last executing test programs:

12.464757687s ago: executing program 0 (id=844):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x23c}}, 0x0)

12.019372103s ago: executing program 3 (id=849):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000c000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x8)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "8a38d73b"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x40, 0x2b, 0xc7, {0xc7, 0x1, "62e9e670cee4d88d6dee5b9610df20a5927b053db5b559995b3811e2587381eacb7c9d3220e866812feb1fae329fa7c4c1f4911f6e4572215e331a19b07fdea807836d038e23ac7063b69d929cb780d2fa9e83f1c355f334fa737d22b6b610c40131a36da3e29e0148034c135d50c719c938151bdcb4ade97063ae0b9963cb380d3c36ac8d4d0e4ae6d4c9df7b4e795b2f3bc00ac79ebca55c8909777fada7db8c3b903618146321f58a43a89f5760211cfc9f54beb603ca1c5df72683b070da14d1fd2f97"}}, &(0x7f0000000180)={0x0, 0x3, 0x3, @string={0x3, 0x3, 'o'}}, &(0x7f0000000240)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xc4, 0x5, 0xffd8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x6, 0x3be}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xf7, 0x2, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x3, 0x4}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xc3, 0x7, "9b07c660", "6ade68c0"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0x6, 0xc, 0xf9, 0xfff7, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x12, 0x29, "b12a539a82036eed55bd0c4f759b0e0809e47667896d3a6f263903365fbdbf52d3496ae78b4fb9823d"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x63}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x10, 0x1, [0xf000]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x565e}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "77d5"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xb6a}, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="a447ff12e000"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "d7c0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0xc}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x4}})

11.503626285s ago: executing program 0 (id=856):
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode', @ANYBLOB], 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_usb_control_io$printer(r0, 0x0, 0x0)
getpid()
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304"]}, 0x0)

9.343241281s ago: executing program 0 (id=864):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010700020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002fd0000090503020002"], 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000300), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000000c0)='timer_start\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200))
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write(r5, &(0x7f0000000500)="21be1c77b4c4a0b8578d20a0b670f86f596cb4e097978ee8deb44887456d6732be28041ace3785506adaaa72972c8a5a35ad60c39ac8acfead37407834ea0a11b6ca36468052cdc42ff9dc3876bbfa612019bd3db29a22a758a44d5a26c56d7b511c86471eafb3dd1b81838550c4da3829bd38b0fbcfbb729c033a2bfbd2f70f75aa552e5dea569b70c3025f9618f8affdfd31e26ed2b8d6a250b85d3b", 0x9d)
close_range(r5, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="6487a2bed3d6", @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)

9.036312466s ago: executing program 3 (id=866):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
socket$packet(0x11, 0x0, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000040)=ANY=[@ANYBLOB="180006000000000000000000000000294a8f147ff1afa5c6510163866bebf8bc"], 0x18}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

8.946801413s ago: executing program 3 (id=867):
syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@lazytime}, {@noinit_itable}, {@debug}]}, 0x1, 0x544, &(0x7f0000000740)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a000000000000000000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x206, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}])
fcntl$setstatus(r3, 0x4, 0x4400)
dup3(r3, r2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10)
syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000099ffffffb702000005000000b7030000abfc0020850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
io_setup(0x6, &(0x7f0000000240)=<r10=>0x0)
io_submit(r10, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}])

8.827486143s ago: executing program 3 (id=871):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @private}, 0x4}}, 0x26)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

8.074465284s ago: executing program 3 (id=872):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f00000040c0), 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x404002, 0x0)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x11, 0x0, 0x6c, &(0x7f00000007c0)="9d9163d644114561e690c36402ba45ed5d094da6591fdf449842232a71926445f5457da2703b7b601ef34ae8d6513dd55c25750be93ee44d0260122d4cd4c31342208ec5698ecfc4f492caa1c7789cc8fdee95eb2a0d4b69b7e7e3e10c8c7fd10a92161207296040c07e48588b5e8bda7d1ac5d901c1de2279378a8aede9e861d5e4b82b155d1b6624b531858c3856e2fa918e99bb6fb8f71e16dc2f9f1fddef2d90479550dc079d8eff72b6bae080d3ac2b0851d4ae168b086841314cb238fa31013e71e0007996a8708563a759cacaf103a0210b4e45990c0194fa70a6385c02f92785be978772347756554f44f1a13a105552e92cd9c7c47f42a96f09aa7b1bb04bb40069946b7921395f90dd92524e1fc2a04411b5e38a7591de4d8e6edc385ab2bbcd8c3930af7c188d39fb2abf306d4b4c44f6a0bd0d978ef288ccba5a457a8e9ebf1b3b732545ff31f52b031bc956f111111d473d3695b53361e3c1c8092291a16ddd657e555d85b20d159f5a987ade1e43c7dfe22dddfd272026aa8eed6ffef3bc50f5969e5d48c830a81d89555f9c63ed3a171b80295f5c7dda4e41f3d45e8259ae427968dce7c2136b2cea0332c87bebb62bb33d088342d5228b385e2bf47cf55fc833f30deaee1c46e06594c2cd688844ccc38bad291f98a653e119887a473d216105b2ef609e2a6e889526d1b2256f7ed21927cda5423a3ab2228307624c0775716cf94e2771390c85c4487f22de7fe007f82cce240b780f78c26ca02889778781b4461bfe3cb02993eea04af75ddda3352b5091e4bbc85b17532111549b2b3fff92903a04d22468a4ccc8fbaedef31925bdf316fc0054e1d3a1ad2d2d3522567f2ecef9fab8eda7d11fd257c8ebc04c22fdc17987f644725b95a0161d4e59be27fdd578c5d4795efb07b3627ae732a19df7f7b18b949df4bc60a9e42505f2bcfe0cae4bcb26d419a34b3089bf8990a417f9604bbdf44e923d377c1944cfa54cf6ec3285600ea160fd08522404f63ed482426a7e97d8d805a7b54a4cede3c6a4abf179bc33b557ef894e72a72236b6f619801c8f1f00be075db5266d670202771c60189a846022ba0d5f4d8c5837fa1d0179d43a8074247206b6c687f002def876b069b131cb6542da69c60dc233d8bc208eb6da156fe3e88696e7c8d0b6f5651569a2a7e733ffb9fd526376643ec80506c412d3e373dbcfe4bf7c14afaf4887859edf2d758ddde73422c06fcd7147d73a09a35fd848465c83097984129578fa7dd17ad906c1f26f318b03eb636245f97c3595646a4ea134b9418242013a036d14c23cf7e380bfa10f85b79bf536233afa35a1637e2d0a96e2ad6dc12a2c67f5236d57e6fdcb09eeedd6b15a378797842f24ca2fad81344ceeea775018c046336a21a0b346c881f68efd15e6b0db1dddbf2c1bd819b090a5307c"})
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
r7 = dup(r4)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$char_usb(r9, &(0x7f0000001840)=""/4090, 0xffa)
preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2e}, 0x14)
socket$netlink(0x10, 0x3, 0x0)

7.88105175s ago: executing program 3 (id=875):
r0 = socket(0x11, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = dup(r3)
write$P9_RGETLOCK(r4, 0x0, 0x23)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xdc6}]})
epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
r5 = dup3(r0, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000300)={0x200f})
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r7)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000ff000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10)
syz_usb_control_io(r6, 0x0, 0x0)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0)
pread64(r12, &(0x7f00000004c0)=""/105, 0x69, 0x3)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e080000000d278863"], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.855279113s ago: executing program 4 (id=882):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)={[{@numtail}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@rodir}]}, 0x0, 0x220, &(0x7f0000000b00)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)={[{@numtail}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@rodir}]}, 0x0, 0x220, &(0x7f0000000b00)="$eJzs3T9rU18YB/Cnv/75lYIkg1AUwSsuTqGpOJsiFcSAomTQyWJTlCYWDAR0aN18E/oWdHQVHMTVNyCCVMHFbh2ESL2xaWtiI5hcMZ/P0od7zvfe59yGXDLk5NaJ+uryWmNla2szpqfHYqIUpdgei3z8F+ORehQAwL9ku9WKL61U1r0AAMPh+Q8Ao6fP5//VIbYEAAyYz/8AMHqu37h5eaFcXryWJNMR9cfNSrOS/k3HF1bibtSiGnORi68RrV1pffFSeXEu2fExH5X6Rju/0ayM788XIxf57vliktqfn4yZdv7dTFRjPnJxtHt+vmt+Ks6c3nP9QuTi7e1Yi1osx062k18vJsmFK+UD+f+/zwMAAAAAAAAAAAAAAAAAAAAAgEEoJLu67t9TKPQaT/P97w90cH+eiTg+ke3aAQAAAAAAAAAAAAAAAAAA4G/RePBwdalWq97/VXHvzbNXh835qZiKbkNj7ev2f55BFUdOfXjSa874792fP1u8PJnlbemzeL1559jZxuy5zNqYjIg9R86nR3q+tD7nIgbUz/NM/xc/Vn3o5NmnpaUX6+8/9Xvmob8VAQAAAAAAAAAAAAAAAADAyOt86TfrTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO53f/x9ckfUaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWwAAAP//lbacqw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
write$binfmt_script(r0, &(0x7f0000000a80)={'#! ', './file0'}, 0xb)
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000680)=ANY=[], 0x3, 0x286, &(0x7f0000000140)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000680)=ANY=[], 0x3, 0x286, &(0x7f0000000140)="$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")
syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) (async)
r2 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)

6.469295025s ago: executing program 0 (id=884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001c000500000000000000000002000000", @ANYRES32=r2, @ANYBLOB="a10000000a00010000000000000000000a0002000180c2000000000046122cbe50fa164e089a13e161a123532252670deb5d9d92dad2de81285bfc"], 0x34}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0])
r8 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0x0, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r2, @ANYBLOB="ff1f94d971e16c191decd1dd013b2fb09e4ec4bab376281ea4287ba8f26942b827080c9fb24d1b6c026094a09b73ec95b2d296dc7412fbf8c5db87869a54a489916a0281ccdff87ff49ebcdca73ae1f7d9090fc36a0198c75e4d4330c3dc25e649e1c66daf87e3dcc6df40b1909fe1e095e330ca2b22ea86d683019a011633cdf5966227eece0002963e302d450edbea83641c07c1cc31ede8aa9ce526feb4ff903da943944bf0092a4f24881c78b6e9cc828f3758716818a2ec5db9cee69c8f98a6f2f08994f6b75a2fc9f7d1385e014bf8f7108f74e8744b13275ce6450d9a728316468403eeaf7d1e15"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r11 = getpid()
sched_setscheduler(r11, 0x6, &(0x7f0000000100)=0xd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
connect$unix(r12, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x2)

6.112597924s ago: executing program 0 (id=884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001c000500000000000000000002000000", @ANYRES32=r2, @ANYBLOB="a10000000a00010000000000000000000a0002000180c2000000000046122cbe50fa164e089a13e161a123532252670deb5d9d92dad2de81285bfc"], 0x34}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0])
r8 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0x0, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r2, @ANYBLOB="ff1f94d971e16c191decd1dd013b2fb09e4ec4bab376281ea4287ba8f26942b827080c9fb24d1b6c026094a09b73ec95b2d296dc7412fbf8c5db87869a54a489916a0281ccdff87ff49ebcdca73ae1f7d9090fc36a0198c75e4d4330c3dc25e649e1c66daf87e3dcc6df40b1909fe1e095e330ca2b22ea86d683019a011633cdf5966227eece0002963e302d450edbea83641c07c1cc31ede8aa9ce526feb4ff903da943944bf0092a4f24881c78b6e9cc828f3758716818a2ec5db9cee69c8f98a6f2f08994f6b75a2fc9f7d1385e014bf8f7108f74e8744b13275ce6450d9a728316468403eeaf7d1e15"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r11 = getpid()
sched_setscheduler(r11, 0x6, &(0x7f0000000100)=0xd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
connect$unix(r12, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x2)

5.315249358s ago: executing program 1 (id=886):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=0x0], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[])
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2})
rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380))
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

5.251974964s ago: executing program 0 (id=887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x4}, 0x48)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f01000000000000000000090582020002000000090503"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x58, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffbfd3e}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c002b0008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0800030010000000"], 0x3c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@multicast1, @broadcast, <r8=>0x0}, &(0x7f0000000600)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=[0x0, 0x0], 0x0, 0x50, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0xffffff19, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25130000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="faff0000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="4000018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6873720000000008000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="60000180080003000000000008000300010000000800030003000000140002000000000000000000000000000000000014000200697036677265300000000000000000001400020073797a5f74756e0000000000000000000800030000000000"], 0x110}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r11 = creat(&(0x7f00000001c0)='./file1\x00', 0x0)
ptrace(0x10, 0x1)
sendmsg$nl_route_sched(r11, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)=@newqdisc={0x64, 0x24, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0xfff4}, {0xf, 0x2}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040004)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, <r12=>0x0})
wait4(r12, 0x0, 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_btf_id_by_name$bpf_lsm(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x80000009, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="00874459d548c17a2ca27b41a0d93ddd413241a046e0405331b393b2c033b42ee3a5fc5cb2b504d008a237bc3801da549d7f21ad4d9742539f69ada6754d333134cb08a2a7218b41d97c826d9001d592de3f235cc9664162fb401a4c36949cb9419cc49aa24c0e360d00000000000019da8b2bfcb3a304a499dbe198e66703b206d0824b39536013cbc1ffcd42717502a6458959201a24798f56bf647c66adcc762ce54b192ff1bf0c508515ea1510c0f3fffffffffffffffca3dd7a0ea0844809d7a15fdd82ad2fba63bbed64febb00d9c3c00f22e88501b9275d8d8f9cd75dee89"], 0x0}, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x10)

4.470628597s ago: executing program 1 (id=890):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2f, &(0x7f0000001340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_pressure(r5, &(0x7f0000000d40)='memory.pressure\x00', 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), <r7=>0x0, 0x800000fb, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r5)
syz_clone3(&(0x7f0000000f80)={0x800, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)=<r11=>0x0, {}, &(0x7f0000000ec0)=""/20, 0x14, &(0x7f0000000f00)=""/19, &(0x7f0000000f40)=[r2, r2], 0x2, {r5}}, 0x58)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6000000020d62c75872c0e510f036b56f633857e166348e30df2", @ANYRES16=r10, @ANYBLOB="00022cbd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r11, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x802}, 0xc804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x14, 0x0, &(0x7f0000001100), &(0x7f0000000080)='GPL\x00', 0xfffffffa, 0x66, &(0x7f0000000600)=""/102, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xb, 0x7}, 0x10, r7, r1, 0x0, &(0x7f0000000c00)=[r0, r8, r0, r0, r9, r12], 0x0, 0x10, 0xffffffff}, 0x90)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)

3.835355129s ago: executing program 4 (id=892):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x18)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r6 = dup(r5) (async)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async, rerun: 32)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e, 0x12, r8, 0x0)
r9 = dup3(r7, r8, 0x0)
ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180))
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r12}, 0x10) (async)
setitimer(0x0, 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x29, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r13, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32)

3.611978687s ago: executing program 1 (id=893):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000c000061107a00000000001f110000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)

2.71125025s ago: executing program 1 (id=895):
socket$packet(0x11, 0x0, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x2, 0x37d0, 0x1a0b, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xa}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x7, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=0x0], 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000df1f00000000000700000018190000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.425221614s ago: executing program 2 (id=896):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x20, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='rlog_pages=0000000010000'])
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e200e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000030000000200000000", 0x58}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x2)

2.415560974s ago: executing program 4 (id=897):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18004000000000000000000000000000850000006d000000560000022d0c07ed9500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200)={0x0, 0xffffffff}, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
splice(r4, 0x0, r2, 0x0, 0x1, 0x0)
vmsplice(r2, 0x0, 0x0, 0x0) (async)
vmsplice(r2, 0x0, 0x0, 0x0)
r8 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x200002, 0x7f)
write$binfmt_script(r8, &(0x7f0000000380)={'#! ', '', [{0x20, '\x00\x00\x00\x1d\x92\x02\"C\x9a\x8c\x83\x03\xc7(\x00\x00'}]}, 0x15)
close(r8)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
execveat(r8, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async)
execveat(r8, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$tipc(r11, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$tipc(r11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)='p', &(0x7f0000000780), 0x6, r12}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)='p', &(0x7f0000000780), 0x6, r12}, 0x38)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
sendmsg$inet(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)
close(r10)
tee(r1, r5, 0xaf5, 0x4) (async)
tee(r1, r5, 0xaf5, 0x4)
write$binfmt_elf64(r3, &(0x7f0000003380)=ANY=[], 0x18c6)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @dev}, 0x10)

2.263664297s ago: executing program 4 (id=898):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', <r1=>0x0, 0x80, 0x7, 0x3, 0x4, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@rand_addr=0x64010100, 0xaa}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0xfffff801}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x4}]}]}}}}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_inode_readlink\x00')
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x30, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x8, 0x8, 0xe, 0x4}, @generic={0x4, 0x3, 0x4, 0x48, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xc, 0x5, 0xf}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x5, 0xd, 0x4}, {0x1, 0x1, 0x5, 0x6}, {0x5, 0x4, 0x9, 0x2}, {0x0, 0x4, 0xe, 0x2}, {0x4, 0x4, 0x9}, {0x4, 0x3, 0x0, 0xc}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0xeb4a}, 0x90)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xedac9d9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x0, 0x7c, 0xa9, 0xdad, 0x2280, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xa, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x9d}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x63d6ef986946d9d1, 0x4, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x8, 0xa, 0x8, 0xc, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xffff92b3, 0x0, 0x0, 0x41000, 0x21, '\x00', r1, 0x33, r2, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xd, 0xfff}, 0x10, r3, r4, 0x0, &(0x7f00000007c0)=[r5, r6, r7], 0x0, 0x10, 0x5}, 0x90)
futimesat(r2, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)={{}, {0x77359400}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r8, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000001380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x52, 0x8, 0x8, &(0x7f0000001440)}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000a00)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000a40)="d2f6abc4ba2d85925aec5db17a804f035728def374d8bcf423f2fe22dba8a772db6ac867225310daaaaafa31bf4fdad8b408bfd0c0f946a64b85382c0c30429870b2dd30c30e6116", 0x48}, {&(0x7f0000000ac0)="16ab61d93c565f20d3abf239cf0c0b31200d48c5c7a8e190a238dd7109617a2fb1cf53a2ca23822f7ff1fffa17aa649c44d08244d7d03a7717877b61a79321016557a0d04aca449ee416976e359f105db2de0266c3801d231d36239ed06086231220eaa27ebb8d84c4955859847ab3f74974e2cde32558c12b56cf692d8284a192df9559", 0x84}, {&(0x7f0000000b80)="b1edf2561c95f29dfd8889bfefa6c5ca824975a8a5c859145be6adc8bf6be9cf782411e264cc45964027465c6e9c5271e3aa31b7a6f254e007e1090f2f344d8bacdf8c41558b37bd483fe497fb3e3f0fa9919edfedfe9233a2ea3e5d4305dfa25f1192f7ad35f83b9034e431306962eee1f04f48c378f2064c5794db5541e6f974f793279721f035429c50f25dc14ee0db19fc04aec0430082f775489395e69c51eb2b66b747850a8a832c935fc9225ba1084e72cc3dbc774256536f10fae66e168e31a2a93744101a54a936f02e50b776c278becece", 0xd6}, {&(0x7f0000000c80)="596114482dfa7eecc5bc6c16a8c6acebcb49f978ff43e5225ee439aa030f42fc26f47448c6145a17832eb6de67647f58fb465e1c908e41492d6abd3895aef8655e272d9a51f8d15484ff12b1a0acd808741a18191502de81c1a0926493799530cfd2f8b5a176c9ecfec626f2", 0x6c}], 0x4, &(0x7f0000000d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}], 0x38}}, {{&(0x7f0000000d80)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000dc0)="91cba5f58ae899e4d8537b0c05b41d29e2d55c5b6477d1d9d129cb7d72f024273792bd2f2518b9f20d4ee7bc1c9ff6b4ea2dd350f2b8f8d1b342235da01cbb6f00ae04743e3b4061f2803c4ad2076c13d1e22c6102951817c2f5a44e86950881acc3", 0x62}, {&(0x7f0000000e40)="92b9219dc926c5b58273478d718b22b4b28edada443a79a227dbf10e8a2125a22d767722f55eba1eecc49c817264135ddf505568ac86cda8384b19008b719ffe8f5e718865e5af9b17a8e6d42c255fc4d8f3d8a60baa44618ef01a6e1bee8aa79ee31227cfeb295ebd96d5a386a2161afa16df4770dfa5b1a0dcdafa38f542cd305374fc0a841ddcec74c88599eec7d710142ef181f0ef619341ed8a", 0x9c}, {&(0x7f0000000f00)="aeac05c062dd129c94ceb059310aefb6d8eeb4de7a187ac16973516f9ac6808e130b6926b9d90bd48ca22471b2e37249717ba4f1b0558dcc5417de35c493bf7130dfb78b04552c61bbe4229b125fbf966beb71389d83b4207c0270ce01b3d37ba9c60d0a1e0f4c3829dcd6ef7b21bb320034b3a957e06576b81244c127698a87266372d2da5c3cafc235bcc18e60764d8b5a75fc81ad788a4d7eb5e6f7227bb2862a1c0dcdaa02da3db93332881719a342a7c7a281a3b98ee58c45f99d4bee9d1e93a606f112650c58a9bbeb995be0aaf7be46a9", 0xd4}, {&(0x7f0000001000)="3523d7bcd9bbc5e5864fc5fe26214396d319fa67f03511bb23f9ac98b8f45406cb7bf87c0309cec7588510a5c32757df171cfbe53abfde34dfe65f4cb2996b512db4aee4b238b2cc90493c822d74abe74dba1e15c83887c447b40583d219f71f9d4dd7510c72876566c8adcf285a16f732677cd70bcb2399c5ae972c38b6f2213ca52c46b466b7554a7e05d04a8b188fbad5992c52a45e0e38f37b", 0x9b}, {&(0x7f00000010c0)="e98cbf284d030e823850e14bba27c0f73e9c8116afc72eeffaba7d401f342614febaddcc7ea4bd7092d4b488cbbc687cbdf84a91", 0x34}, {&(0x7f0000001100)="c924847e479f42de0272f98970463adff527f0b635fbc8646ba8696f1159d3d36a296da34fac6d804b2b8c0733339ac975ba8083d86d35699e1dccba21e7733d4c1fd94365a01b66d2a8103e0b6513687ca6b0b9b3571d201ed903a1e224de512f2e2e8b3078e94bced29b40a50d155356ae68dc7dc97274818494b0ea4a848739dac9e68a601c", 0x87}, {&(0x7f00000011c0)="5099ee96f90f002ec99278087a7fdd9d14fc8ac2a0d6a6604e3c76dddcc0a94a0558c6a96a61bbabf74771b3578f15c98eb60b568577be556e2d3833e34b6306daf82d2609c61925ed22435ca259b940bd18614d", 0x54}], 0x7, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010101, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x13, 0xffffffffffffffff, [{0x7, 0xd, "7f48dc87db4f3df0f52929"}]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x2c, 0x9, 0x0, 0x2, [0x8000, 0x587, 0x1e, 0xb13, 0x6ea3, 0x7fffffff, 0x0, 0x17, 0x5, 0x0]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xd, "bb51c33e10c06ed3e36990"}, @rr={0x7, 0x2b, 0x72, [@multicast1, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @loopback, @multicast1, @local, @private=0xa010100]}, @rr={0x7, 0x27, 0x75, [@loopback, @rand_addr=0x64010102, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}, @cipso={0x86, 0x23, 0x1, [{0x9, 0x4, "a5ab"}, {0x2, 0x4, "bbfd"}, {0x6, 0x6, "0f6238d4"}, {0x2, 0xf, "5ef394321e8dc3704c7fed29df"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102}}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xe6, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x3}, {@loopback, 0x7fffffff}, {@loopback, 0x6}, {@broadcast, 0x7}, {@empty, 0x8000}]}, @end, @ssrr={0x89, 0xb, 0xf8, [@empty, @multicast1]}, @cipso={0x86, 0x25, 0x2, [{0x1, 0x4, "1870"}, {0x5, 0x9, "d568cd90890092"}, {0x0, 0x12, "50f3677d1bd8d2bc5ba7a2e6cdd91845"}]}, @rr={0x7, 0x1b, 0x3a, [@loopback, @local, @initdev={0xac, 0x1e, 0x10, 0x0}, @broadcast, @loopback, @local]}, @timestamp={0x44, 0x8, 0xce, 0x0, 0x1, [0xfffffffc]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xf5, 0x0, 0x9, [0x2, 0xfffffffb, 0xcf78, 0xa, 0xffff, 0x4, 0xd]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x1, [@dev={0xac, 0x14, 0x14, 0x1e}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x290}}, {{&(0x7f0000001880)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000018c0)="13a51f18c1ca12c6a3b6a7b4692719ae70300966cd1c4ab9042f479e88b228c560f90c1df89fc49133d4b17897b33d73aac1dbaef5690f18f0c3f5c96f933a2d6d4c61e2ecc850044ab315bb28ff0112abe6864aa533ca12ac21fdb97864e5a9ebbb95096e3b81b2f3e8e08a5cc9598e4bbe8192de1f078ec7fc1383237b615e9f08bd841aae5dd7cfd9dc405b2b6584a02e7a655818be9f0251abae2d3967083b0f8b83b1d06a661c030792298e8a50e20ac2bb6fa5875ac90fdb9d2e9082d772d1c30d49122fa9058a9c1f105268f130f0485202c70c1dcbb689085bb1826a51fa031333361efc558c2f41d91007f429814b857e", 0xf5}], 0x1, &(0x7f0000001a00)=[@ip_retopts={{0x78, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x28, 0x0, 0xf, [0x2, 0xe0b, 0x3, 0x7, 0x5, 0x12000000]}, @generic={0x82, 0x6, "12451ec6"}, @generic={0x94, 0x9, "a99cc888130067"}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x9, [{@multicast1, 0xd74}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1f4}, {@multicast1, 0xff}, {@multicast2, 0x5}, {@local, 0x4}]}, @lsrr={0x83, 0x7, 0xfe, [@loopback]}]}}}], 0x78}}, {{&(0x7f0000001a80)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)="5ee95a57d906d5ac9a3de5dac365ac6d79ffb2901ce2a96afcdc2f4d22b207ac94a6625c80fdcc4ed8304987c0596433d25113d875c7d5e598225113c031b0762ce0c3d8dc1feff47b174e8f3a8eee27d8354fda3c699d37a93c233b0cbb2e8ffa1813365297ca87b234250e1e06444982", 0x71}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="7ffb7ac308edbff1068b76a86a780750f058c48452324482a13b04dc33b3bb396e61bcb31a26178f309784a07bf69894712a1c0a6165038b90e37833a0cc99ea751ebc70fca6996fa4079e462d65b817e3f77d0ab3f15be57e67c15469bc4a44908ad9d15c4d870a28807ad6", 0x6c}], 0x3, &(0x7f0000002c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000002c40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000002c80)="c474d32dab008043db324c85e456a2555fd103c855d7b13ccff239d73d023a3f50e01aadcf15e413b9a3a7e18ee03523906b315bb4922d07118dada77ff4ae411f2e8f040557b6db537bfc5a726a68e372ad668f94050a6aa1e10cdeb45dcd0a0f59e4f4d9654aae8a57ad9d6ceeaffa99bcf3d679909faac04c6cacba60ace9f246354d3c6404d8a83a1352ee", 0x8d}, {&(0x7f0000002d40)="25fd26efd7ad17644ee91e66f39e497dcb27adf78b42fad37f47254cb56da5b9fc51f586fd68fd461978c63f17f43199152da6144f3bae847cadadd6fa7505e3eb4be17e9e76457a289917101c0b2522292a9fd047ce13c43fbf96b5e003b71c358ca5d947249b4353f4b4289ccefb47ff68b24612c0bedb33c5a025a324406913cb39a253de445499d83ff570ed94253782d844d7ddb97eed67c3fc3c6a98320efe93fbed24421c99eaec7b7635e2522729a0d97839addd574d2c0bb2", 0xbd}, {&(0x7f0000002e00)="45575969dfb943ab8e17e949f34ec3375fb4989bfd93c6558c8236f8fb6bc3e6d82ac28e5ee443848830e949bc67b4cb52b092eb71401eb20ba0", 0x3a}, {&(0x7f0000002e40)="52685c244e58fe191b93d4f30a9d9d10f971468896aa283f2ac896544b944a9115766d125a816b917c6703820e48ade0fbbf5373", 0x34}, {&(0x7f0000002e80)="bbd6b7d814c95ddc3a7c18956442bab90a755260708daa66437a7180", 0x1c}], 0x5, &(0x7f0000002f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102}}}], 0x38}}, {{&(0x7f0000002f80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002fc0)="43fcd90f71d311f8e6e29bc63ef70d53e5112fea74332955", 0x18}, {&(0x7f0000003000)="56230d41ccf572036a4c1a0615a4bdf3c5696afd4bc9b5d9c1c2f596ab5984218a9337d7722c9caf188505695ffc1eddda9dce9f95a42309627ded72aed09648c55a73fb36ab13c6f2d792a343f8fd272f12772af28a4437840b467e9f48303fb9473507e393878bb4535e55cff6e74fef65100878dde4f3ee263e2e4a946978602948a85e1f86c6f64e5ad0dc2bf15b30abb59b90f65910676b55ac5b8177258175183de6660bdb9a90f61d0f4dfb9b83df98bdfe37977ecde3104e870a50a541fa06bda98a2e115573e7264ebd8a5fc7bf", 0xd2}, {&(0x7f0000003100)="0861c5c5d6b12566bdd598a90e0241eda70f45f8751ef2812821e4bcaa8caf15fc2f47bb8e104a56720e7cb3d65a0332760f3ccfbbbc023d19843a680b0410f8e92afea944933fa258f8b2a8ed0638f993c81e8b08d5b554878d4ac1af365c17db4068e8bad9e4adb495f71cd00dbb33bbdba5e1a654cb2c2cbdfd0bc296de9368b91259eec4b7e55f92e814ab88ac0c44b26e", 0x93}, {&(0x7f00000031c0)="802c7d9f7d6cc4fad4df1ed8dfe51e3317987a84ff3939595fccb03d998b8923d1f5a021ebae5925b46c45f8b08984ac3f1460b3214479681c4f5b4809a252dd95ca0d8d17db94aa6aa5428b593498a911b1e341063921f0922f44c02d28f6233a161e5e9b398c8b1b34169c8893c004648e513f98a874a0247ee77cf6a1e19188dc3f", 0x83}, {&(0x7f0000003280)="86487f59830b52ffb1809345e298ae8f22ed062095a323805bfeb64c1295a28ed33767661b1d8b98b30fa50c55baf7adbafa53746cb97ab166ad0bfbc23bc79cf5aa133211e429ed41db785a8c9561dcfbbe4fa014b54fdabcccd1ca8f505c3514dd61a045eac61914d0a910a7ff1421190463d3056c245e74f5d95ca35358517ea8d476c21d7431cdf42ed9b09e2a10a39b6c017ccdf164eb879213b7585f9c07d8ef03efb9a01679fcd2a18be9e74621545c5f800beb881b27ef371188e334bba45aa79492cd14e9d17dddfa4d465f109b8dfe2cce3fad92ed78089833316b4a2968701437ae5366256dcf8096bec58235ea3bbadd", 0xf6}, {&(0x7f0000003380)="91e08f80ac6f445d0f301ad7f7e362f68eec09546454140ec32fe5645ea5e2f6cf8fe1407d1c8e28e0eb3eb714710690aa85c09cb8d79c9591e0f1942d72fe80da5d6296b582b7d5798e5bd5317e50638b14c8d15be5d69f3697ba4257dd9f0b335da17b70520c69aad44ccf5b70ddeb062344d90c033290170fd8af81ba82d5160dc394e167202529fc4cfe041569f1b397325455fb4657b7a2673ee0a97c068349b567fb60d94700b34841e5b6ac3ecf3547a9ae742faac30caadf959a476a4529ff5f89f5aadcffe8c5199264d94dd30d4fc9fa9c8ebc68b09e59026a2a9869fdfa7d78b90a5ae47babd70bb3", 0xee}, {&(0x7f0000003480)="86f38d976c6ac4a9f618adaec33877381a0ef06c4418eb36a12f336b6617832da64143a2f1e9ac7a5f8c63e099363f8c58fa966b3fe8be79687270be933e8b0780732246b73d7eba1030fee53c6829cac0a41f38f16328b0c5f78e1dc03303e569afa22f5df657faf875d7ccd25fe2eb68539b70516b1e1e901ac694568f1f9f793f3929ff74f970ca6af0f2dcccdca15336da7c9ad769f77e2bf53b1a6e927b22637e8c8f221b789e", 0xa9}, {&(0x7f0000003540)="b67c17fdaf5a6e1cf2f1f06beab44c67cdeb587fddd54bc8d75b9897a0c8fe91bf72780f9ac49705e4890d0c645294a6aeae171455d0fe74aa0eae40d3ee313ef0d8cf272fb0a3214b1b3791de72bccd34371fc743ad99a8895da6c6e6f878c8709ee573bd3d4bec347443b3ade5d14dc43d3549daa5f7d7", 0x78}], 0x8, &(0x7f0000003640)=[@ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xd6, [@empty, @remote, @private=0xa010102, @rand_addr=0x64010100, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x9a, 0x3, 0x1, [{@multicast1, 0x7f}, {@multicast2, 0x109a}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010100, 0x81}, {@private=0xa010101, 0x7}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf9d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xdb, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0x62, 0x1, 0x1, [{@multicast1, 0x9}, {@rand_addr=0x64010101, 0x100}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xae8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xe}, {@multicast1, 0x5c89}, {@empty, 0x480}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}], 0x160}}, {{&(0x7f00000037c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000004a00)=[{&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="5ee1346dc0c752093bdfc963da17ab5cb9836cdb737b537a89ee743712e341e3940bbe9e5d5979ef7939bc244a5235873588c541dd1959bccbb2308ac071531893ce7127a68545467f70f94926bf5cd49766d5a8ea86e1189a06831f14249aa5e95e1cd54163d65dbf5a79ed21", 0x6d}, {&(0x7f0000004880)="6e705adcfe64add8c483c64f540c7dafec75cc54aeddd2424be52daa623a3b6aa5606459b2ac4ddd5c54026b86bf7622d7d8d977f6c3295fa46a6a7794997658b1a911561ebdb85e49e3fdc4ad", 0x4d}, {&(0x7f0000004900)="3581f165ed0a3c3e303f1ada5eb97bad5e07da8d66439aa10360868fc339ce5779a49a67560414b8ed386ca3c916a7", 0x2f}, {&(0x7f0000004940)="ae9ceead1d2e3868b9627c61d26c75d460b460ab5b9e269480c4e5998a54b0b6b44ad373e0d42c40ccd5342524d885e94e37b7180ed0706c2445a7ef02fbeac3c3053c5528d9ac8e9cf13b51931d5cd91aa8af1247bc7d3180ca7aa22e131bf2d5f2f8e6f4be6b7497d0f7e6f532377394d73f2b6d5629d86e64593e45dca25fc5e62e37b6afba266d6b24ad2319db6274fb553c6036d88ec7b0e17fa460abd401902dbff97b234cc2f3fd04", 0xac}], 0x5, &(0x7f0000004a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x15d0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x1d, 0x0, 0x3}, @rr={0x7, 0x23, 0x36, [@multicast1, @empty, @private=0xa010102, @loopback, @rand_addr=0x64010102, @private=0xa010101, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0xb, [{@local, 0x7fc000}, {@local, 0xedc}, {@empty, 0xffff8000}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xa}, {@multicast1, 0x1000}]}, @end, @timestamp_addr={0x44, 0x14, 0x62, 0x1, 0xa, [{@local, 0xe0}, {@multicast1, 0x1}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x30}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x78, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x34}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}], 0x120}}], 0x7, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000004e80)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004dc0)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000004ec0))
bind$tipc(r0, 0x0, 0x0)
r10 = dup(r7)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000004f00)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet6_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000004f40)={0x3}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005240)={r0, 0xe0, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000004f80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000004fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000005040)=[{}], 0x8, 0x10, &(0x7f0000005080), &(0x7f00000050c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000005100)}}, 0x10)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000005340)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3fc}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004819}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000005380), r11)
geteuid()
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f00000053c0)={0x1, {{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0xffff, @loopback, 0x4}}}, 0x108)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000005500)={'geneve0\x00', @link_local})
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000005540)=<r12=>0x0)
sched_setscheduler(r12, 0x0, &(0x7f0000005580)=0x2)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005600), r11)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000056c0)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005680)={&(0x7f0000005640)={0x28, r13, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x80)
fsetxattr$security_selinux(r2, &(0x7f0000005700), &(0x7f0000005740)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x2)

2.263049767s ago: executing program 4 (id=899):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x32, 0x3}, 0x48)
unshare(0x2060400)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x4000)
syz_usb_disconnect(r3)
syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f00000003c0))
syz_usb_connect(0x1, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x414}}, {0x0, 0x0}]})
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x2, @local}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0xfffffffd}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r5 = open(0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
symlinkat(&(0x7f0000001200)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r6, 0x0)
r7 = open(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
readlinkat(r7, &(0x7f0000000200)='./file0\x00', &(0x7f00000013c0)=""/4090, 0xffa)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r8, 0x28, 0x2, &(0x7f00000054c0)=""/81, &(0x7f0000000080)=0x35)

1.890770597s ago: executing program 1 (id=900):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64], 0xd, 0x2a0, &(0x7f0000000840)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180300000000000000000000e9ff0000181100001dceb75f225eafea", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180300000000000000000000e9ff0000181100001dceb75f225eafea", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000007cea4805a6d199000000000005000000180001801400020073797a5f74756e0000000000000000000c000380044de470a0c0bd69ee30"], 0x38}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000007cea4805a6d199000000000005000000180001801400020073797a5f74756e0000000000000000000c000380044de470a0c0bd69ee30"], 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1)

967.072152ms ago: executing program 1 (id=901):
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic='\r', @generic="56c4c8a1e447dd07dc6d07375ef944"]}]}, 0x38}], 0x1}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10040}, 0x8020)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

780.834857ms ago: executing program 2 (id=902):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) (async)
r2 = dup(r1)
bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) (async)
getsockname$packet(r2, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000340)=@abs={0x5367851db232bb56, 0x0, 0x4e21}, 0x6e) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, 0x0) (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r3, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) (async)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) (async)
recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async)
close(r5) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000005e8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r8}, 0x10)
close(r9)

766.244498ms ago: executing program 2 (id=903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000800021800ff", @ANYRES32=r2, @ANYBLOB="1400060006eaffffff0000f00000000000000000080002"], 0x70}}, 0x0)

690.118285ms ago: executing program 2 (id=904):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="a2f9be385b291421971cf4ae2d95cf1bb2663c8c78361922ddaa6f30e513bb12b9ff4f3e479ed9a6a70bdbd7d37c6d38c7c03f1125ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000028e00000004fcff", 0x58}], 0x1)

689.221994ms ago: executing program 2 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000bf00850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000bf00850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
close(r3) (async)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8) (async)
ptrace(0x10, r8)

341.204293ms ago: executing program 2 (id=906):
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x61000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

0s ago: executing program 4 (id=907):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000040)={[{@errors_remount}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'errors=remount-ro'}}]}, 0xfe, 0x492, &(0x7f0000000f00)="$eJzs3M9rHFUcAPDvzG76U5tY64/WgtEqBn8kTdpqD3pQFDwoKHqox5ikpXbbSBPBlqKpSD1Kwbt4FPwLPHkS9SR48aB3KRQNQlsvrszuTJJdd2N+79b9fGDb93bezHvfzLydl/d2EkDPGsz+SSLuiIhfIqK/nm0sMFj/7+b8pYlb85cmkqhW3/g9qZW7MX9poiha7Lc7zwylEenHSV5Jo5kLF8+MVypT5/P8yOzZd0dmLlx86vTZ8VNTp6bOjR0/fvTI6DNPjx1r2O/YGuPM4rtx4IPpg/tffuvqqxMnrr79/VdZe9N8+9I4NspgFvgf1ZrmbY9udGUd9nd1Mc6k3OnWsFKliMhOV1+t//dHKRZPXn+89FFHGwdsquwze3v7zXNV4H8siU63AOiM4kaf/f6bv/q2aOjRFa4/X/8FKIv9Zv6qbykvzA1s5g9kMCJOzP31efaKpnmIaot5AwCA9fomG/882TD+y8cfady7pNyefG1oICLuioi9EXF3ROyLiHsiamXvi4j7V1LpjsVk89LQv9dh0mtrDm4FsvHfs/naVuP4rxj9xUApz91Zi78vOXm6MnU4/5kMRd/2LD/a6uDFIV786dN29S8d/2WvrP5iLJgf5Fq5aYJucnx2fKMGpdcvRxwot4o/WVgJSCJif0QcWN2h9xSJ049/ebBdof+OfxkbsM5U/SLisfr5n4um+AvJ8uuTIzuiMnV4pH5VlFrU8cOPV15rV/+64t8A2fnf1Xj9N5Xo/zNZul47s/o6rvz6Sdu11fIar/9tyZu1Nd1t+Xvvj8/Onh+N2Ja8Uss3vD+2uG+RL8pn8Q8dat3/9+b7ZPE/EBEHI34uut2D+bl7KCIejohDy8T/3QuPvNNuWzec/8mWn38L1/9A4/lffaJ05tuv29XfHH+S5xdLZOf/aC01lL9T+/zL7Wxz3PbNKW4+a72aAQAA4PaT1r4bn6TDC+k0HR6uf4d/X+xKK9Mzs0+cnH7v3GT9O/QD0ZcW85/9S+ZDR5O5/Ij1/Fg+V1xsP5LPG39W2pkkUZkanpiuTHY4duh1u9v0/8xvpca1msJzW95KYNN4Xgt6V3P/TzvUDmDruf9D79L/oXfp/9C7iv7/+pL3Pmwq0+qL7cDtz/0fepf+D71rof9f7mw7gK3n/g89qdVD8sXfOFjHI//rSpSXeXq/SxPF7Gi3tOdMEhGbW0Wk3RFp20Tkf8SiW9qz+sSt6hp3Ly/Tu1ea6MznEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEb7JwAA//+34eUt")

kernel console output (not intermixed with test programs):


[  137.523299][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.534519][ T2393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.561556][ T2669] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.001E/input/input24
[  137.574555][ T2669] sony 0003:054C:03D5.001E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  137.710722][   T24] audit: type=1400 audit(1720994628.079:635): avc:  denied  { read } for  pid=3083 comm="syz.2.643" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  137.734511][ T2395] usb 3-1: device descriptor read/8, error -71
[  137.740531][ T2392] usb 4-1: Using ep0 maxpacket: 8
[  137.742904][ T2676] ryos 0003:1E7D:31CE.001F: ignoring exceeding usage max
[  137.753356][ T2676] ryos 0003:1E7D:31CE.001F: item fetching failed at offset 7/11
[  137.761247][ T2676] ryos 0003:1E7D:31CE.001F: parse failed
[  137.763723][ T3063] udc-core: couldn't find an available UDC or it's busy
[  137.767071][ T2676] ryos: probe of 0003:1E7D:31CE.001F failed with error -22
[  137.775036][ T3063] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  137.790198][ T2669] usb 1-1: USB disconnect, device number 27
[  137.848749][ T2393] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  137.887850][ T2392] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  137.898745][ T2392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.909450][ T2392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.919064][ T2392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  137.932049][ T2392] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  137.983853][ T2392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.010285][ T2391] usb 2-1: USB disconnect, device number 34
[  138.069647][ T2392] usb 4-1: config 0 descriptor??
[  138.138378][   T49] device bridge_slave_1 left promiscuous mode
[  138.144332][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.151698][   T49] device bridge_slave_0 left promiscuous mode
[  138.157636][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.165310][   T49] device veth1_macvtap left promiscuous mode
[  138.171166][   T49] device veth0_vlan left promiscuous mode
[  138.217819][ T2393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.228815][ T2395] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  138.236976][ T2393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.246645][ T2393] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  138.255688][ T2393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.264099][ T2393] usb 5-1: config 0 descriptor??
[  138.317770][ T2395] usb 3-1: Using ep0 maxpacket: 32
[  138.437845][ T2395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  138.449002][ T2395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  138.459972][ T2395] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  138.468808][ T2395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.477301][ T2395] usb 3-1: config 0 descriptor??
[  138.497786][ T3100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  138.520131][ T2395] hub 3-1:0.0: USB hub found
[  138.522754][ T3105] netlink: 'syz.1.648': attribute type 2 has an invalid length.
[  138.532255][ T3105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.648'.
[  138.589333][ T2392] apple 0003:05AC:026C.0020: ignoring exceeding usage max
[  138.597012][ T2392] apple 0003:05AC:026C.0020: item fetching failed at offset 3/7
[  138.604639][ T2392] apple 0003:05AC:026C.0020: parse failed
[  138.610242][ T2392] apple: probe of 0003:05AC:026C.0020 failed with error -22
[  138.725190][   T24] audit: type=1326 audit(1720994629.089:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3110 comm="syz.0.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b250ebd9 code=0x0
[  138.748044][ T2395] hub 3-1:0.0: 2 ports detected
[  138.819001][ T2392] usb 4-1: USB disconnect, device number 47
[  138.827795][ T2393] usbhid 5-1:0.0: can't add hid device: -71
[  138.833621][ T2393] usbhid: probe of 5-1:0.0 failed with error -71
[  138.844279][ T2393] usb 5-1: USB disconnect, device number 38
[  138.954398][ T3100] macvlan0: tun_chr_ioctl cmd 1074025681
[  139.347833][ T2395] hub 3-1:0.0: set hub depth failed
[  139.392205][ T2395] usb 3-1: USB disconnect, device number 37
[  139.605208][   T24] audit: type=1400 audit(1720994629.969:637): avc:  denied  { ioctl } for  pid=3116 comm="syz.3.652" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  139.907741][ T2680] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  139.924542][ T3130] netlink: 'syz.2.656': attribute type 2 has an invalid length.
[  139.937824][ T2679] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  140.261287][ T3137] incfs: Can't find or create .index dir in ./file0
[  140.268315][ T3137] incfs: mount failed -14
[  140.300292][ T2678] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  140.534450][ T3148] xt_bpf: check failed: parse error
[  140.567818][ T2679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.578560][ T2680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.589178][ T2680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.598788][ T2679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.608353][ T2679] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  140.617117][ T2680] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  140.626184][ T2679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.634007][ T2680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.643000][ T2680] usb 1-1: config 0 descriptor??
[  140.647827][ T2678] usb 4-1: Using ep0 maxpacket: 16
[  140.652752][ T2679] usb 2-1: config 0 descriptor??
[  140.767960][ T2678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  140.776789][ T2678] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  140.813945][ T2678] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  140.823569][ T3152] udc-core: couldn't find an available UDC or it's busy
[  140.830384][ T2678] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  140.831243][ T3152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  140.839894][ T2678] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  140.856983][ T2678] usb 4-1: config 1 interface 0 has no altsetting 0
[  140.863407][ T2678] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  140.872254][ T2678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.881418][ T3153] udc-core: couldn't find an available UDC or it's busy
[  140.889057][ T3153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  140.918154][ T2678] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  141.027774][ T2679] usbhid 2-1:0.0: can't add hid device: -71
[  141.033579][ T2679] usbhid: probe of 2-1:0.0 failed with error -71
[  141.040810][ T2679] usb 2-1: USB disconnect, device number 35
[  141.077911][ T2395] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  141.419519][ T2395] usb 3-1: device descriptor read/64, error -71
[  141.534876][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.541790][ T3163] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.548945][ T3163] device bridge_slave_0 entered promiscuous mode
[  141.555561][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.562443][ T3163] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.569728][ T3163] device bridge_slave_1 entered promiscuous mode
[  141.602640][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.609487][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.616534][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.623372][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.642689][ T2665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.650294][ T2665] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.657369][ T2665] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.666243][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.674367][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.681435][ T2392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.690645][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.698688][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.705507][ T2679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.722677][ T2665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.730612][ T2665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.743204][ T3163] device veth0_vlan entered promiscuous mode
[  141.749642][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.758015][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.765711][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.773411][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.786540][ T3163] device veth1_macvtap entered promiscuous mode
[  141.793225][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.803685][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.817274][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.845781][   T24] audit: type=1326 audit(1720994632.209:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3167 comm="syz.1.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf39e2bd9 code=0x0
[  141.868303][ T2395] usb 3-1: device descriptor read/64, error -71
[  141.998256][   T49] device bridge_slave_1 left promiscuous mode
[  142.004209][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.011602][   T49] device bridge_slave_0 left promiscuous mode
[  142.017532][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.025197][   T49] device veth1_macvtap left promiscuous mode
[  142.048474][   T49] device veth0_vlan left promiscuous mode
[  142.187792][ T2395] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  142.467741][ T2395] usb 3-1: device descriptor read/64, error -71
[  142.668797][ T3182] syz.0.666[3182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.668851][ T3182] syz.0.666[3182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  142.681833][ T3184] netlink: 'syz.1.667': attribute type 2 has an invalid length.
[  142.727840][ T2680] usbhid 1-1:0.0: can't add hid device: -71
[  142.733728][ T2680] usbhid: probe of 1-1:0.0 failed with error -71
[  142.742376][ T2680] usb 1-1: USB disconnect, device number 28
[  142.788226][ T2678] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  142.798939][ T2678] usb 4-1: USB disconnect, device number 48
[  142.917751][ T2395] usb 3-1: device descriptor read/64, error -71
[  142.949796][   T24] audit: type=1400 audit(1720994633.319:639): avc:  denied  { relabelfrom } for  pid=3192 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  142.969331][   T24] audit: type=1400 audit(1720994633.319:640): avc:  denied  { relabelto } for  pid=3192 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  142.988773][ T2394] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  143.037876][ T2395] usb usb3-port1: attempt power cycle
[  143.147747][ T2678] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  143.167930][ T2680] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  143.217794][ T2390] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  143.287748][ T2394] usb 2-1: device descriptor read/64, error -71
[  143.437757][ T2680] usb 1-1: device descriptor read/64, error -71
[  143.467757][ T2395] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  143.507847][ T2678] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.517813][ T2678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.597891][ T2678] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  143.606796][ T2678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  143.614594][ T2678] usb 4-1: SerialNumber: syz
[  143.627813][ T2390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.638577][ T2390] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.651235][ T2390] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.660122][ T2390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.668425][ T2390] usb 5-1: config 0 descriptor??
[  143.677792][ T2395] usb 3-1: device descriptor read/8, error -71
[  143.737766][ T2394] usb 2-1: device descriptor read/64, error -71
[  143.827946][ T2680] usb 1-1: device descriptor read/64, error -71
[  143.842888][   T24] audit: type=1326 audit(1720994634.209:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.866678][   T24] audit: type=1326 audit(1720994634.209:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.878371][ T2678] usb 4-1: 0:2 : does not exist
[  143.897380][   T24] audit: type=1326 audit(1720994634.209:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.921417][   T24] audit: type=1326 audit(1720994634.209:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.944646][   T24] audit: type=1326 audit(1720994634.209:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.944966][ T2395] usb 3-1: device descriptor read/8, error -71
[  143.968357][   T24] audit: type=1326 audit(1720994634.209:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  143.996811][   T24] audit: type=1326 audit(1720994634.209:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  144.037803][ T2394] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  144.117752][ T2680] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  144.248473][ T2390] plantronics 0003:047F:FFFF.0021: report_id 0 is invalid
[  144.255426][ T2390] plantronics 0003:047F:FFFF.0021: item 0 1 1 8 parsing failed
[  144.263069][ T2390] plantronics 0003:047F:FFFF.0021: parse failed
[  144.269312][ T2390] plantronics: probe of 0003:047F:FFFF.0021 failed with error -22
[  144.300687][ T2678] usb 4-1: USB disconnect, device number 49
[  144.337778][ T2394] usb 2-1: device descriptor read/64, error -71
[  144.387738][ T2680] usb 1-1: device descriptor read/64, error -71
[  144.452585][ T2390] usb 5-1: USB disconnect, device number 39
[  144.458354][ T2395] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  144.697801][ T2395] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  144.706704][ T2395] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  144.717458][ T2395] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  144.726932][ T2395] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  144.737739][ T2394] usb 2-1: device descriptor read/64, error -71
[  144.777746][ T2680] usb 1-1: device descriptor read/64, error -71
[  144.858129][ T2394] usb usb2-port1: attempt power cycle
[  144.897868][ T2395] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.906841][ T2395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.907777][ T2680] usb usb1-port1: attempt power cycle
[  144.914646][ T2395] usb 3-1: Product: syz
[  144.923811][ T2395] usb 3-1: Manufacturer: syz
[  144.928277][ T2395] usb 3-1: SerialNumber: syz
[  145.087745][ T2390] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  145.247793][ T2395] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  145.255026][ T2395] usb 3-1: 2:1 : invalid channels 0
[  145.260085][ T2391] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  145.267744][ T2394] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  145.282108][ T2395] usb 3-1: USB disconnect, device number 41
[  145.327844][ T2390] usb 4-1: Using ep0 maxpacket: 16
[  145.337796][ T2680] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  145.437769][ T2394] usb 2-1: device descriptor read/8, error -71
[  145.447923][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.458627][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.468371][ T2390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  145.480917][ T2390] usb 4-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00
[  145.489910][ T2390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.498546][ T2390] usb 4-1: config 0 descriptor??
[  145.557810][ T2680] usb 1-1: device descriptor read/8, error -71
[  145.617792][ T2391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.628567][ T2391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.638034][ T2391] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  145.646864][ T2391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.655412][ T2391] usb 5-1: config 0 descriptor??
[  145.707805][ T2394] usb 2-1: device descriptor read/8, error -71
[  145.777741][ T2680] usb 1-1: device descriptor read/8, error -71
[  145.940434][ T3216] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24)
[  145.957788][ T2395] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  145.982839][ T2390] hid-generic 0003:1E7D:71CE.0022: collection stack underflow
[  146.017776][ T2390] hid-generic 0003:1E7D:71CE.0022: item 0 2 0 12 parsing failed
[  146.017786][ T3216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  146.018605][ T3216] F2FS-fs (loop0): invalid crc value
[  146.025537][ T2390] hid-generic: probe of 0003:1E7D:71CE.0022 failed with error -22
[  146.039144][ T3216] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.067212][ T3216] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  146.074230][ T3216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.328065][ T2395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.360544][ T2395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.370250][ T2391] usb 5-1: language id specifier not provided by device, defaulting to English
[  146.379063][ T2395] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  146.388071][ T2395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.396625][ T2395] usb 3-1: config 0 descriptor??
[  146.448023][ T3230] udc-core: couldn't find an available UDC or it's busy
[  146.454830][ T3230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  146.467767][ T2391] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71
[  146.483835][ T2391] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71
[  146.495909][ T2391] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71
[  146.508078][ T2391] uclogic 0003:256C:006D.0023: failed probing parameters: -71
[  146.520596][ T2391] uclogic: probe of 0003:256C:006D.0023 failed with error -71
[  146.538527][ T2391] usb 5-1: USB disconnect, device number 40
[  146.568077][ T2953] attempt to access beyond end of device
[  146.568077][ T2953] loop0: rw=2049, want=45104, limit=40427
[  146.832037][ T3242] xt_CT: No such helper "netbios-ns"
[  146.947397][ T3246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'.
[  146.967401][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  146.967412][   T24] audit: type=1400 audit(1720994637.329:649): avc:  denied  { audit_write } for  pid=3245 comm="syz.0.684" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  147.035002][   T24] audit: type=1107 audit(1720994637.359:650): pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  147.177809][ T2395] usb 3-1: string descriptor 0 read error: -22
[  147.363694][ T2680] usb 4-1: USB disconnect, device number 50
[  147.397777][ T2395] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71
[  147.406375][ T2395] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71
[  147.415196][ T2395] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71
[  147.423110][ T2395] uclogic 0003:256C:006D.0024: failed probing parameters: -71
[  147.430428][ T2395] uclogic: probe of 0003:256C:006D.0024 failed with error -71
[  147.439160][ T2395] usb 3-1: USB disconnect, device number 42
[  147.540504][   T24] audit: type=1400 audit(1720994637.909:651): avc:  denied  { setattr } for  pid=3259 comm="syz.1.688" name="NETLINK" dev="sockfs" ino=34888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  147.567984][   T24] audit: type=1400 audit(1720994637.939:652): avc:  denied  { watch } for  pid=3261 comm="syz.1.689" path="/7/file1" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  147.590738][   T24] audit: type=1400 audit(1720994637.939:653): avc:  denied  { execute_no_trans } for  pid=3261 comm="syz.1.689" path="/7/file1" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  147.717760][ T2391] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  147.931299][ T3278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.694'.
[  147.934908][   T24] audit: type=1400 audit(1720994638.299:654): avc:  denied  { nlmsg_read } for  pid=3277 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  148.045260][ T3287] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.052372][ T3287] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.064630][ T3287] device bridge_slave_0 entered promiscuous mode
[  148.088412][ T3287] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.105746][ T3287] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.112737][ T2391] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  148.123702][ T2391] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.131574][ T3287] device bridge_slave_1 entered promiscuous mode
[  148.133253][ T2391] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.270093][ T3287] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.276956][ T3287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.284056][ T3287] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.290838][ T3287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.308055][ T2391] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.325110][ T2391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.344062][ T2391] usb 5-1: Product: syz
[  148.353284][ T2391] usb 5-1: Manufacturer: syz
[  148.358755][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.364352][ T2391] usb 5-1: SerialNumber: syz
[  148.370535][ T2708] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.379069][ T2708] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.400059][   T49] device bridge_slave_1 left promiscuous mode
[  148.406099][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.414013][   T49] device bridge_slave_0 left promiscuous mode
[  148.420064][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.428872][   T49] device veth1_macvtap left promiscuous mode
[  148.434727][   T49] device veth0_vlan left promiscuous mode
[  148.532346][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.542574][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.549433][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.568668][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.583154][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.590023][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.607044][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.620311][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.630780][ T3252] udc-core: couldn't find an available UDC or it's busy
[  148.637526][ T3252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  148.654939][ T3287] device veth0_vlan entered promiscuous mode
[  148.677293][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.689655][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.699545][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.718066][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.731326][ T3287] device veth1_macvtap entered promiscuous mode
[  148.747967][ T3252] exfat: Unknown parameter '
'
[  148.754102][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.767777][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.786107][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.866341][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.873368][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.882647][ T3303] device bridge_slave_1 left promiscuous mode
[  148.894095][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.902117][ T3303] device bridge_slave_0 left promiscuous mode
[  148.908311][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.957752][ T2394] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  148.967924][ T2391] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  148.973637][ T3309] device pim6reg1 entered promiscuous mode
[  148.993214][ T2391] usb 5-1: USB disconnect, device number 41
[  149.022782][ T3311] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.700: invalid indirect mapped block 256 (level 2)
[  149.043190][ T3311] EXT4-fs (loop3): 2 truncates cleaned up
[  149.049136][ T3311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  149.059445][ T3311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.700: bg 0: block 5: invalid block bitmap
[  149.072074][ T3311] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3355443200 > max in inode 15
[  149.082571][ T3311] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3355443201 > max in inode 15
[  149.300726][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.307779][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.314816][ T3317] device bridge_slave_0 entered promiscuous mode
[  149.321072][ T2394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.321820][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.337726][ T2394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.339078][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.348448][ T2394] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  149.355661][ T3317] device bridge_slave_1 entered promiscuous mode
[  149.364213][ T2394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.381434][ T2394] usb 2-1: config 0 descriptor??
[  149.409553][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.416396][ T3317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.423515][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.430300][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.449294][   T24] audit: type=1400 audit(1720994639.819:655): avc:  denied  { create } for  pid=3322 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  149.456863][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.480018][ T2708] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.487598][ T2708] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.495177][   T24] audit: type=1326 audit(1720994639.859:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3324 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a6a6bd9 code=0x7ffc0000
[  149.521836][   T24] audit: type=1326 audit(1720994639.859:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3324 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a6a6bd9 code=0x7ffc0000
[  149.545235][   T24] audit: type=1326 audit(1720994639.859:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3324 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc05a6a6bd9 code=0x7ffc0000
[  149.569126][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.577088][ T2391] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.583943][ T2391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.591593][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.599517][ T2391] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.606334][ T2391] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.613546][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.621341][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.647839][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.656729][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.664722][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.672014][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.681282][ T3317] device veth0_vlan entered promiscuous mode
[  149.692958][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.703157][ T3325] EXT4-fs (loop4): Test dummy encryption mode enabled
[  149.703256][ T3317] device veth1_macvtap entered promiscuous mode
[  149.718463][ T3325] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  149.730453][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.739669][ T3325] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003]
[  149.753922][ T3325] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,init_itable=0x0000000000008000,nomblk_io_submit,noauto_da_alloc,,errors=continue
[  149.777443][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.780332][ T3325] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[  149.861770][ T3337] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.706: invalid block
[  149.872841][ T3337] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.706: couldn't read orphan inode 11 (err -117)
[  149.888520][ T2394] holtek 0003:1241:5015.0025: collection stack underflow
[  149.895541][ T2394] holtek 0003:1241:5015.0025: item 0 1 0 12 parsing failed
[  149.902676][ T2394] holtek 0003:1241:5015.0025: parse failed
[  149.908511][ T3337] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue
[  149.908765][ T2394] holtek: probe of 0003:1241:5015.0025 failed with error -22
[  149.931209][ T3341] SELinux: failed to load policy
[  149.954050][ T3341] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  150.005727][ T3341] SELinux: failed to load policy
[  150.091302][ T2678] usb 2-1: USB disconnect, device number 40
[  150.342175][   T49] device veth1_macvtap left promiscuous mode
[  150.348100][   T49] device veth0_vlan left promiscuous mode
[  150.650254][ T2953] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:424: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  150.675640][ T2953] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5869: Out of memory
[  150.689005][ T2953] EXT4-fs error (device loop0): __ext4_unlink:3393: inode #2: comm syz-executor: mark_inode_dirty error
[  150.865332][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.873347][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.881698][ T3362] device bridge_slave_0 entered promiscuous mode
[  150.901446][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.908796][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.917893][ T3362] device bridge_slave_1 entered promiscuous mode
[  150.965809][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.972693][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.979772][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.986539][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.024864][ T2678] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.032983][ T2678] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.040644][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.049141][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.068588][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.076660][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.083494][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.090967][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.098981][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.105814][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.114141][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.121957][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.138051][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.149366][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.160722][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.169637][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.193818][ T3362] device veth0_vlan entered promiscuous mode
[  151.218714][ T3374] 9pnet: Insufficient options for proto=fd
[  151.269594][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.281866][ T3362] device veth1_macvtap entered promiscuous mode
[  151.291312][ T3377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'.
[  151.313189][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.322539][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.588221][   T49] device bridge_slave_1 left promiscuous mode
[  151.594209][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.601929][   T49] device bridge_slave_0 left promiscuous mode
[  151.608081][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.609887][ T3381]  loop3: p2 < >
[  151.615615][ T3379] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.630085][   T49] device veth1_macvtap left promiscuous mode
[  151.636090][   T49] device veth0_vlan left promiscuous mode
[  151.690999][ T3390] device bridge_slave_1 left promiscuous mode
[  151.697360][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.808148][ T2395] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  152.039555][ T3392] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  152.050020][ T3392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  152.062435][ T3392] F2FS-fs (loop4): invalid crc value
[  152.148612][ T3392] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.238250][ T3392] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  152.247333][ T3392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.317839][ T2395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.337732][ T2395] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  152.346568][ T2395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.359996][ T2395] usb 2-1: config 0 descriptor??
[  152.487895][ T2679] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  152.537748][ T2392] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  152.640513][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  152.647839][ T2678] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  152.838208][ T2395] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor
[  152.847264][ T2395] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0026/input/input26
[  152.897849][ T2392] usb 5-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 228, changing to 11
[  152.897907][ T2679] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  152.909003][ T2392] usb 5-1: config 1 interface 0 altsetting 31 bulk endpoint 0x82 has invalid maxpacket 8
[  152.909024][ T2392] usb 5-1: config 1 interface 0 altsetting 31 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  152.917839][ T2678] usb 3-1: Using ep0 maxpacket: 32
[  152.932695][ T2392] usb 5-1: config 1 interface 0 has no altsetting 0
[  152.941028][ T2679] usb 4-1: config 1 has no interface number 0
[  152.949650][ T2395] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  152.952160][ T2679] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.979868][ T2679] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  152.988687][ T2679] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xD3, skipping
[  153.107828][ T2392] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.116713][ T2392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.124996][ T2392] usb 5-1: Product: syz
[  153.129001][ T2392] usb 5-1: Manufacturer: 簛뜔ᄉニ觴ல㗜那ဲ➒뙆餾鲙�矟뮻滯ᑹｅ娕鬟⠳ﻮ
[  153.139276][ T2392] usb 5-1: SerialNumber: syz
[  153.147853][ T2678] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.157792][ T3392] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  153.177937][ T2679] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.186918][ T2679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.195048][ T2679] usb 4-1: Product: syz
[  153.199142][ T2679] usb 4-1: Manufacturer: syz
[  153.203525][ T2679] usb 4-1: SerialNumber: syz
[  153.247793][ T2678] usb 3-1: config 0 has no interfaces?
[  153.417819][ T2678] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40
[  153.426675][ T2678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.434503][ T2678] usb 3-1: Product: syz
[  153.438213][ T2392] usb 5-1: bad CDC descriptors
[  153.438512][ T2678] usb 3-1: Manufacturer: syz
[  153.447483][ T2678] usb 3-1: SerialNumber: syz
[  153.452379][ T2678] usb 3-1: config 0 descriptor??
[  153.601413][ T2678] usb 2-1: USB disconnect, device number 41
[  153.617734][    C1] keytouch 0003:0926:3333.0026: usb_submit_urb(ctrl) failed: -19
[  153.639938][ T2392] usb 5-1: USB disconnect, device number 42
[  153.677993][ T2679] cdc_ncm 4-1:1.1: bind() failure
[  153.684261][ T2679] usb 4-1: USB disconnect, device number 51
[  153.723336][ T2708] usb 3-1: USB disconnect, device number 43
[  154.150792][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.157638][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.164800][ T3445] device bridge_slave_0 entered promiscuous mode
[  154.171442][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.178282][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.185342][ T3445] device bridge_slave_1 entered promiscuous mode
[  154.216672][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.223523][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.230607][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.237395][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.254706][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.266531][ T3071] attempt to access beyond end of device
[  154.266531][ T3071] loop4: rw=2049, want=45104, limit=40427
[  154.281811][ T2708] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.289808][ T2708] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.338116][ T3445] device veth0_vlan entered promiscuous mode
[  154.346995][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  154.358261][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  154.365980][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.373277][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.381733][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.389764][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.396588][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.423985][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.432092][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.438934][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.446308][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.459011][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.469323][ T3452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.730'.
[  154.485216][ T2392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.514135][ T3445] device veth1_macvtap entered promiscuous mode
[  154.608228][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.628875][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.688113][ T2394] Bluetooth: hci0: command 0x1003 tx timeout
[  154.699285][ T3425] Bluetooth: hci0: sending frame failed (-49)
[  154.843874][ T3463] FAULT_INJECTION: forcing a failure.
[  154.843874][ T3463] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  154.887608][ T3463] CPU: 0 PID: 3463 Comm: syz.1.728 Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  154.898619][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  154.908503][ T3463] Call Trace:
[  154.911653][ T3463]  dump_stack_lvl+0x1e2/0x24b
[  154.916147][ T3463]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  154.921438][ T3463]  ? 0xffffffffa0002000
[  154.925432][ T3463]  ? is_bpf_text_address+0x172/0x190
[  154.930558][ T3463]  ? stack_trace_save+0x1c0/0x1c0
[  154.935413][ T3463]  dump_stack+0x15/0x17
[  154.939411][ T3463]  should_fail+0x3c6/0x510
[  154.943660][ T3463]  should_fail_usercopy+0x1a/0x20
[  154.948522][ T3463]  _copy_from_user+0x20/0xd0
[  154.952948][ T3463]  __se_sys_bpf+0x232/0x11cb0
[  154.957458][ T3463]  ? stack_trace_save+0x113/0x1c0
[  154.962319][ T3463]  ? terminate_walk+0x407/0x4f0
[  154.967006][ T3463]  ? stack_trace_snprint+0xf0/0xf0
[  154.971955][ T3463]  ? kmem_cache_free+0xa9/0x1e0
[  154.976640][ T3463]  ? kmem_cache_free+0xa9/0x1e0
[  154.981324][ T3463]  ? kasan_set_track+0x5d/0x70
[  154.985925][ T3463]  ? kasan_set_track+0x4b/0x70
[  154.990530][ T3463]  ? kasan_set_free_info+0x23/0x40
[  154.995473][ T3463]  ? ____kasan_slab_free+0x121/0x160
[  155.000593][ T3463]  ? __kasan_slab_free+0x11/0x20
[  155.005365][ T3463]  ? __x64_sys_bpf+0x90/0x90
[  155.009797][ T3463]  ? do_sys_openat2+0x5e1/0x6f0
[  155.014478][ T3463]  ? __x64_sys_openat+0x243/0x290
[  155.019337][ T3463]  ? do_syscall_64+0x34/0x70
[  155.023771][ T3463]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  155.029680][ T3463]  ? _kstrtoull+0x3a0/0x4a0
[  155.034010][ T3463]  ? kstrtouint_from_user+0x20a/0x2a0
[  155.039217][ T3463]  ? kstrtol_from_user+0x310/0x310
[  155.044163][ T3463]  ? memset+0x35/0x40
[  155.047985][ T3463]  ? __fsnotify_parent+0x4b9/0x6c0
[  155.053016][ T3463]  ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0
[  155.059613][ T3463]  ? proc_fail_nth_write+0x20b/0x290
[  155.064733][ T3463]  ? proc_fail_nth_read+0x210/0x210
[  155.069772][ T3463]  ? security_file_permission+0x86/0xb0
[  155.075149][ T3463]  ? rw_verify_area+0x1c3/0x360
[  155.079831][ T3463]  ? slab_free_freelist_hook+0xc0/0x190
[  155.085218][ T3463]  ? preempt_count_add+0x92/0x1a0
[  155.090077][ T3463]  ? vfs_write+0x854/0xe70
[  155.094329][ T3463]  ? kernel_write+0x3d0/0x3d0
[  155.098844][ T3463]  ? __kasan_check_write+0x14/0x20
[  155.103793][ T3463]  ? mutex_lock+0xa5/0x110
[  155.108127][ T3463]  ? mutex_trylock+0xa0/0xa0
[  155.112556][ T3463]  ? __kasan_check_write+0x14/0x20
[  155.117499][ T3463]  ? fput_many+0x160/0x1b0
[  155.121768][ T3463]  ? debug_smp_processor_id+0x17/0x20
[  155.126964][ T3463]  __x64_sys_bpf+0x7b/0x90
[  155.131219][ T3463]  do_syscall_64+0x34/0x70
[  155.135472][ T3463]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  155.141195][ T3463] RIP: 0033:0x7f2dcea5dbd9
[  155.145450][ T3463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.164891][ T3463] RSP: 002b:00007f2dcdc9d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.173134][ T3463] RAX: ffffffffffffffda RBX: 00007f2dcebec110 RCX: 00007f2dcea5dbd9
[  155.180945][ T3463] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011
[  155.188764][ T3463] RBP: 00007f2dcdc9d0a0 R08: 0000000000000000 R09: 0000000000000000
[  155.196567][ T3463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.204381][ T3463] R13: 000000000000006e R14: 00007f2dcebec110 R15: 00007fff3ff08e08
[  155.249752][    T9] device bridge_slave_1 left promiscuous mode
[  155.259441][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.268571][    T9] device bridge_slave_0 left promiscuous mode
[  155.275527][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.285956][    T9] device veth1_macvtap left promiscuous mode
[  155.291814][    T9] device veth0_vlan left promiscuous mode
[  155.609770][ T3475] EXT4-fs (loop3): Test dummy encryption mode enabled
[  155.617206][ T3475] EXT4-fs (loop3): Ignoring removed orlov option
[  155.635137][ T3475] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue
[  155.680564][ T3492] syz.4.737[3492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.747778][   T24] kauditd_printk_skb: 89 callbacks suppressed
[  155.747789][   T24] audit: type=1400 audit(1720994646.119:748): avc:  denied  { remount } for  pid=3472 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  155.784240][ T3497] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[  155.897739][ T2679] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  156.088990][ T3499] EXT4-fs (loop2): Test dummy encryption mode enabled
[  156.095625][ T3499] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  156.104145][ T3499] EXT4-fs (loop2): 1 truncate cleaned up
[  156.109790][ T3499] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue
[  156.177792][ T2679] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  156.200989][ T3507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.739'.
[  156.263908][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[  156.274988][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  156.527820][ T2390] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  156.767871][ T2394] Bluetooth: hci0: command 0x1001 tx timeout
[  156.773752][ T3425] Bluetooth: hci0: sending frame failed (-49)
[  156.887837][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.898587][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.910078][ T2390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.922895][ T2390] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  156.932170][ T2390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.940574][ T2390] usb 4-1: config 0 descriptor??
[  157.024089][   T24] audit: type=1326 audit(1720994647.389:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.2.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x0
[  157.047885][ T2679] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  157.056760][ T2679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.182126][ T3515] udc-core: couldn't find an available UDC or it's busy
[  157.188961][ T3515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  157.277765][ T2390] usbhid 4-1:0.0: can't add hid device: -71
[  157.283565][ T2390] usbhid: probe of 4-1:0.0 failed with error -71
[  157.290616][ T2390] usb 4-1: USB disconnect, device number 52
[  157.740064][ T3535] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  157.746891][ T3535] bridge: RTM_NEWNEIGH with invalid ether address
[  157.753630][   T24] audit: type=1400 audit(1720994648.129:750): avc:  denied  { append } for  pid=3534 comm="syz.3.747" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  157.776740][   T24] audit: type=1326 audit(1720994648.129:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.3.747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72bf28cbd9 code=0x0
[  157.951785][ T3541] FAULT_INJECTION: forcing a failure.
[  157.951785][ T3541] name failslab, interval 1, probability 0, space 0, times 1
[  157.976461][ T3541] CPU: 0 PID: 3541 Comm: syz.2.748 Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  157.987465][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  157.997349][ T3541] Call Trace:
[  158.000489][ T3541]  dump_stack_lvl+0x1e2/0x24b
[  158.004994][ T3541]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  158.010286][ T3541]  ? avc_has_perm+0x275/0x400
[  158.014799][ T3541]  dump_stack+0x15/0x17
[  158.018794][ T3541]  should_fail+0x3c6/0x510
[  158.023045][ T3541]  ? bpf_tracing_prog_attach+0x335/0xbb0
[  158.028514][ T3541]  __should_failslab+0xa4/0xe0
[  158.033110][ T3541]  should_failslab+0x9/0x20
[  158.037449][ T3541]  kmem_cache_alloc_trace+0x3a/0x2e0
[  158.042571][ T3541]  bpf_tracing_prog_attach+0x335/0xbb0
[  158.047867][ T3541]  ? 0xffffffffa0002000
[  158.051858][ T3541]  ? bpf_map_do_batch+0x620/0x620
[  158.056803][ T3541]  ? __fget_files+0x31e/0x380
[  158.061320][ T3541]  ? __kasan_check_write+0x14/0x20
[  158.066267][ T3541]  ? fput_many+0x160/0x1b0
[  158.070521][ T3541]  __se_sys_bpf+0x5c0e/0x11cb0
[  158.075119][ T3541]  ? stack_trace_save+0x113/0x1c0
[  158.079981][ T3541]  ? terminate_walk+0x407/0x4f0
[  158.084666][ T3541]  ? stack_trace_snprint+0xf0/0xf0
[  158.089621][ T3541]  ? kmem_cache_free+0xa9/0x1e0
[  158.094299][ T3541]  ? kmem_cache_free+0xa9/0x1e0
[  158.099077][ T3541]  ? kasan_set_track+0x5d/0x70
[  158.103768][ T3541]  ? kasan_set_track+0x4b/0x70
[  158.108361][ T3541]  ? kasan_set_free_info+0x23/0x40
[  158.113309][ T3541]  ? ____kasan_slab_free+0x121/0x160
[  158.118424][ T3541]  ? __kasan_slab_free+0x11/0x20
[  158.123201][ T3541]  ? __x64_sys_bpf+0x90/0x90
[  158.127623][ T3541]  ? do_sys_openat2+0x5e1/0x6f0
[  158.132312][ T3541]  ? __x64_sys_openat+0x243/0x290
[  158.137172][ T3541]  ? do_syscall_64+0x34/0x70
[  158.141601][ T3541]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  158.147504][ T3541]  ? _kstrtoull+0x3a0/0x4a0
[  158.151851][ T3541]  ? kstrtouint_from_user+0x20a/0x2a0
[  158.157047][ T3541]  ? kstrtol_from_user+0x310/0x310
[  158.161995][ T3541]  ? memset+0x35/0x40
[  158.165813][ T3541]  ? __fsnotify_parent+0x4b9/0x6c0
[  158.170764][ T3541]  ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0
[  158.177355][ T3541]  ? proc_fail_nth_write+0x20b/0x290
[  158.182479][ T3541]  ? proc_fail_nth_read+0x210/0x210
[  158.187513][ T3541]  ? security_file_permission+0x86/0xb0
[  158.192891][ T3541]  ? rw_verify_area+0x1c3/0x360
[  158.197578][ T3541]  ? slab_free_freelist_hook+0xc0/0x190
[  158.202961][ T3541]  ? preempt_count_add+0x92/0x1a0
[  158.207820][ T3541]  ? vfs_write+0x854/0xe70
[  158.212080][ T3541]  ? __kasan_check_write+0x14/0x20
[  158.217018][ T3541]  ? fput_many+0x160/0x1b0
[  158.221281][ T3541]  ? debug_smp_processor_id+0x17/0x20
[  158.226486][ T3541]  __x64_sys_bpf+0x7b/0x90
[  158.230736][ T3541]  do_syscall_64+0x34/0x70
[  158.234987][ T3541]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  158.240715][ T3541] RIP: 0033:0x7f556ff34bd9
[  158.244969][ T3541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.264411][ T3541] RSP: 002b:00007f556f174048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  158.272653][ T3541] RAX: ffffffffffffffda RBX: 00007f55700c3110 RCX: 00007f556ff34bd9
[  158.280460][ T3541] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011
[  158.288273][ T3541] RBP: 00007f556f1740a0 R08: 0000000000000000 R09: 0000000000000000
[  158.296085][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.303894][ T3541] R13: 000000000000006e R14: 00007f55700c3110 R15: 00007ffc969b3e18
[  158.711201][ T3547] EXT4-fs (loop3): dax option not supported
[  158.787813][ T2679] uvcvideo: Found UVC 0.00 device <unnamed> (046d:08c1)
[  158.794867][ T2679] uvcvideo: No valid video chain found.
[  158.803306][ T2679] usb 2-1: USB disconnect, device number 42
[  158.899310][   T24] audit: type=1400 audit(1720994649.259:752): avc:  denied  { mount } for  pid=3546 comm="syz.3.750" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  159.060794][ T2678] Bluetooth: hci0: command 0x1009 tx timeout
[  159.167779][ T2390] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  159.417764][ T2390] usb 4-1: Using ep0 maxpacket: 32
[  159.518541][ T3560] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  159.526232][ T3560] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  159.537865][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.549309][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.559138][ T2390] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  159.568119][ T2390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.583710][ T3560] F2FS-fs (loop4): invalid crc value
[  159.605396][ T2390] usb 4-1: config 0 descriptor??
[  159.612623][ T3560] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.649634][ T3560] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  159.656482][ T3560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  159.672645][ T2390] hub 4-1:0.0: USB hub found
[  159.977416][ T3575] overlayfs: failed to resolve './file0': -2
[  160.057771][ T2390] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  160.097762][ T2678] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  160.142085][  T336] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  160.150896][  T336] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  160.157822][ T2390] usbhid 4-1:0.0: can't add hid device: -71
[  160.165697][ T2390] usbhid: probe of 4-1:0.0 failed with error -71
[  160.206139][ T2390] usb 4-1: USB disconnect, device number 53
[  160.604861][   T24] audit: type=1400 audit(1720994650.969:753): avc:  denied  { unmount } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  160.687834][ T2678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.698663][ T2678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.708224][ T2678] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  160.717155][ T2678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.725685][ T2678] usb 3-1: config 0 descriptor??
[  160.997747][ T2390] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  161.187991][ T2678] hid (null): report_id 0 is invalid
[  161.194061][ T2678] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[  161.201046][ T2678] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0
[  161.207877][ T2678] lg-g15 0003:046D:C222.0027: report_id 0 is invalid
[  161.214308][ T2678] lg-g15 0003:046D:C222.0027: item 0 1 1 8 parsing failed
[  161.221481][ T2678] lg-g15: probe of 0003:046D:C222.0027 failed with error -22
[  161.310295][ T3602] FAULT_INJECTION: forcing a failure.
[  161.310295][ T3602] name failslab, interval 1, probability 0, space 0, times 0
[  161.323429][ T3602] CPU: 1 PID: 3602 Comm: syz.4.761 Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  161.334421][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  161.344310][ T3602] Call Trace:
[  161.347445][ T3602]  dump_stack_lvl+0x1e2/0x24b
[  161.351960][ T3602]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  161.357246][ T3602]  ? bpf_trace_run3+0x126/0x2c0
[  161.361934][ T3602]  ? bpf_trace_run2+0x280/0x280
[  161.366618][ T3602]  dump_stack+0x15/0x17
[  161.370611][ T3602]  should_fail+0x3c6/0x510
[  161.374864][ T3602]  ? __d_alloc+0x2d/0x6c0
[  161.377750][ T2678] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  161.379046][ T3602]  __should_failslab+0xa4/0xe0
[  161.391007][ T3602]  should_failslab+0x9/0x20
[  161.395350][ T3602]  kmem_cache_alloc+0x3d/0x2e0
[  161.399942][ T3602]  ? __schedule+0xbee/0x1330
[  161.404369][ T3602]  __d_alloc+0x2d/0x6c0
[  161.408366][ T3602]  d_alloc_pseudo+0x1d/0x70
[  161.412701][ T3602]  alloc_file_pseudo+0x131/0x2f0
[  161.417472][ T3602]  ? preempt_schedule+0xd9/0xe0
[  161.422159][ T3602]  ? __kasan_check_read+0x11/0x20
[  161.427020][ T3602]  ? alloc_empty_file_noaccount+0x80/0x80
[  161.432574][ T3602]  ? preempt_schedule+0xd9/0xe0
[  161.437261][ T3602]  ? schedule_preempt_disabled+0x20/0x20
[  161.442729][ T3602]  ? __kasan_check_write+0x14/0x20
[  161.447680][ T3602]  ? _raw_spin_lock_bh+0xa4/0x1b0
[  161.452539][ T3602]  anon_inode_getfile+0xa7/0x180
[  161.457311][ T3602]  bpf_link_prime+0xed/0x250
[  161.461739][ T3602]  bpf_tracing_prog_attach+0x715/0xbb0
[  161.467031][ T3602]  ? bpf_map_do_batch+0x620/0x620
[  161.471892][ T3602]  ? sysvec_reschedule_ipi+0x83/0x160
[  161.477100][ T3602]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  161.482585][ T3602]  ? fput_many+0x4b/0x1b0
[  161.486738][ T3602]  ? __sanitizer_cov_trace_switch+0xf/0xe0
[  161.492384][ T3602]  __se_sys_bpf+0x5c0e/0x11cb0
[  161.496977][ T3602]  ? __switch_to_asm+0x34/0x60
[  161.501574][ T3602]  ? __schedule+0xbee/0x1330
[  161.506002][ T3602]  ? release_firmware_map_entry+0x192/0x192
[  161.511730][ T3602]  ? release_firmware_map_entry+0x192/0x192
[  161.517459][ T3602]  ? __x64_sys_bpf+0x90/0x90
[  161.521886][ T3602]  ? __kasan_check_read+0x11/0x20
[  161.526742][ T3602]  ? preempt_schedule_irq+0xe7/0x140
[  161.531863][ T3602]  ? preempt_schedule_notrace+0x140/0x140
[  161.537420][ T3602]  ? _kstrtoull+0x3a0/0x4a0
[  161.541760][ T3602]  ? irqentry_exit+0x4f/0x60
[  161.546185][ T3602]  ? sysvec_reschedule_ipi+0x83/0x160
[  161.551392][ T3602]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[  161.556859][ T3602]  ? memset+0x35/0x40
[  161.560677][ T3602]  ? __bpf_ringbuf_reserve+0x366/0x3b0
[  161.565975][ T3602]  ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0
[  161.572568][ T3602]  ? bpf_ringbuf_notify+0x30/0x30
[  161.577428][ T3602]  ? __kasan_check_write+0x14/0x20
[  161.582376][ T3602]  ? __switch_to+0x5f6/0x1240
[  161.586895][ T3602]  ? bpf_trace_run3+0x126/0x2c0
[  161.591575][ T3602]  ? compat_start_thread+0x80/0x80
[  161.596527][ T3602]  ? switch_mm_irqs_off+0x2f9/0x9a0
[  161.601557][ T3602]  ? __switch_to_asm+0x34/0x60
[  161.606163][ T3602]  ? __schedule+0xbee/0x1330
[  161.610587][ T3602]  ? fpu__clear_all+0x20/0x20
[  161.615106][ T3602]  ? __kasan_check_read+0x11/0x20
[  161.619958][ T3602]  __x64_sys_bpf+0x7b/0x90
[  161.624208][ T3602]  do_syscall_64+0x34/0x70
[  161.628463][ T3602]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  161.634187][ T3602] RIP: 0033:0x7fc05a6a6bd9
[  161.638444][ T3602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.657882][ T3602] RSP: 002b:00007fc0598e6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.666128][ T3602] RAX: ffffffffffffffda RBX: 00007fc05a835110 RCX: 00007fc05a6a6bd9
[  161.673950][ T3602] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011
[  161.681854][ T3602] RBP: 00007fc0598e60a0 R08: 0000000000000000 R09: 0000000000000000
[  161.689655][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.697474][ T3602] R13: 000000000000006e R14: 00007fc05a835110 R15: 00007ffea65dc678
[  161.707740][ T2679] usb 3-1: USB disconnect, device number 44
[  161.877773][ T2390] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[  161.886610][ T2390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.894914][ T2390] usb 4-1: Product: syz
[  161.898908][ T2390] usb 4-1: Manufacturer: syz
[  161.903296][ T2390] usb 4-1: SerialNumber: syz
[  161.908675][ T2390] usb 4-1: config 0 descriptor??
[  161.948356][ T2390] uvcvideo: Found UVC 0.00 device syz (468c:90ea)
[  161.954597][ T2390] uvcvideo: No valid video chain found.
[  162.012245][ T3605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.762'.
[  162.057857][ T2678] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  162.067114][ T2678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.067599][ T3607] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  162.075765][ T3607] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  162.087922][ T2678] usb 2-1: config 0 descriptor??
[  162.095055][ T3607] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  162.106184][ T3607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  162.114155][ T3607] System zones: 0-2, 18-18, 34-34
[  162.119612][ T3607] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  162.134291][ T3607] EXT4-fs (loop4): 1 truncate cleaned up
[  162.134351][ T2678] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  162.140078][ T3607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  162.149551][ T2678] usb 2-1: Detected FT-X
[  162.157080][ T2394] usb 4-1: USB disconnect, device number 54
[  162.258746][ T3624] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000" or missing value
[  162.397876][ T3627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'.
[  162.529773][ T3624] exfat: Bad value for 'allow_utime'
[  162.547768][ T2678] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  162.567804][ T2678] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  162.587827][ T2678] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  162.594763][ T2678] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  162.603698][ T2678] usb 2-1: USB disconnect, device number 43
[  162.609910][ T2678] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  162.619104][ T2678] ftdi_sio 2-1:0.0: device disconnected
[  162.731819][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.738792][ T3636] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.746173][ T3636] device bridge_slave_0 entered promiscuous mode
[  162.753684][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.760920][ T3636] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.762939][ T3635] EXT4-fs (loop3): dax option not supported
[  162.768452][ T3636] device bridge_slave_1 entered promiscuous mode
[  162.818402][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.825250][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.832338][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.839145][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.857071][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.874823][ T2390] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.882517][ T2390] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.892143][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.900964][ T2390] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.907816][ T2390] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.928703][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.936602][ T2394] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.943363][ T2394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.951285][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.962246][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.974433][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  162.985175][ T3636] device veth0_vlan entered promiscuous mode
[  162.991746][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  162.999457][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.006562][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.021024][ T3636] device veth1_macvtap entered promiscuous mode
[  163.030036][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.046224][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.054665][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.095272][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.102233][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.109525][ T3649] device bridge_slave_0 entered promiscuous mode
[  163.118299][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.125176][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.132374][ T3649] device bridge_slave_1 entered promiscuous mode
[  163.164631][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.171578][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.178657][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.185428][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.197800][ T2679] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  163.205507][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.212625][ T2391] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.220268][ T2391] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.238560][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.246441][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.253216][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.260509][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.268449][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.275268][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.277717][ T2390] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  163.282442][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.297447][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.309549][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.320170][ T3649] device veth0_vlan entered promiscuous mode
[  163.326613][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.334966][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.342379][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.352818][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.361283][  T336] device bridge_slave_0 left promiscuous mode
[  163.367211][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.374265][ T2680] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  163.382680][  T336] device veth1_macvtap left promiscuous mode
[  163.388688][  T336] device veth0_vlan left promiscuous mode
[  163.457825][ T2679] usb 4-1: Using ep0 maxpacket: 32
[  163.466025][ T3649] device veth1_macvtap entered promiscuous mode
[  163.475214][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.486426][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.520546][   T24] audit: type=1326 audit(1720994653.891:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9fbe0bd9 code=0x0
[  163.588404][ T2679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.602313][ T2679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.612767][ T2679] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  163.634352][ T2679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.642863][ T2679] usb 4-1: config 0 descriptor??
[  163.678733][ T2679] hub 4-1:0.0: USB hub found
[  163.698079][ T2390] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.708604][ T2390] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.885228][ T2390] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  163.894349][ T2390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.902192][ T2390] usb 5-1: SerialNumber: syz
[  163.908006][ T2680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.918380][ T2680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.937773][ T2679] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  164.008145][ T2680] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  164.017077][ T2680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  164.025020][ T2680] usb 1-1: SerialNumber: syz
[  164.048411][ T2679] usbhid 4-1:0.0: can't add hid device: -71
[  164.054244][ T2679] usbhid: probe of 4-1:0.0 failed with error -71
[  164.097940][ T2679] usb 4-1: USB disconnect, device number 55
[  164.188294][ T2390] usb 5-1: 0:2 : does not exist
[  164.270536][ T2390] usb 5-1: USB disconnect, device number 43
[  164.289124][ T2680] usb 1-1: 0:2 : does not exist
[  164.328083][  T336] device bridge_slave_1 left promiscuous mode
[  164.333989][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.343701][  T336] device bridge_slave_0 left promiscuous mode
[  164.349765][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.359913][  T336] device veth1_macvtap left promiscuous mode
[  164.365728][  T336] device veth0_vlan left promiscuous mode
[  164.403059][ T3667] netlink: 196 bytes leftover after parsing attributes in process `syz.3.774'.
[  164.613597][ T3670] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue
[  164.624964][ T3670] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038 (0x7fffffff)
[  164.742389][ T2680] usb 1-1: USB disconnect, device number 33
[  164.757173][ T3678] overlayfs: missing 'lowerdir'
[  164.877767][ T2678] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  165.137989][ T2708] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  165.237801][ T2678] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.251316][ T2678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.347870][ T2678] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  165.366936][ T2678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  165.375152][ T2678] usb 2-1: SerialNumber: syz
[  165.497801][ T2708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.513451][ T2708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.530271][ T2708] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  165.545460][ T2708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.561853][ T2708] usb 5-1: config 0 descriptor??
[  165.638417][ T2678] usb 2-1: 0:2 : does not exist
[  165.643125][ T2678] usb 2-1: unit 5: unexpected type 0x0d
[  165.677679][    C1] sched: RT throttling activated
[  165.731105][   T24] audit: type=1326 audit(1720994656.101:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.774410][   T24] audit: type=1326 audit(1720994656.121:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.797767][   T24] audit: type=1326 audit(1720994656.121:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.829697][   T24] audit: type=1326 audit(1720994656.121:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.856769][   T24] audit: type=1326 audit(1720994656.121:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.884734][   T24] audit: type=1326 audit(1720994656.121:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.908302][   T24] audit: type=1326 audit(1720994656.121:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.931511][   T24] audit: type=1326 audit(1720994656.121:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  165.954699][   T24] audit: type=1400 audit(1720994656.121:763): avc:  denied  { setattr } for  pid=3697 comm="syz.3.782" name="" dev="pipefs" ino=35324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  166.011749][ T3696] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature
[  166.794145][ T3716] overlayfs: statfs failed on './file0'
[  167.022846][ T3720] overlayfs: failed to resolve './file0': -2
[  167.147345][ T3737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3737 comm=syz.3.786
[  167.363800][ T3744] x_tables: duplicate underflow at hook 3
[  167.459135][ T2391] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  167.817770][ T2391] usb 3-1: config index 0 descriptor too short (expected 65535, got 27)
[  167.826015][ T2391] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  167.834800][ T2391] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  167.845020][ T2391] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  167.854174][ T2391] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  167.863025][ T2391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.940962][ T3761] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  167.987824][ T2708] usbhid 5-1:0.0: can't add hid device: -71
[  167.993772][ T2708] usbhid: probe of 5-1:0.0 failed with error -71
[  168.000786][ T2708] usb 5-1: USB disconnect, device number 44
[  168.125700][ T3765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=3765 comm=syz.3.794
[  168.175587][ T2394] usb 3-1: USB disconnect, device number 45
[  168.300810][ T2391] usb 2-1: USB disconnect, device number 44
[  168.757738][ T2391] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  168.764194][ T2708] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  168.774030][   T24] kauditd_printk_skb: 80 callbacks suppressed
[  168.774040][   T24] audit: type=1400 audit(1720994659.141:844): avc:  denied  { create } for  pid=3776 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  168.774536][ T3777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=3777 comm=syz.3.799
[  168.780473][   T24] audit: type=1400 audit(1720994659.141:845): avc:  denied  { write } for  pid=3776 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  168.868179][ T3782] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  168.879359][ T3782] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  168.893818][ T3782] EXT4-fs (loop3): 1 truncate cleaned up
[  168.899306][ T3782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  169.047702][ T2708] usb 5-1: Using ep0 maxpacket: 8
[  169.167857][ T2708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.178590][ T2708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.194543][ T2708] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  169.207763][ T2676] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  169.207775][ T2391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.207795][ T2391] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.225838][ T2708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.238559][ T2391] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.256468][ T2391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.267587][ T2708] usb 5-1: config 0 descriptor??
[  169.269675][ T2391] usb 2-1: config 0 descriptor??
[  169.457731][ T2676] usb 3-1: Using ep0 maxpacket: 8
[  169.509034][ T3774] udc-core: couldn't find an available UDC or it's busy
[  169.515841][ T3774] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.577777][ T2676] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  169.586669][ T2676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.595085][ T2676] usb 3-1: config 0 descriptor??
[  169.751020][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.770014][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.777442][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.784511][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.791525][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.798532][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.805453][ T2708] hid-led 0003:04D8:F372.0028: unknown main item tag 0x0
[  169.816769][ T2708] hid-led 0003:04D8:F372.0028: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0
[  169.856312][ T2708] hid-led 0003:04D8:F372.0028: Greynut Luxafor initialized
[  169.972169][ T2708] usb 5-1: USB disconnect, device number 45
[  169.983615][ T2678] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  169.992604][ T2678] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  170.001326][ T2678] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  170.016577][ T2678] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  170.263695][ T2676] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  170.274453][ T2676] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
[  170.285212][ T2678] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  170.293491][ T2678] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  170.302707][ T2678] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  170.311179][ T2678] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  170.319243][ T2676] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  170.329500][ T2678] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  170.337578][ T2678] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  170.347284][ T3787] udc-core: couldn't find an available UDC or it's busy
[  170.356613][ T2678] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  170.367737][ T3787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  170.377204][ T2678] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  170.386095][ T2678] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  170.401110][ T2678] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  170.410396][ T2678] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  170.419449][ T2678] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  170.428455][ T2678] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  170.437257][ T2678] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  171.267774][ T2676] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  171.277667][ T2676] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9
[  171.289338][ T2676] asix: probe of 3-1:0.0 failed with error -71
[  171.296335][ T2676] usb 3-1: USB disconnect, device number 46
[  171.467981][ T2391] usbhid 2-1:0.0: can't add hid device: -71
[  171.474160][ T2391] usbhid: probe of 2-1:0.0 failed with error -71
[  171.482097][ T2391] usb 2-1: USB disconnect, device number 45
[  171.752286][ T3849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'.
[  171.935930][ T3865] tmpfs: Unknown parameter '00000000000000000000000'
[  172.057739][ T2391] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  172.127824][ T2676] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  172.307755][ T2391] usb 5-1: Using ep0 maxpacket: 8
[  172.457791][ T2394] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  172.517873][ T2390] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  172.538090][ T2391] usb 5-1: config 0 has no interfaces?
[  172.657768][ T2391] usb 5-1: config 0 has no interfaces?
[  172.677809][ T2676] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  172.687890][ T2676] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 218, changing to 11
[  172.698880][ T2676] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.711546][ T2676] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  172.720336][ T2676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.737755][ T2394] usb 3-1: Using ep0 maxpacket: 16
[  172.742926][ T2391] usb 5-1: config 0 has no interfaces?
[  172.768847][ T2676] usb 4-1: invalid MIDI out EP 0
[  172.773804][ T2676] snd-usb-audio: probe of 4-1:27.0 failed with error -22
[  172.837945][ T2391] usb 5-1: config 0 has no interfaces?
[  172.938010][ T2391] usb 5-1: config 0 has no interfaces?
[  172.967812][ T2390] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.978550][ T2390] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 30
[  173.047853][ T2391] usb 5-1: config 0 has no interfaces?
[  173.097815][ T2394] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=dd.1b
[  173.106787][ T2394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.133945][ T2394] usb 3-1: Product: syz
[  173.137950][ T2394] usb 3-1: Manufacturer: syz
[  173.142342][ T2394] usb 3-1: SerialNumber: syz
[  173.145008][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  173.147435][ T2394] usb 3-1: config 0 descriptor??
[  173.161446][ T2391] usb 5-1: config 0 has no interfaces?
[  173.166729][ T2391] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  173.175761][ T2391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.184640][ T2391] usb 5-1: config 0 descriptor??
[  173.207821][ T2390] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.216672][ T2390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.225064][ T2394] net1080: probe of 3-1:0.0 failed with error -22
[  173.234457][ T2390] usb 1-1: Product: syz
[  173.238484][ T2390] usb 1-1: Manufacturer: syz
[  173.242883][ T2390] usb 1-1: SerialNumber: syz
[  173.527966][   T24] audit: type=1400 audit(1720994663.891:846): avc:  denied  { create } for  pid=3866 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  173.628735][ T2394] usb 3-1: USB disconnect, device number 47
[  174.208074][ T3869] capability: warning: `syz.0.822' uses 32-bit capabilities (legacy support in use)
[  174.219100][ T3869] 9pnet: Insufficient options for proto=fd
[  174.237764][ T2390] cdc_ncm 1-1:1.0: bind() failure
[  174.245042][ T2390] usb 1-1: USB disconnect, device number 34
[  174.437733][ T2708] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  174.447717][ T2394] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  174.715817][ T2676] usb 4-1: USB disconnect, device number 56
[  174.768317][ T3910] syz.3.833[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  174.768374][ T3910] syz.3.833[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  174.804942][ T2708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.827785][ T2394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.831521][ T2708] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  174.847710][ T2394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.852872][ T2708] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58
[  174.860688][ T2394] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  174.876449][ T2394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.878174][ T2708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.888955][ T2394] usb 3-1: config 0 descriptor??
[  174.898190][ T2680] usb 5-1: USB disconnect, device number 46
[  174.911235][ T2708] usb 2-1: config 0 descriptor??
[  174.916525][ T3905] tmpfs: Unknown parameter '00000000000000000000000'
[  174.948410][ T2708] usb 2-1: bad CDC descriptors
[  174.960774][ T2708] cdc_acm 2-1:0.0: Zero length descriptor references
[  174.968820][ T2708] cdc_acm: probe of 2-1:0.0 failed with error -22
[  174.987750][   T24] audit: type=1326 audit(1720994665.351:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.046183][   T24] audit: type=1326 audit(1720994665.351:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.202026][   T24] audit: type=1326 audit(1720994665.351:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.225325][   T24] audit: type=1326 audit(1720994665.351:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.248561][   T24] audit: type=1326 audit(1720994665.351:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.271860][   T24] audit: type=1326 audit(1720994665.351:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.295210][ T2394] chicony 0003:04F2:1421.0029: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0
[  175.295290][   T24] audit: type=1326 audit(1720994665.461:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.330020][   T24] audit: type=1326 audit(1720994665.461:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.354745][   T24] audit: type=1326 audit(1720994665.571:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.378390][   T24] audit: type=1326 audit(1720994665.571:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bf28cbd9 code=0x7ffc0000
[  175.380600][ T3917] attempt to access beyond end of device
[  175.380600][ T3917] loop3: rw=2049, want=544, limit=256
[  175.418865][ T2676] usb 2-1: USB disconnect, device number 46
[  175.432493][ T3917] attempt to access beyond end of device
[  175.432493][ T3917] loop3: rw=2049, want=1024, limit=256
[  175.445755][ T3917] attempt to access beyond end of device
[  175.445755][ T3917] loop3: rw=2049, want=2404, limit=256
[  175.506886][ T3926] erofs: Unknown parameter 'ÿÿÿÿ'
[  175.670266][ T3932] overlayfs: failed to resolve './file1': -2
[  176.571943][ T3950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.842'.
[  177.161653][ T3987] input: syz0 as /devices/virtual/input/input28
[  177.170882][ T2396] usb 3-1: USB disconnect, device number 48
[  177.338242][ T2391] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  177.456647][ T2680] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  177.534561][ T4009] incfs_lookup_dentry err:-14
[  177.539109][ T4009] incfs: Can't find or create .incomplete dir in ./file0
[  177.546795][ T4009] incfs: mount failed -14
[  177.877834][ T2680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.888915][ T2665] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  177.896443][ T2680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.922440][ T2680] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.931374][ T2680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.939779][ T2680] usb 2-1: config 0 descriptor??
[  177.987796][ T2391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.998600][ T2391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.008446][ T2391] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  178.017422][ T2391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.027833][ T2391] usb 4-1: config 0 descriptor??
[  178.267825][ T2665] usb 1-1: config index 0 descriptor too short (expected 28527, got 18)
[  178.276070][ T2665] usb 1-1: config 109 has too many interfaces: 116, using maximum allowed: 32
[  178.285506][ T2680] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  178.292816][ T2665] usb 1-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config
[  178.303489][ T2680] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving
[  178.311491][ T2665] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 116
[  178.321580][ T2680] plantronics 0003:047F:FFFF.002A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  178.335461][ T2665] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  178.350263][ T2665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.500570][ T2391] sony 0003:054C:0268.002B: hiddev97,hidraw1: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  178.512313][ T2391] sony 0003:054C:0268.002B: failed to claim input
[  179.187780][ T2665] usb 1-1: string descriptor 0 read error: -71
[  179.194296][ T2665] usb 1-1: USB disconnect, device number 35
[  179.341104][ T4035] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.359684][ T4035] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  179.374226][ T4035] EXT4-fs (loop2): 1 truncate cleaned up
[  179.379786][ T4035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  179.927798][ T4051] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22
[  179.967776][ T2391] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  180.038017][ T2390] usb 4-1: USB disconnect, device number 57
[  180.158292][ T2396] usb 2-1: USB disconnect, device number 47
[  180.274774][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.281925][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.285382][ T4064] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  180.289347][ T4062] device bridge_slave_0 entered promiscuous mode
[  180.304581][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.311781][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.319058][ T4062] device bridge_slave_1 entered promiscuous mode
[  180.368313][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.375168][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.382263][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.389045][ T4062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.396257][ T2391] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.412229][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.577848][ T2391] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  180.587027][ T2391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.596916][ T2391] usb 1-1: Product: syz
[  180.601732][ T2391] usb 1-1: Manufacturer: syz
[  180.606206][ T2391] usb 1-1: SerialNumber: syz
[  180.657792][ T2396] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  180.712763][ T2680] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.720032][ T2680] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.734104][   T24] kauditd_printk_skb: 43 callbacks suppressed
[  180.734115][   T24] audit: type=1326 audit(1720994671.101:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc05a6a6bd9 code=0x0
[  180.735965][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.770922][ T2394] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.777770][ T2394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.786206][ T2394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.794219][ T2394] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.801049][ T2394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.814783][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.823130][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.836388][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.848476][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.856136][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.866557][ T4076] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  180.884450][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.905132][ T4062] device veth0_vlan entered promiscuous mode
[  180.924566][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.936975][ T4062] device veth1_macvtap entered promiscuous mode
[  180.959233][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.971685][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.038678][  T336] device bridge_slave_1 left promiscuous mode
[  181.044720][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.053345][  T336] device bridge_slave_0 left promiscuous mode
[  181.059517][ T2396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.076170][ T4079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  181.085195][ T2396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.116460][   T24] audit: type=1400 audit(1720994671.481:901): avc:  denied  { view } for  pid=4078 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  181.127984][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.142393][ T2396] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  181.151618][ T2396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.160415][ T2396] usb 2-1: config 0 descriptor??
[  181.166621][  T336] device veth1_macvtap left promiscuous mode
[  181.173445][  T336] device veth0_vlan left promiscuous mode
[  181.205387][ T4062] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  181.477911][   T24] audit: type=1400 audit(1720994671.761:902): avc:  denied  { unlink } for  pid=4062 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.590969][ T3071] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a)
[  181.600741][   T24] audit: type=1400 audit(1720994671.761:903): avc:  denied  { unlink } for  pid=4062 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  181.608061][ T4097] input: syz1 as /devices/virtual/input/input29
[  181.634518][ T3071] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a)
[  181.644596][ T2396] usbhid 2-1:0.0: can't add hid device: -71
[  181.651094][ T2396] usbhid: probe of 2-1:0.0 failed with error -71
[  181.658357][ T2396] usb 2-1: USB disconnect, device number 48
[  181.692657][   T24] audit: type=1400 audit(1720994672.061:904): avc:  denied  { nlmsg_read } for  pid=4098 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  181.794061][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.800970][ T4103] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.808509][ T4103] device bridge_slave_0 entered promiscuous mode
[  181.815751][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.822624][ T4103] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.829844][ T4103] device bridge_slave_1 entered promiscuous mode
[  181.864990][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.871845][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.878925][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.885701][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.904088][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.911626][ T2395] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.919000][ T2395] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.927349][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.935554][ T2679] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.942391][ T2679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.953764][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.961731][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.968659][ T2679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.977859][ T2391] cdc_ncm 1-1:1.0: bind() failure
[  181.986957][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.997364][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.005019][ T2390] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  182.012764][ T2391] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  182.026456][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  182.036787][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  182.044506][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  182.047837][ T2391] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  182.052329][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  182.069581][ T4103] device veth0_vlan entered promiscuous mode
[  182.072534][ T2391] usb 1-1: USB disconnect, device number 36
[  182.083371][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.092711][ T4103] device veth1_macvtap entered promiscuous mode
[  182.103038][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.128235][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.168367][ T4113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.880'.
[  182.258800][ T4117] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  182.271196][ T4117] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  182.289803][ T4117] FAT-fs (loop4): unable to read boot sector
[  182.301325][ T4117] udc-core: couldn't find an available UDC or it's busy
[  182.308546][ T4117] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  182.450137][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.462920][ T2390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.490309][  T336] device bridge_slave_1 left promiscuous mode
[  182.496810][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.507597][  T336] device bridge_slave_0 left promiscuous mode
[  182.514768][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.529422][  T336] device veth1_macvtap left promiscuous mode
[  182.535609][  T336] device veth0_vlan left promiscuous mode
[  182.535881][ T2390] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  182.552316][ T2390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.560829][ T2390] usb 4-1: config 0 descriptor??
[  182.657786][ T2679] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  182.661859][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.672158][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.679474][ T4128] device bridge_slave_0 entered promiscuous mode
[  182.686338][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.693668][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.701050][ T4128] device bridge_slave_1 entered promiscuous mode
[  182.734612][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.741454][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.748551][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.755327][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.774716][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.782439][ T2395] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.790514][ T2395] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.800180][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.808547][ T2391] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.815378][ T2391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.830569][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.838647][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.845468][ T2395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.853207][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.861178][ T2395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.871878][ T2391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  182.882839][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  182.890585][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  182.897780][ T2679] usb 5-1: Using ep0 maxpacket: 8
[  182.902906][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  182.913729][ T4128] device veth0_vlan entered promiscuous mode
[  182.923097][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.931844][ T4128] device veth1_macvtap entered promiscuous mode
[  182.944013][ T2665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.952362][ T2665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.017856][ T2679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.100128][ T2390] logitech-djreceiver 0003:046D:C71B.002C: item fetching failed at offset 3/7
[  183.109550][ T2390] logitech-djreceiver 0003:046D:C71B.002C: logi_dj_probe: parse failed
[  183.174006][ T2390] logitech-djreceiver: probe of 0003:046D:C71B.002C failed with error -22
[  183.227807][ T2679] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  183.380849][  T336] device bridge_slave_1 left promiscuous mode
[  183.387535][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.402036][  T336] device bridge_slave_0 left promiscuous mode
[  183.409522][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.415057][ T2679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.424921][  T336] device veth1_macvtap left promiscuous mode
[  183.426695][ T2679] usb 5-1: Product: syz
[  183.431206][  T336] device veth0_vlan left promiscuous mode
[  183.434822][ T2679] usb 5-1: Manufacturer: syz
[  183.444813][ T2679] usb 5-1: SerialNumber: syz
[  183.449896][ T2679] usb 5-1: config 0 descriptor??
[  183.707813][ T2679] uvcvideo: Found UVC 0.00 device syz (8086:0b03)
[  183.714189][ T2679] uvcvideo: No valid video chain found.
[  183.731667][ T4143] incfs: Backing dir is not set, filesystem can't be mounted.
[  183.739304][ T4143] incfs: mount failed -2
[  184.064351][   T24] audit: type=1326 audit(1720994674.431:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4150 comm="syz.2.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x0
[  184.097755][ T2395] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  184.477809][ T2395] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.587781][ T2395] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  184.596895][ T2395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  184.604717][ T2395] usb 1-1: SerialNumber: syz
[  184.651729][ T2395] cdc_ether: probe of 1-1:1.0 failed with error -22
[  185.199003][ T2678] usb 5-1: USB disconnect, device number 47
[  185.607749][ T2678] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  186.127781][ T2678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.138506][ T2678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.148026][ T2678] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  186.156852][ T2678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.165439][ T2678] usb 5-1: config 0 descriptor??
[  186.747756][ T2678] usbhid 5-1:0.0: can't add hid device: -71
[  186.753561][ T2678] usbhid: probe of 5-1:0.0 failed with error -71
[  186.760605][ T2678] usb 5-1: USB disconnect, device number 48
[  187.367726][ T2679] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  187.728432][ T2679] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  187.736519][ T2679] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  187.744460][ T2679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.753113][ T2679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  187.762830][ T2679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  188.071948][ T3649] ------------[ cut here ]------------
[  188.077233][ T3649] WARNING: CPU: 0 PID: 3649 at fs/inode.c:304 drop_nlink+0xc1/0x110
[  188.085112][ T3649] Modules linked in:
[  188.088855][ T3649] CPU: 1 PID: 3649 Comm: syz-executor Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  188.100160][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  188.109974][ T3649] RIP: 0010:drop_nlink+0xc1/0x110
[  188.114933][ T3649] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c
[  188.128388][ T2679] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  188.135590][ T3649] RSP: 0018:ffffc90001227b08 EFLAGS: 00010293
[  188.143906][ T2679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.149451][ T3649] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff888122d5bb40
[  188.149458][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  188.149472][ T3649] RBP: ffffc90001227b30 R08: ffffffff81b77154 R09: 0000000000000003
[  188.157545][ T2679] usb 5-1: Product: Д
[  188.165061][ T3649] R10: fffff52000244f50 R11: dffffc0000000001 R12: dffffc0000000000
[  188.165069][ T3649] R13: 1ffff1102281a015 R14: ffff8881140d0060 R15: ffff8881140d00a8
[  188.165084][ T3649] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  188.173145][ T2679] usb 5-1: Manufacturer: ц
[  188.180730][ T3649] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.185345][ T2679] usb 5-1: config 0 descriptor??
[  188.192812][ T3649] CR2: 00007f7a9fbc6460 CR3: 000000011a896000 CR4: 00000000003506a0
[  188.232402][ T3649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  188.238069][ T2679] hub 5-1:0.0: bad descriptor, ignoring hub
[  188.240357][ T3649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  188.246174][ T2679] hub: probe of 5-1:0.0 failed with error -5
[  188.253682][ T3649] Call Trace:
[  188.253699][ T3649]  ? show_regs+0x58/0x60
[  188.253709][ T3649]  ? __warn+0x160/0x2f0
[  188.253722][ T3649]  ? drop_nlink+0xc1/0x110
[  188.253732][ T3649]  ? report_bug+0x3d9/0x5b0
[  188.253749][ T3649]  ? drop_nlink+0xc1/0x110
[  188.260632][ T2679] input: ц Д as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30
[  188.262880][ T3649]  ? handle_bug+0x41/0x70
[  188.296974][ T3649]  ? exc_invalid_op+0x1b/0x50
[  188.301705][ T3649]  ? asm_exc_invalid_op+0x12/0x20
[  188.310917][ T3649]  ? drop_nlink+0x44/0x110
[  188.315303][ T3649]  ? drop_nlink+0xc1/0x110
[  188.320190][ T3649]  ? drop_nlink+0xc1/0x110
[  188.323491][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.903'.
[  188.324580][ T3649]  ? drop_nlink+0xc1/0x110
[  188.341182][ T3649]  shmem_rmdir+0x59/0x90
[  188.345274][ T3649]  vfs_rmdir+0x2b7/0x3f0
[  188.349545][ T3649]  incfs_kill_sb+0x108/0x220
[  188.354602][ T3649]  deactivate_locked_super+0xad/0x110
[  188.359998][ T3649]  deactivate_super+0xbe/0xf0
[  188.364520][ T3649]  cleanup_mnt+0x45c/0x510
[  188.364678][   T24] audit: type=1326 audit(1720994678.731:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.391806][ T3649]  __cleanup_mnt+0x19/0x20
[  188.391816][ T3649]  task_work_run+0x129/0x190
[  188.391827][ T3649]  do_exit+0xc83/0x2a50
[  188.391839][ T3649]  ? put_task_struct+0x80/0x80
[  188.391849][ T3649]  ? __kasan_check_read+0x11/0x20
[  188.391858][ T3649]  ? __fdget_pos+0x209/0x3a0
[  188.391869][ T3649]  ? ksys_write+0x24f/0x2c0
[  188.391881][ T3649]  ? fsnotify_link_count+0x90/0x90
[  188.391891][ T3649]  ? __ia32_sys_read+0x90/0x90
[  188.391903][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  188.391915][ T3649]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  188.391924][ T3649]  do_group_exit+0x141/0x310
[  188.391932][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  188.391942][ T3649]  __x64_sys_exit_group+0x3f/0x40
[  188.391949][ T3649]  do_syscall_64+0x34/0x70
[  188.391960][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  188.391970][ T3649] RIP: 0033:0x7f7a9fbe0bd9
[  188.391975][ T3649] Code: Unable to access opcode bytes at RIP 0x7f7a9fbe0baf.
[  188.391981][ T3649] RSP: 002b:00007ffdd5ea61e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  188.391993][ T3649] RAX: ffffffffffffffda RBX: 00007f7a9fc4e575 RCX: 00007f7a9fbe0bd9
[  188.392007][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  188.397060][   T24] audit: type=1326 audit(1720994678.761:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.400753][ T3649] RBP: 0000000000000009 R08: 00007ffdd5ea3f87 R09: 00007ffdd5ea74a0
[  188.443638][   T24] audit: type=1326 audit(1720994678.811:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.488681][ T3649] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffdd5ea74a0
[  188.496921][   T24] audit: type=1326 audit(1720994678.861:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.526745][ T3649] R13: 00007f7a9fc4e515 R14: 0000555555b034a8 R15: 000000000002db30
[  188.558516][   T24] audit: type=1326 audit(1720994678.861:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.566842][ T3649] ---[ end trace 46735b897ad6c383 ]---
[  188.619349][   T24] audit: type=1326 audit(1720994678.861:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.619365][   T24] audit: type=1326 audit(1720994678.861:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.619379][   T24] audit: type=1326 audit(1720994678.861:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.619393][   T24] audit: type=1326 audit(1720994678.861:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.619408][   T24] audit: type=1326 audit(1720994678.861:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556ff34bd9 code=0x7ffc0000
[  188.740774][ T3649] ------------[ cut here ]------------
[  188.746126][ T3649] WARNING: CPU: 0 PID: 3649 at fs/inode.c:304 drop_nlink+0xc1/0x110
[  188.754260][ T3649] Modules linked in:
[  188.758243][ T3649] CPU: 0 PID: 3649 Comm: syz-executor Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  188.770841][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  188.780971][ T3649] RIP: 0010:drop_nlink+0xc1/0x110
[  188.785832][ T3649] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c
[  188.805602][ T3649] RSP: 0018:ffffc90001227b08 EFLAGS: 00010293
[  188.811659][ T3649] RAX: ffffffff81b771d1 RBX: 0000000000000000 RCX: ffff888122d5bb40
[  188.819670][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  188.827863][ T3649] RBP: ffffc90001227b30 R08: ffffffff81b77154 R09: 0000000000000003
[  188.835695][ T3649] R10: fffff52000244f50 R11: dffffc0000000001 R12: dffffc0000000000
[  188.843550][ T3649] R13: 1ffff1102281a0fd R14: ffff8881140d07a0 R15: ffff8881140d07e8
[  188.851306][ T3649] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  188.860156][ T3649] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.866526][ T3649] CR2: 00007f55700bf0a0 CR3: 00000001125aa000 CR4: 00000000003506a0
[  188.874358][ T3649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  188.882174][ T3649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  188.890005][ T3649] Call Trace:
[  188.893115][ T3649]  ? show_regs+0x58/0x60
[  188.897183][ T3649]  ? __warn+0x160/0x2f0
[  188.901199][ T3649]  ? drop_nlink+0xc1/0x110
[  188.905427][ T3649]  ? report_bug+0x3d9/0x5b0
[  188.909785][ T3649]  ? drop_nlink+0xc1/0x110
[  188.914036][ T3649]  ? handle_bug+0x41/0x70
[  188.918226][ T3649]  ? exc_invalid_op+0x1b/0x50
[  188.922703][ T3649]  ? asm_exc_invalid_op+0x12/0x20
[  188.927563][ T3649]  ? drop_nlink+0x44/0x110
[  188.931910][ T3649]  ? drop_nlink+0xc1/0x110
[  188.936194][ T3649]  ? drop_nlink+0xc1/0x110
[  188.940471][ T3649]  ? drop_nlink+0xc1/0x110
[  188.944698][ T3649]  shmem_rmdir+0x59/0x90
[  188.948798][ T3649]  vfs_rmdir+0x2b7/0x3f0
[  188.952853][ T3649]  incfs_kill_sb+0x1a2/0x220
[  188.957277][ T3649]  deactivate_locked_super+0xad/0x110
[  188.962496][ T3649]  deactivate_super+0xbe/0xf0
[  188.967000][ T3649]  cleanup_mnt+0x45c/0x510
[  188.971267][ T3649]  __cleanup_mnt+0x19/0x20
[  188.975498][ T3649]  task_work_run+0x129/0x190
[  188.979955][ T3649]  do_exit+0xc83/0x2a50
[  188.983918][ T3649]  ? put_task_struct+0x80/0x80
[  188.988532][ T3649]  ? __kasan_check_read+0x11/0x20
[  188.993384][ T3649]  ? __fdget_pos+0x209/0x3a0
[  188.997869][ T3649]  ? ksys_write+0x24f/0x2c0
[  189.002229][ T3649]  ? fsnotify_link_count+0x90/0x90
[  189.007132][ T3649]  ? __ia32_sys_read+0x90/0x90
[  189.012017][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  189.017270][ T3649]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  189.023336][ T3649]  do_group_exit+0x141/0x310
[  189.028537][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  189.033756][ T3649]  __x64_sys_exit_group+0x3f/0x40
[  189.038842][ T3649]  do_syscall_64+0x34/0x70
[  189.043108][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.049052][ T3649] RIP: 0033:0x7f7a9fbe0bd9
[  189.053308][ T3649] Code: Unable to access opcode bytes at RIP 0x7f7a9fbe0baf.
[  189.061530][ T3649] RSP: 002b:00007ffdd5ea61e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  189.073026][ T2678] usb 5-1: USB disconnect, device number 49
[  189.086827][ T3649] RAX: ffffffffffffffda RBX: 00007f7a9fc4e575 RCX: 00007f7a9fbe0bd9
[  189.104207][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  189.114912][ T3649] RBP: 0000000000000009 R08: 00007ffdd5ea3f87 R09: 00007ffdd5ea74a0
[  189.125087][ T3649] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffdd5ea74a0
[  189.133040][ T3649] R13: 00007f7a9fc4e515 R14: 0000555555b034a8 R15: 000000000002db30
[  189.141006][ T3649] ---[ end trace 46735b897ad6c384 ]---
[  189.151375][ T4227] EXT4-fs (loop4): Unrecognized mount option "smackfstransmute=errors=remount-ro" or missing value
[  189.198284][ T3649] ==================================================================
[  189.206167][ T3649] BUG: KASAN: use-after-free in fast_dput+0x1f2/0x2a0
[  189.212755][ T3649] Read of size 4 at addr ffff8881104a6880 by task syz-executor/3649
[  189.220558][ T3649] 
[  189.222732][ T3649] CPU: 1 PID: 3649 Comm: syz-executor Tainted: G        W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  189.234013][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  189.243907][ T3649] Call Trace:
[  189.247039][ T3649]  dump_stack_lvl+0x1e2/0x24b
[  189.251554][ T3649]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  189.256840][ T3649]  ? panic+0x812/0x812
[  189.260750][ T3649]  print_address_description+0x81/0x3b0
[  189.266144][ T3649]  ? detach_if_pending+0xcd/0x390
[  189.270992][ T3649]  kasan_report+0x179/0x1c0
[  189.275326][ T3649]  ? fast_dput+0x1f2/0x2a0
[  189.279580][ T3649]  ? fast_dput+0x1f2/0x2a0
[  189.283837][ T3649]  __asan_report_load4_noabort+0x14/0x20
[  189.289301][ T3649]  fast_dput+0x1f2/0x2a0
[  189.293380][ T3649]  ? __kasan_check_write+0x14/0x20
[  189.298333][ T3649]  dput+0x21/0x80
[  189.301805][ T3649]  incfs_free_mount_info+0x60/0x210
[  189.306831][ T3649]  incfs_kill_sb+0x1c2/0x220
[  189.311262][ T3649]  deactivate_locked_super+0xad/0x110
[  189.316465][ T3649]  deactivate_super+0xbe/0xf0
[  189.320993][ T3649]  cleanup_mnt+0x45c/0x510
[  189.325234][ T3649]  __cleanup_mnt+0x19/0x20
[  189.329488][ T3649]  task_work_run+0x129/0x190
[  189.333913][ T3649]  do_exit+0xc83/0x2a50
[  189.337904][ T3649]  ? put_task_struct+0x80/0x80
[  189.342507][ T3649]  ? __kasan_check_read+0x11/0x20
[  189.347362][ T3649]  ? __fdget_pos+0x209/0x3a0
[  189.351791][ T3649]  ? ksys_write+0x24f/0x2c0
[  189.356132][ T3649]  ? fsnotify_link_count+0x90/0x90
[  189.361077][ T3649]  ? __ia32_sys_read+0x90/0x90
[  189.365681][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  189.370889][ T3649]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  189.376790][ T3649]  do_group_exit+0x141/0x310
[  189.381213][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  189.386425][ T3649]  __x64_sys_exit_group+0x3f/0x40
[  189.391280][ T3649]  do_syscall_64+0x34/0x70
[  189.395536][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.401265][ T3649] RIP: 0033:0x7f7a9fbe0bd9
[  189.405511][ T3649] Code: Unable to access opcode bytes at RIP 0x7f7a9fbe0baf.
[  189.412715][ T3649] RSP: 002b:00007ffdd5ea61e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  189.420964][ T3649] RAX: ffffffffffffffda RBX: 00007f7a9fc4e575 RCX: 00007f7a9fbe0bd9
[  189.428773][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  189.436584][ T3649] RBP: 0000000000000009 R08: 00007ffdd5ea3f87 R09: 00007ffdd5ea74a0
[  189.444397][ T3649] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffdd5ea74a0
[  189.452207][ T3649] R13: 00007f7a9fc4e515 R14: 0000555555b034a8 R15: 000000000002db30
[  189.460019][ T3649] 
[  189.462186][ T3649] Allocated by task 4201:
[  189.466369][ T3649]  __kasan_slab_alloc+0xb1/0xe0
[  189.471045][ T3649]  slab_post_alloc_hook+0x61/0x2f0
[  189.475991][ T3649]  kmem_cache_alloc+0x168/0x2e0
[  189.480678][ T3649]  __d_alloc+0x2d/0x6c0
[  189.484679][ T3649]  d_alloc_parallel+0xec/0x1370
[  189.489360][ T3649]  __lookup_slow+0x154/0x400
[  189.493780][ T3649]  lookup_one_len+0x180/0x2c0
[  189.498299][ T3649]  incfs_lookup_dentry+0x5f/0xb0
[  189.503075][ T3649]  open_or_create_special_dir+0x4f/0x1d0
[  189.508536][ T3649]  incfs_mount_fs+0x48d/0xa10
[  189.513057][ T3649]  legacy_get_tree+0xf1/0x190
[  189.517562][ T3649]  vfs_get_tree+0x88/0x290
[  189.521823][ T3649]  do_new_mount+0x2ba/0xb30
[  189.526155][ T3649]  path_mount+0x56f/0xcb0
[  189.530329][ T3649]  __se_sys_mount+0x2c4/0x3b0
[  189.534834][ T3649]  __x64_sys_mount+0xbf/0xd0
[  189.539261][ T3649]  do_syscall_64+0x34/0x70
[  189.543514][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.549236][ T3649] 
[  189.551406][ T3649] Freed by task 3649:
[  189.555231][ T3649]  kasan_set_track+0x4b/0x70
[  189.559763][ T3649]  kasan_set_free_info+0x23/0x40
[  189.564540][ T3649]  ____kasan_slab_free+0x121/0x160
[  189.568903][ T2678] usb 1-1: USB disconnect, device number 37
[  189.569493][ T3649]  __kasan_slab_free+0x11/0x20
[  189.579818][ T3649]  slab_free_freelist_hook+0xc0/0x190
[  189.585028][ T3649]  kmem_cache_free+0xa9/0x1e0
[  189.589553][ T3649]  __d_free+0x23/0x30
[  189.593352][ T3649]  rcu_do_batch+0x597/0xc40
[  189.597695][ T3649]  rcu_core+0x5ad/0xe40
[  189.601679][ T3649]  rcu_core_si+0x9/0x10
[  189.605673][ T3649]  __do_softirq+0x268/0x5bb
[  189.610010][ T3649] 
[  189.612176][ T3649] Last potentially related work creation:
[  189.617738][ T3649]  kasan_save_stack+0x3b/0x60
[  189.622249][ T3649]  __kasan_record_aux_stack+0xd3/0x100
[  189.627544][ T3649]  kasan_record_aux_stack_noalloc+0xb/0x10
[  189.633188][ T3649]  call_rcu+0x135/0x11f0
[  189.637277][ T3649]  dentry_free+0xbf/0x160
[  189.641524][ T3649]  __dentry_kill+0x505/0x650
[  189.645944][ T3649]  dentry_kill+0xc0/0x2a0
[  189.650112][ T3649]  dput+0x40/0x80
[  189.653580][ T3649]  incfs_free_mount_info+0x60/0x210
[  189.658617][ T3649]  incfs_kill_sb+0x1c2/0x220
[  189.663042][ T3649]  deactivate_locked_super+0xad/0x110
[  189.668250][ T3649]  deactivate_super+0xbe/0xf0
[  189.672762][ T3649]  cleanup_mnt+0x45c/0x510
[  189.677016][ T3649]  __cleanup_mnt+0x19/0x20
[  189.681270][ T3649]  task_work_run+0x129/0x190
[  189.685695][ T3649]  do_exit+0xc83/0x2a50
[  189.689688][ T3649]  do_group_exit+0x141/0x310
[  189.694114][ T3649]  __x64_sys_exit_group+0x3f/0x40
[  189.698972][ T3649]  do_syscall_64+0x34/0x70
[  189.703225][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.708953][ T3649] 
[  189.711121][ T3649] Second to last potentially related work creation:
[  189.717549][ T3649]  kasan_save_stack+0x3b/0x60
[  189.722060][ T3649]  __kasan_record_aux_stack+0xd3/0x100
[  189.727356][ T3649]  kasan_record_aux_stack_noalloc+0xb/0x10
[  189.732996][ T3649]  call_rcu+0x135/0x11f0
[  189.737077][ T3649]  dentry_free+0xbf/0x160
[  189.741240][ T3649]  __dentry_kill+0x505/0x650
[  189.745663][ T3649]  dentry_kill+0xc0/0x2a0
[  189.749831][ T3649]  dput+0x40/0x80
[  189.753303][ T3649]  do_unlinkat+0x44d/0x8b0
[  189.757556][ T3649]  __x64_sys_unlink+0x49/0x50
[  189.762069][ T3649]  do_syscall_64+0x34/0x70
[  189.766323][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.772048][ T3649] 
[  189.774220][ T3649] The buggy address belongs to the object at ffff8881104a6880
[  189.774220][ T3649]  which belongs to the cache dentry of size 208
[  189.787682][ T3649] The buggy address is located 0 bytes inside of
[  189.787682][ T3649]  208-byte region [ffff8881104a6880, ffff8881104a6950)
[  189.800603][ T3649] The buggy address belongs to the page:
[  189.806272][ T3649] page:ffffea0004412980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1104a6
[  189.816320][ T3649] flags: 0x4000000000000200(slab)
[  189.821178][ T3649] raw: 4000000000000200 ffffea00044103c0 0000000400000004 ffff888100193500
[  189.829597][ T3649] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000
[  189.838010][ T3649] page dumped because: kasan: bad access detected
[  189.844265][ T3649] page_owner tracks the page as allocated
[  189.849821][ T3649] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 108, ts 3597393690, free_ts 0
[  189.866398][ T3649]  prep_new_page+0x166/0x180
[  189.870821][ T3649]  get_page_from_freelist+0x2d8c/0x2f30
[  189.876200][ T3649]  __alloc_pages_nodemask+0x435/0xaf0
[  189.881410][ T3649]  new_slab+0x80/0x400
[  189.885311][ T3649]  ___slab_alloc+0x302/0x4b0
[  189.889740][ T3649]  __slab_alloc+0x63/0xa0
[  189.893903][ T3649]  kmem_cache_alloc+0x1b9/0x2e0
[  189.898592][ T3649]  __d_alloc+0x2d/0x6c0
[  189.902581][ T3649]  d_alloc+0x4b/0x1d0
[  189.906402][ T3649]  __lookup_hash+0xe7/0x290
[  189.910742][ T3649]  do_unlinkat+0x28b/0x8b0
[  189.914993][ T3649]  __x64_sys_unlink+0x49/0x50
[  189.919510][ T3649]  do_syscall_64+0x34/0x70
[  189.923761][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  189.929486][ T3649] page_owner free stack trace missing
[  189.934692][ T3649] 
[  189.936863][ T3649] Memory state around the buggy address:
[  189.942335][ T3649]  ffff8881104a6780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  189.950232][ T3649]  ffff8881104a6800: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  189.958130][ T3649] >ffff8881104a6880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.966023][ T3649]                    ^
[  189.969935][ T3649]  ffff8881104a6900: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[  189.977831][ T3649]  ffff8881104a6980: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  189.985726][ T3649] ==================================================================
[  189.993624][ T3649] Disabling lock debugging due to kernel taint
[  190.001070][ T3649] ------------[ cut here ]------------
[  190.006345][ T3649] WARNING: CPU: 1 PID: 3649 at fs/dcache.c:762 fast_dput+0x256/0x2a0
[  190.014246][ T3649] Modules linked in:
[  190.017990][ T3649] CPU: 1 PID: 3649 Comm: syz-executor Tainted: G    B   W         5.10.218-syzkaller-00638-g3feee789f446 #0
[  190.029261][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  190.039166][ T3649] RIP: 0010:fast_dput+0x256/0x2a0
[  190.044003][ T3649] Code: f1 ff e9 d4 fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f7 fe ff ff 4c 89 ef e8 c4 bc f1 ff e9 ea fe ff ff e8 8a 28 b4 ff <0f> 0b e9 c0 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2a ff ff
[  190.063564][ T3649] RSP: 0018:ffffc90001227b20 EFLAGS: 00010293
[  190.069448][ T3649] RAX: ffffffff81b681f6 RBX: ffff8881104a68dc RCX: ffff888122d5bb40
[  190.077153][ T3649] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001
[  190.084988][ T3649] RBP: ffffc90001227b58 R08: ffffffff81b6814b R09: 0000000000000003
[  190.092796][ T3649] R10: fffff52000244f54 R11: dffffc0000000001 R12: 00000000ffffff80
[  190.100610][ T3649] R13: ffff8881104a6880 R14: ffff8881104a68d8 R15: dffffc0000000000
[  190.108412][ T3649] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  190.117190][ T3649] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.123959][ T3649] CR2: 00007fb982423a6c CR3: 000000010bac4000 CR4: 00000000003506a0
[  190.131770][ T3649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  190.139565][ T3649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  190.147360][ T3649] Call Trace:
[  190.150517][ T3649]  ? show_regs+0x58/0x60
[  190.154577][ T3649]  ? __warn+0x160/0x2f0
[  190.158585][ T3649]  ? fast_dput+0x256/0x2a0
[  190.162816][ T3649]  ? report_bug+0x3d9/0x5b0
[  190.167156][ T3649]  ? fast_dput+0x256/0x2a0
[  190.171429][ T3649]  ? handle_bug+0x41/0x70
[  190.175578][ T3649]  ? exc_invalid_op+0x1b/0x50
[  190.180118][ T3649]  ? asm_exc_invalid_op+0x12/0x20
[  190.184948][ T3649]  ? fast_dput+0x1ab/0x2a0
[  190.189220][ T3649]  ? fast_dput+0x256/0x2a0
[  190.193454][ T3649]  ? fast_dput+0x256/0x2a0
[  190.197744][ T3649]  dput+0x21/0x80
[  190.201188][ T3649]  incfs_free_mount_info+0x60/0x210
[  190.206211][ T3649]  incfs_kill_sb+0x1c2/0x220
[  190.210667][ T3649]  deactivate_locked_super+0xad/0x110
[  190.215847][ T3649]  deactivate_super+0xbe/0xf0
[  190.220390][ T3649]  cleanup_mnt+0x45c/0x510
[  190.224615][ T3649]  __cleanup_mnt+0x19/0x20
[  190.228888][ T3649]  task_work_run+0x129/0x190
[  190.233292][ T3649]  do_exit+0xc83/0x2a50
[  190.237284][ T3649]  ? put_task_struct+0x80/0x80
[  190.241948][ T3649]  ? __kasan_check_read+0x11/0x20
[  190.246753][ T3649]  ? __fdget_pos+0x209/0x3a0
[  190.251194][ T3649]  ? ksys_write+0x24f/0x2c0
[  190.255512][ T3649]  ? fsnotify_link_count+0x90/0x90
[  190.260477][ T3649]  ? __ia32_sys_read+0x90/0x90
[  190.265080][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  190.270286][ T3649]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  190.276166][ T3649]  do_group_exit+0x141/0x310
[  190.280613][ T3649]  ? debug_smp_processor_id+0x17/0x20
[  190.285800][ T3649]  __x64_sys_exit_group+0x3f/0x40
[  190.290679][ T3649]  do_syscall_64+0x34/0x70
[  190.294913][ T3649]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  190.300665][ T3649] RIP: 0033:0x7f7a9fbe0bd9
[  190.304890][ T3649] Code: Unable to access opcode bytes at RIP 0x7f7a9fbe0baf.
[  190.312125][ T3649] RSP: 002b:00007ffdd5ea61e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  190.320355][ T3649] RAX: ffffffffffffffda RBX: 00007f7a9fc4e575 RCX: 00007f7a9fbe0bd9
[  190.328187][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  190.335970][ T3649] RBP: 0000000000000009 R08: 00007ffdd5ea3f87 R09: 00007ffdd5ea74a0
[  190.343804][ T3649] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffdd5ea74a0
[  190.351600][ T3649] R13: 00007f7a9fc4e515 R14: 0000555555b034a8 R15: 000000000002db30
[  190.359428][ T3649] ---[ end trace 46735b897ad6c385 ]---
[  190.898337][  T336] device bridge_slave_1 left promiscuous mode
[  190.904281][  T336] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.912005][  T336] device bridge_slave_0 left promiscuous mode
[  190.918021][  T336] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.925781][  T336] device veth1_macvtap left promiscuous mode
[  190.931868][  T336] device veth0_vlan left promiscuous mode