous mode
[  202.379593][  T436] usb 3-1: Using ep0 maxpacket: 16
[  202.412028][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.418898][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.426591][ T3321] device bridge_slave_0 entered promiscuous mode
[  202.433849][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.440968][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.448296][ T3321] device bridge_slave_1 entered promiscuous mode
[  202.499535][  T436] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  202.507360][  T436] usb 3-1: config 0 has no interface number 0
[  202.508516][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.513755][  T436] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  202.520129][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.520229][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.530090][  T436] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  202.536686][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.575700][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.582815][   T19] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  202.591262][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.598611][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.605952][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.620329][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.628263][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.635116][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.642543][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.649558][   T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  202.650619][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.664580][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.674294][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.686179][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.700181][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.709814][  T436] usb 3-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  202.712939][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.726281][ T1692] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  202.726500][  T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.735113][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.748812][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.756014][  T436] usb 3-1: Product: syz
[  202.757310][ T3321] device veth0_vlan entered promiscuous mode
[  202.760242][  T436] usb 3-1: Manufacturer: syz
[  202.770425][  T436] usb 3-1: SerialNumber: syz
[  202.774306][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.780120][  T436] usb 3-1: config 0 descriptor??
[  202.788791][ T3321] device veth1_macvtap entered promiscuous mode
[  202.798445][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.809267][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  202.839580][   T19] usb 5-1: Using ep0 maxpacket: 32
[  202.850530][ T3348] loop0: detected capacity change from 0 to 256
[  202.857274][ T3348] FAT-fs (loop0): bogus logical sector size 0
[  202.863394][ T3348] FAT-fs (loop0): Can't find a valid FAT filesystem
[  203.021804][ T3325] loop2: detected capacity change from 0 to 128
[  203.032046][ T3325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.039571][   T19] usb 5-1: config 2 has an invalid interface number: 251 but max is 2
[  203.040368][ T3325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.048177][   T19] usb 5-1: config 2 has an invalid interface number: 172 but max is 2
[  203.064396][   T19] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  203.074057][   T19] usb 5-1: config 2 has an invalid interface number: 108 but max is 2
[  203.082104][   T19] usb 5-1: config 2 has no interface number 0
[  203.087938][   T19] usb 5-1: config 2 has no interface number 1
[  203.094091][   T19] usb 5-1: config 2 has no interface number 2
[  203.100033][   T19] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  203.110833][   T19] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  203.121651][   T19] usb 5-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16
[  203.131333][   T19] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[  203.139616][ T1692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.143536][   T19] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64
[  203.159345][ T1692] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  203.163203][   T19] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  203.163236][   T19] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  203.194374][   T19] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  203.204909][   T19] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  203.215304][   T19] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping
[  203.219595][   T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  203.225808][   T19] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  203.235183][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.245074][   T19] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping
[  203.245104][   T19] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  203.253323][   T24] usb 4-1: Product: syz
[  203.274331][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  203.278564][   T24] usb 4-1: Manufacturer: syz
[  203.293166][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping
[  203.293544][   T24] usb 4-1: SerialNumber: syz
[  203.303755][   T19] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  203.313362][   T24] usb 4-1: config 0 descriptor??
[  203.318644][   T19] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[  203.333880][   T19] usb 5-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7
[  203.344701][   T19] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[  203.350132][  T518] usb 3-1: USB disconnect, device number 45
[  203.360888][   T19] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[  203.360914][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  203.360937][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  203.374860][ T1692] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.401365][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  203.411632][ T1692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.412167][   T19] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  203.419807][ T1692] usb 2-1: Product: syz
[  203.430310][   T19] usb 5-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[  203.435123][ T1692] usb 2-1: Manufacturer: syz
[  203.447511][   T19] usb 5-1: config 2 interface 251 has no altsetting 0
[  203.451934][ T1692] usb 2-1: SerialNumber: syz
[  203.458386][   T19] usb 5-1: config 2 interface 172 has no altsetting 0
[  203.469333][   T19] usb 5-1: config 2 interface 108 has no altsetting 0
[  203.601984][   T24] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  203.609935][   T24] usb 4-1: USB disconnect, device number 43
[  203.610297][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  203.631215][   T19] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f
[  203.640195][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.647980][   T19] usb 5-1: Product: и
[  203.651913][   T19] usb 5-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾
[  203.665715][   T19] usb 5-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸
[  203.700102][ T3342] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  203.711157][ T3344] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  204.196130][   T19] usb 5-1: USB disconnect, device number 46
[  204.445434][ T3344] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  204.620798][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.633858][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.656181][ T3365] device bridge_slave_0 entered promiscuous mode
[  204.665184][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.672473][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.680078][ T3365] device bridge_slave_1 entered promiscuous mode
[  204.687265][ T1692] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  204.694486][ T1692] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  204.701861][ T1692] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  204.708683][ T3372] futex_wake_op: syz-executor.4 tries to shift op by 32; fix this program
[  205.080055][ T1692] cdc_ncm 2-1:1.0: setting tx_max = 184
[  205.103871][ T1692] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  205.140879][ T1692] usb 2-1: USB disconnect, device number 44
[  205.156273][ T1692] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  205.217196][  T348] device bridge_slave_1 left promiscuous mode
[  205.223977][  T348] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.232606][  T348] device bridge_slave_0 left promiscuous mode
[  205.238684][  T348] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.247170][  T348] device veth1_macvtap left promiscuous mode
[  205.253398][  T348] device veth0_vlan left promiscuous mode
[  206.033260][ T3403] loop1: detected capacity change from 0 to 256
[  206.121304][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  206.131880][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.194900][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  206.204555][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  206.224754][  T518] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.231646][  T518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.264941][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  206.282859][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  206.301655][  T518] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.308548][  T518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.329582][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  206.343675][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.359622][  T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.376846][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  206.387494][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  206.407677][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  206.416933][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  206.430036][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  206.437746][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  206.445675][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  206.452974][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  206.461216][ T3365] device veth0_vlan entered promiscuous mode
[  206.469693][   T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  206.472629][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  206.485559][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  206.502049][ T3365] device veth1_macvtap entered promiscuous mode
[  206.512759][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.520976][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.529321][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.547862][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.561451][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.572167][  T436] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  206.612165][ T3428] loop0: detected capacity change from 0 to 256
[  206.799889][   T24] usb 4-1: Using ep0 maxpacket: 16
[  206.909791][  T518] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  206.960010][   T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  206.968006][   T24] usb 4-1: config 0 has no interface number 0
[  206.974883][   T24] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  206.987212][   T24] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  207.159550][  T518] usb 3-1: Using ep0 maxpacket: 16
[  207.179591][   T24] usb 4-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  207.188498][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.196393][   T24] usb 4-1: Product: syz
[  207.200493][   T24] usb 4-1: Manufacturer: syz
[  207.204901][   T24] usb 4-1: SerialNumber: syz
[  207.210085][   T24] usb 4-1: config 0 descriptor??
[  207.289565][  T518] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  207.297549][ T1692] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  207.304923][  T518] usb 3-1: config 0 has no interface number 0
[  207.310803][  T518] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  207.320345][  T518] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  207.329557][  T436] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  207.360571][  T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.368390][  T436] usb 2-1: Product: syz
[  207.377038][  T436] usb 2-1: Manufacturer: syz
[  207.381510][  T436] usb 2-1: SerialNumber: syz
[  207.387183][  T436] usb 2-1: config 0 descriptor??
[  207.471252][ T3408] loop3: detected capacity change from 0 to 128
[  207.483679][ T3408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.492496][ T3408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.520159][  T518] usb 3-1: New USB device found, idVendor=0082, idProduct=0000, bcdDevice= f.00
[  207.530169][  T518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.544327][  T518] usb 3-1: Product: syz
[  207.548530][  T518] usb 3-1: Manufacturer: syz
[  207.555818][  T518] usb 3-1: SerialNumber: syz
[  207.596246][  T518] usb 3-1: config 0 descriptor??
[  207.742851][  T436] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  207.751547][  T436] usb 2-1: USB disconnect, device number 45
[  207.756427][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  207.864845][ T3430] loop2: detected capacity change from 0 to 128
[  207.873745][   T24] usb 4-1: USB disconnect, device number 44
[  207.874318][ T3430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.879639][ T1692] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  207.890883][ T3430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.897431][ T1692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.912864][ T1692] usb 1-1: Product: syz
[  207.916980][ T1692] usb 1-1: Manufacturer: syz
[  207.921535][ T1692] usb 1-1: SerialNumber: syz
[  207.927741][ T1692] usb 1-1: config 0 descriptor??
[  208.147295][  T332] usb 3-1: USB disconnect, device number 46
[  208.191054][ T1692] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  208.200384][ T1692] usb 1-1: USB disconnect, device number 38
[  208.205516][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  208.284814][ T3441] loop4: detected capacity change from 0 to 1024
[  208.287178][ T3443] loop1: detected capacity change from 0 to 1024
[  208.292465][ T3441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.306207][ T3443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.315990][ T3441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  208.316842][ T3443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  208.326287][ T3441] EXT4-fs (loop4): unmounting filesystem.
[  208.334298][ T3443] EXT4-fs (loop1): unmounting filesystem.
[  208.427247][ T3449] 9pnet: Could not find request transport: fd0x0000000000000003
[  208.693672][ T3458] loop4: detected capacity change from 0 to 256
[  208.974066][ T3460] loop1: detected capacity change from 0 to 256
[  209.051304][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.060710][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.079063][ T3456] device bridge_slave_0 entered promiscuous mode
[  209.102230][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.118303][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.126017][ T3456] device bridge_slave_1 entered promiscuous mode
[  209.536257][ T3472] futex_wake_op: syz-executor.4 tries to shift op by 32; fix this program
[  209.607829][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.609601][   T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  209.620552][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.640822][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.648968][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.657117][  T436] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.663997][  T436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.671457][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.679705][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.687803][  T436] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.694701][  T436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.717668][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.725824][  T481] device bridge_slave_1 left promiscuous mode
[  209.731934][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.743243][  T481] device bridge_slave_0 left promiscuous mode
[  209.749942][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.758244][  T481] device veth1_macvtap left promiscuous mode
[  209.764251][  T481] device veth0_vlan left promiscuous mode
[  209.919538][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  209.927593][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  209.935953][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  209.944089][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  209.967529][ T3456] device veth0_vlan entered promiscuous mode
[  209.974267][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.982977][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.998933][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.014211][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.031633][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.049864][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.064122][ T3456] device veth1_macvtap entered promiscuous mode
[  210.096415][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.108116][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.119112][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  210.175638][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.193882][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.203365][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.204013][ T3483] futex_wake_op: syz-executor.0 tries to shift op by 32; fix this program
[  210.213271][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.219844][   T24] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  210.248722][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.256011][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.258492][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.263709][ T3473] device bridge_slave_0 entered promiscuous mode
[  210.294994][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.302887][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.303624][   T24] usb 2-1: Product: syz
[  210.316090][ T3473] device bridge_slave_1 entered promiscuous mode
[  210.336130][   T24] usb 2-1: Manufacturer: syz
[  210.351079][   T24] usb 2-1: SerialNumber: syz
[  210.362282][   T24] usb 2-1: config 0 descriptor??
[  210.383666][ T3488] 9pnet: Could not find request transport: fd0x0000000000000003
[  210.507662][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.514592][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.521693][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.528454][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.561483][  T332] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.570738][  T332] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.614589][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.622789][  T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.641850][   T24] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  210.650502][   T24] usb 2-1: USB disconnect, device number 46
[  210.656324][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.661516][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  210.666789][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.688935][  T331] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.695831][  T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.703184][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.712128][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.721853][  T331] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.728715][  T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.729564][ T1692] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  210.736042][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  210.751516][  T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  210.774014][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  210.783317][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  210.791517][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  210.800849][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  210.814960][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.822819][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.830788][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.838068][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.846554][ T3473] device veth0_vlan entered promiscuous mode
[  210.859208][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  210.867563][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  210.879338][ T3473] device veth1_macvtap entered promiscuous mode
[  210.890117][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  210.897679][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.906114][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.917607][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.925834][  T436] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  210.933625][  T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.960326][  T481] device bridge_slave_1 left promiscuous mode
[  210.966398][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.966649][ T3495] loop2: detected capacity change from 0 to 1024
[  210.980166][  T481] device bridge_slave_0 left promiscuous mode
[  210.984870][ T3495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  210.986170][  T481] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.000303][ T3495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  211.011335][  T481] device veth1_macvtap left promiscuous mode
[  211.011350][ T3495] EXT4-fs (loop2): unmounting filesystem.
[  211.017365][  T481] device veth0_vlan left promiscuous mode
[  211.149575][ T1692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.165170][ T1692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.175341][ T1692] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00
[  211.175482][ T3501] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  211.184641][ T1692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.206965][ T1692] usb 4-1: config 0 descriptor??
[  211.212657][ T3501] File: /root/syzkaller-testdir272071860/syzkaller.fVzC1b/1/memory.events PID: 3501 Comm: syz-executor.2
[  211.234293][ T3504] loop1: detected capacity change from 0 to 256
[  211.309584][  T436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.327177][  T436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.337368][  T436] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  211.362330][  T436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.376906][  T436] usb 5-1: config 0 descriptor??
[  211.399677][  T311] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  211.494853][ T3509] loop2: detected capacity change from 0 to 256
[  211.541750][ T3491] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  211.799637][  T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.810464][  T311] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  211.881498][ T1692] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  211.989694][  T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.999193][  T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.007204][  T311] usb 1-1: Product: syz
[  212.011292][ T2128] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  212.018738][  T311] usb 1-1: Manufacturer: syz
[  212.023215][  T311] usb 1-1: SerialNumber: syz
[  212.091916][ T1692] usb 4-1: USB disconnect, device number 45
[  212.141350][ T3511] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  212.260758][ T3500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  212.322646][ T3514] overlayfs: failed to resolve './file2': -2
[  212.339687][  T436] usbhid 5-1:0.0: can't add hid device: -71
[  212.345677][  T436] usbhid: probe of 5-1:0.0 failed with error -71
[  212.355835][  T436] usb 5-1: USB disconnect, device number 47
[  212.569653][ T2128] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  212.578953][ T2128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.586859][ T2128] usb 2-1: Product: syz
[  212.590848][ T2128] usb 2-1: Manufacturer: syz
[  212.595194][ T2128] usb 2-1: SerialNumber: syz
[  212.604154][ T2128] usb 2-1: config 0 descriptor??
[  212.622457][ T3516] loop3: detected capacity change from 0 to 512
[  212.641753][ T3516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  212.650793][ T3516] ext4 filesystem being mounted at /root/syzkaller-testdir1600891315/syzkaller.L68wYB/3/file0 supports timestamps until 2038 (0x7fffffff)
[  212.685115][ T3456] EXT4-fs (loop3): unmounting filesystem.
[  212.891907][ T2128] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  212.893178][ T3500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  212.899944][ T2128] usb 2-1: USB disconnect, device number 47
[  212.912835][  T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  213.160014][  T311] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  213.168260][  T311] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  213.214815][  T311] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  213.307328][  T436] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  213.342337][ T3529] loop2: detected capacity change from 0 to 256
[  213.379578][  T311] cdc_ncm 1-1:1.0: setting tx_max = 184
[  213.395383][  T311] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  213.432258][  T311] usb 1-1: USB disconnect, device number 39
[  213.452576][  T311] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  213.498905][ T3534] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  213.549561][  T436] usb 4-1: Using ep0 maxpacket: 16
[  213.669702][  T436] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  213.678542][  T436] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  213.726983][  T436] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  213.743858][ T3551] loop4: detected capacity change from 0 to 1024
[  213.765241][ T3551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  213.775154][  T436] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  213.791671][  T436] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  213.803170][  T436] usb 4-1: config 1 interface 0 has no altsetting 0
[  213.803865][ T3551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  213.820258][  T436] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  213.829286][  T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.838131][ T3551] EXT4-fs (loop4): unmounting filesystem.
[  213.890142][  T436] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  213.989860][  T331] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  214.194030][  T436] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  214.257856][ T3566] loop4: detected capacity change from 0 to 256
[  214.274217][  T436] usb 4-1: USB disconnect, device number 46
[  214.807801][  T331] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  214.830680][  T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.839857][  T331] usb 3-1: Product: syz
[  214.856085][ T3591] loop3: detected capacity change from 0 to 256
[  214.862271][  T331] usb 3-1: Manufacturer: syz
[  214.866733][  T331] usb 3-1: SerialNumber: syz
[  214.875630][  T331] usb 3-1: config 0 descriptor??
[  215.142748][  T331] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  215.152716][  T331] usb 3-1: USB disconnect, device number 47
[  215.166578][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  215.182431][  T436] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  215.429615][  T436] usb 5-1: Using ep0 maxpacket: 16
[  215.469688][  T311] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  215.869635][  T436] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  215.878878][  T436] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  215.888664][  T436] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  215.905690][  T436] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  215.916010][  T436] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  215.926115][  T436] usb 5-1: config 1 interface 0 has no altsetting 0
[  215.932893][  T436] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  215.942034][  T436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.990375][  T436] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  216.080032][  T311] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  216.089356][  T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.099294][  T311] usb 4-1: Product: syz
[  216.104959][  T311] usb 4-1: Manufacturer: syz
[  216.110122][  T311] usb 4-1: SerialNumber: syz
[  216.146051][  T311] usb 4-1: config 0 descriptor??
[  216.169601][ T2128] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  216.311329][  T436] ums-sddr09: probe of 5-1:1.0 failed with error -22
[  216.322038][  T436] usb 5-1: USB disconnect, device number 48
[  216.414074][  T311] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  216.421998][  T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  216.439850][  T311] usb 4-1: USB disconnect, device number 47
[  216.579963][ T2128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.605644][ T2128] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  216.789655][ T2128] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  216.798537][ T2128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.814854][ T2128] usb 1-1: Product: syz
[  216.818863][ T2128] usb 1-1: Manufacturer: syz
[  216.823433][ T2128] usb 1-1: SerialNumber: syz
[  216.926845][ T3621] futex_wake_op: syz-executor.4 tries to shift op by 32; fix this program
[  217.014262][ T3622] loop2: detected capacity change from 0 to 256
[  217.071053][ T3608] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  217.634779][ T3636] loop1: detected capacity change from 0 to 256
[  217.858041][ T3640] loop4: detected capacity change from 0 to 256
[  217.959527][  T436] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  217.989791][ T3608] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  218.089571][  T311] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  218.239679][ T2128] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  218.246197][ T2128] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  218.253420][ T2128] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  218.279639][ T1692] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  218.349669][  T311] usb 3-1: Using ep0 maxpacket: 16
[  218.470014][ T2128] cdc_ncm 1-1:1.0: setting tx_max = 184
[  218.531145][ T2128] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  218.548895][ T2128] usb 1-1: USB disconnect, device number 40
[  218.558725][ T2128] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  218.569035][  T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  218.587431][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  218.597413][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  218.614270][  T311] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  218.624052][  T311] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  218.633904][  T311] usb 3-1: config 1 interface 0 has no altsetting 0
[  218.640548][  T311] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  218.649425][  T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.662394][  T518] ==================================================================
[  218.670294][  T518] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130
[  218.677926][  T518] Read of size 8 at addr ffff88810be20cf0 by task kworker/1:6/518
[  218.685586][  T518] 
[  218.687735][  T518] CPU: 1 PID: 518 Comm: kworker/1:6 Not tainted 6.1.78-syzkaller-00140-g9fcc2459efcd #0
[  218.697287][  T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  218.707295][  T518] Workqueue: events linkwatch_event
[  218.712333][  T518] Call Trace:
[  218.715437][  T518]  <TASK>
[  218.718217][  T518]  dump_stack_lvl+0x151/0x1b7
[  218.722732][  T518]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  218.728026][  T518]  ? _printk+0xd1/0x111
[  218.729721][  T436] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  218.732011][  T518]  ? __virt_addr_valid+0x242/0x2f0
[  218.732057][  T518]  print_report+0x158/0x4e0
[  218.746981][  T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.750154][  T518]  ? __virt_addr_valid+0x242/0x2f0
[  218.750196][  T518]  ? kasan_complete_mode_report_info+0x90/0x1b0
[  218.750231][  T518]  ? __list_del_entry_valid+0xa6/0x130
[  218.750258][  T518]  kasan_report+0x13c/0x170
[  218.759721][  T436] usb 2-1: Product: syz
[  218.762993][  T518]  ? __list_del_entry_valid+0xa6/0x130
[  218.763032][  T518]  __asan_report_load8_noabort+0x14/0x20
[  218.772239][  T436] usb 2-1: Manufacturer: syz
[  218.774366][  T518]  __list_del_entry_valid+0xa6/0x130
[  218.774404][  T518]  process_one_work+0x4d7/0xcb0
[  218.779059][  T436] usb 2-1: SerialNumber: syz
[  218.782702][  T518]  worker_thread+0xa60/0x1260
[  218.782748][  T518]  kthread+0x26d/0x300
[  218.782771][  T518]  ? worker_clr_flags+0x1a0/0x1a0
[  218.782799][  T518]  ? kthread_blkcg+0xd0/0xd0
[  218.806380][  T436] usb 2-1: config 0 descriptor??
[  218.807797][  T518]  ret_from_fork+0x1f/0x30
[  218.807835][  T518]  </TASK>
[  218.842006][  T518] 
[  218.844159][  T518] Allocated by task 2128:
[  218.848453][  T518]  kasan_set_track+0x4b/0x70
[  218.852861][  T518]  kasan_save_alloc_info+0x1f/0x30
[  218.857996][  T518]  __kasan_kmalloc+0x9c/0xb0
[  218.862520][  T518]  __kmalloc_node+0xb4/0x1e0
[  218.866962][  T518]  kvmalloc_node+0x221/0x640
[  218.871374][  T518]  alloc_netdev_mqs+0x8c/0xf90
[  218.875972][  T518]  alloc_etherdev_mqs+0x36/0x40
[  218.880661][  T518]  usbnet_probe+0x207/0x27c0
[  218.885119][  T518]  usb_probe_interface+0x5b6/0xa90
[  218.890035][  T518]  really_probe+0x2b8/0x920
[  218.894371][  T518]  __driver_probe_device+0x1a0/0x310
[  218.899495][  T518]  driver_probe_device+0x54/0x3d0
[  218.904353][  T518]  __device_attach_driver+0x2e3/0x490
[  218.909559][  T518]  bus_for_each_drv+0x183/0x200
[  218.914247][  T518]  __device_attach+0x312/0x510
[  218.918846][  T518]  device_initial_probe+0x1a/0x20
[  218.923709][  T518]  bus_probe_device+0xbe/0x1e0
[  218.928400][  T518]  device_add+0xb60/0xf10
[  218.932558][  T518]  usb_set_configuration+0x190f/0x1e80
[  218.938126][  T518]  usb_generic_driver_probe+0x8b/0x150
[  218.943414][  T518]  usb_probe_device+0x144/0x260
[  218.948101][  T518]  really_probe+0x2b8/0x920
[  218.952440][  T518]  __driver_probe_device+0x1a0/0x310
[  218.957556][  T518]  driver_probe_device+0x54/0x3d0
[  218.962425][  T518]  __device_attach_driver+0x2e3/0x490
[  218.967622][  T518]  bus_for_each_drv+0x183/0x200
[  218.972437][  T518]  __device_attach+0x312/0x510
[  218.977036][  T518]  device_initial_probe+0x1a/0x20
[  218.981886][  T518]  bus_probe_device+0xbe/0x1e0
[  218.986485][  T518]  device_add+0xb60/0xf10
[  218.990652][  T518]  usb_new_device+0xf32/0x1810
[  218.995262][  T518]  hub_event+0x2db1/0x4830
[  218.999505][  T518]  process_one_work+0x73d/0xcb0
[  219.004203][  T518]  worker_thread+0xa60/0x1260
[  219.008704][  T518]  kthread+0x26d/0x300
[  219.012609][  T518]  ret_from_fork+0x1f/0x30
[  219.016863][  T518] 
[  219.019041][  T518] Freed by task 2128:
[  219.022859][  T518]  kasan_set_track+0x4b/0x70
[  219.027366][  T518]  kasan_save_free_info+0x2b/0x40
[  219.032228][  T518]  ____kasan_slab_free+0x131/0x180
[  219.037175][  T518]  __kasan_slab_free+0x11/0x20
[  219.041772][  T518]  __kmem_cache_free+0x218/0x3b0
[  219.046546][  T518]  kfree+0x7a/0xf0
[  219.050119][  T518]  kvfree+0x35/0x40
[  219.053754][  T518]  netdev_freemem+0x3f/0x60
[  219.058093][  T518]  netdev_release+0x7f/0xb0
[  219.062430][  T518]  device_release+0x95/0x1c0
[  219.066858][  T518]  kobject_put+0x178/0x260
[  219.071125][  T518]  put_device+0x1f/0x30
[  219.075215][  T518]  free_netdev+0x393/0x480
[  219.079466][  T518]  usbnet_disconnect+0x245/0x390
[  219.084238][  T518]  usb_unbind_interface+0x1fa/0x8c0
[  219.089274][  T518]  device_release_driver_internal+0x53e/0x870
[  219.095180][  T518]  device_release_driver+0x19/0x20
[  219.100133][  T518]  bus_remove_device+0x2fa/0x360
[  219.104904][  T518]  device_del+0x663/0xe90
[  219.109066][  T518]  usb_disable_device+0x380/0x720
[  219.113922][  T518]  usb_disconnect+0x32a/0x890
[  219.118436][  T518]  hub_event+0x1ed8/0x4830
[  219.122689][  T518]  process_one_work+0x73d/0xcb0
[  219.127379][  T518]  worker_thread+0xd71/0x1260
[  219.131886][  T518]  kthread+0x26d/0x300
[  219.135790][  T518]  ret_from_fork+0x1f/0x30
[  219.140046][  T518] 
[  219.142214][  T518] Last potentially related work creation:
[  219.147772][  T518]  kasan_save_stack+0x3b/0x60
[  219.152282][  T518]  __kasan_record_aux_stack+0xb4/0xc0
[  219.157587][  T518]  kasan_record_aux_stack_noalloc+0xb/0x10
[  219.163230][  T518]  insert_work+0x56/0x310
[  219.167501][  T518]  __queue_work+0x9b6/0xd70
[  219.171973][  T518]  queue_work_on+0x105/0x170
[  219.176395][  T518]  usbnet_link_change+0xeb/0x100
[  219.181157][  T518]  usbnet_probe+0x1dbe/0x27c0
[  219.185670][  T518]  usb_probe_interface+0x5b6/0xa90
[  219.190617][  T518]  really_probe+0x2b8/0x920
[  219.194960][  T518]  __driver_probe_device+0x1a0/0x310
[  219.200080][  T518]  driver_probe_device+0x54/0x3d0
[  219.204944][  T518]  __device_attach_driver+0x2e3/0x490
[  219.210285][  T518]  bus_for_each_drv+0x183/0x200
[  219.214971][  T518]  __device_attach+0x312/0x510
[  219.219571][  T518]  device_initial_probe+0x1a/0x20
[  219.224430][  T518]  bus_probe_device+0xbe/0x1e0
[  219.229028][  T518]  device_add+0xb60/0xf10
[  219.233192][  T518]  usb_set_configuration+0x190f/0x1e80
[  219.238623][  T518]  usb_generic_driver_probe+0x8b/0x150
[  219.243918][  T518]  usb_probe_device+0x144/0x260
[  219.248614][  T518]  really_probe+0x2b8/0x920
[  219.252941][  T518]  __driver_probe_device+0x1a0/0x310
[  219.258247][  T518]  driver_probe_device+0x54/0x3d0
[  219.263105][  T518]  __device_attach_driver+0x2e3/0x490
[  219.268301][  T518]  bus_for_each_drv+0x183/0x200
[  219.272987][  T518]  __device_attach+0x312/0x510
[  219.277586][  T518]  device_initial_probe+0x1a/0x20
[  219.282579][  T518]  bus_probe_device+0xbe/0x1e0
[  219.287270][  T518]  device_add+0xb60/0xf10
[  219.291437][  T518]  usb_new_device+0xf32/0x1810
[  219.296069][  T518]  hub_event+0x2db1/0x4830
[  219.300285][  T518]  process_one_work+0x73d/0xcb0
[  219.304971][  T518]  worker_thread+0xa60/0x1260
[  219.309479][  T518]  kthread+0x26d/0x300
[  219.313385][  T518]  ret_from_fork+0x1f/0x30
[  219.317648][  T518] 
[  219.319820][  T518] The buggy address belongs to the object at ffff88810be20000
[  219.319820][  T518]  which belongs to the cache kmalloc-4k of size 4096
[  219.333879][  T518] The buggy address is located 3312 bytes inside of
[  219.333879][  T518]  4096-byte region [ffff88810be20000, ffff88810be21000)
[  219.347269][  T518] 
[  219.349438][  T518] The buggy address belongs to the physical page:
[  219.355771][  T518] page:ffffea00042f8800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10be20
[  219.366212][  T518] head:ffffea00042f8800 order:3 compound_mapcount:0 compound_pincount:0
[  219.374375][  T518] flags: 0x4000000000010200(slab|head|zone=1)
[  219.380271][  T518] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380
[  219.388685][  T518] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  219.397122][  T518] page dumped because: kasan: bad access detected
[  219.403356][  T518] page_owner tracks the page as allocated
[  219.408902][  T518] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 314, tgid 314 (syz-executor.0), ts 22124971066, free_ts 22097630438
[  219.430256][  T518]  post_alloc_hook+0x213/0x220
[  219.434851][  T518]  prep_new_page+0x1b/0x110
[  219.439237][  T518]  get_page_from_freelist+0x27ea/0x2870
[  219.444574][  T518]  __alloc_pages+0x3a1/0x780
[  219.449115][  T518]  alloc_slab_page+0x6c/0xf0
[  219.453534][  T518]  new_slab+0x90/0x3e0
[  219.457441][  T518]  ___slab_alloc+0x6f9/0xb80
[  219.462010][  T518]  __slab_alloc+0x5d/0xa0
[  219.466169][  T518]  __kmem_cache_alloc_node+0x1af/0x250
[  219.471463][  T518]  kmalloc_trace+0x2a/0xa0
[  219.475715][  T518]  kobject_uevent_env+0x262/0x720
[  219.480579][  T518]  kobject_uevent+0x1f/0x30
[  219.484914][  T518]  net_rx_queue_update_kobjects+0x239/0x4a0
[  219.490656][  T518]  netdev_register_kobject+0x231/0x320
[  219.495948][  T518]  register_netdevice+0xe43/0x1490
[  219.500892][  T518]  __ip_tunnel_create+0x322/0x430
[  219.505753][  T518] page last free stack trace:
[  219.510269][  T518]  free_unref_page_prepare+0x83d/0x850
[  219.515553][  T518]  free_unref_page+0xb2/0x5c0
[  219.520063][  T518]  __free_pages+0x61/0xf0
[  219.524230][  T518]  __free_slab+0xce/0x1a0
[  219.528724][  T518]  __unfreeze_partials+0x165/0x1a0
[  219.533802][  T518]  put_cpu_partial+0xa9/0x100
[  219.538302][  T518]  __slab_free+0x1c8/0x280
[  219.542645][  T518]  ___cache_free+0xc6/0xd0
[  219.546895][  T518]  qlist_free_all+0xc5/0x140
[  219.551326][  T518]  kasan_quarantine_reduce+0x15a/0x180
[  219.556616][  T518]  __kasan_slab_alloc+0x24/0x80
[  219.561316][  T518]  slab_post_alloc_hook+0x53/0x2c0
[  219.566267][  T518]  __kmem_cache_alloc_node+0x191/0x250
[  219.571543][  T518]  kmalloc_trace+0x2a/0xa0
[  219.575796][  T518]  kset_create_and_add+0x5c/0x2b0
[  219.580677][  T518]  netdev_register_kobject+0x1a6/0x320
[  219.586253][  T518] 
[  219.588400][  T518] Memory state around the buggy address:
[  219.593876][  T518]  ffff88810be20b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.601858][  T518]  ffff88810be20c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.609829][  T518] >ffff88810be20c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.617726][  T518]                                                              ^
[  219.625290][  T518]  ffff88810be20d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.633384][  T518]  ffff88810be20d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
2024/06/05 10:11:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  219.641265][  T518] ==================================================================
[  219.649166][  T518] Disabling lock debugging due to kernel taint
[  219.690760][  T311] ums-sddr09 3-1:1.0: USB Mass Storage device detected