last executing test programs:

13.925013689s ago: executing program 1 (id=10261):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000), 0x20000000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2a0, 0x268, 0x300, 0x0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0xd9, 0x1, 0x5, 0x5b, 0x6}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

13.020334966s ago: executing program 1 (id=10265):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ftruncate(r0, 0x100c17a) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x18, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x6}}}}}]}}]}}, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2) (async)
lstat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_xen(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x81000, &(0x7f00000003c0)={'trans=xen,', {[{@fscache}, {@debug={'debug', 0x3d, 0xb3c}}, {@noextend}, {@version_L}], [{@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@measure}, {@euid_eq={'euid', 0x3d, r2}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_user={'subj_user', 0x3d, ')-(*/%^.{))-{*&&/&/'}}, {@seclabel}]}})
truncate(&(0x7f0000000380)='./file2\x00', 0x2823)

12.96631787s ago: executing program 1 (id=10266):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4)
write(r5, &(0x7f0000000180)="c0f3c67036504bd8ea6565e2beb4c9087e2d91cee00995bc53831eaf1311c62e0770214c453463d9a42ae4482e38f4ef0d7c1eb763491d15ea2eac", 0x3b)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

6.54315493s ago: executing program 0 (id=10288):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000082b6fe8e00000000008040008500000050000000a50000009700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000001580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
socket$packet(0x11, 0xa, 0x300)
chdir(&(0x7f0000000140)='./bus\x00')
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1c42, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}}, 0x20}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000050000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0)

4.899998081s ago: executing program 3 (id=10295):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tee(r2, r0, 0x3, 0x2) (async)
tee(r2, r0, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000a40)=ANY=[@ANYBLOB='defcontext=sysadm_u,c'])

3.942477673s ago: executing program 3 (id=10300):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx  \x00'}, 0x20)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r5, 0x0)
pwritev2(r5, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)="9943865e", 0x4}], 0x2, 0xfff, 0x0, 0x0)

3.86062756s ago: executing program 0 (id=10301):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',fscachel\x00'])
chdir(&(0x7f0000000000)='./file0\x00')
mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

3.258555561s ago: executing program 4 (id=10305):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0xe67, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001f00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

3.258001481s ago: executing program 4 (id=10306):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700ffffffff02ffffff0004020000ff00000005", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="66009dae2932fc598a7136bef09dc7f6b22cc84e29c299f23d2e17f9ca4689721fdd0b3cb5b5d62b1f5c26b41b364a91d8b9508a2b699d806e3950ee867577a7a2d5bae2a7e48a41e4bfb9fd73a900a750ec0d4a5b107309cf14be8ac1626b74503e05363e518e62b4daf8bb60d7bc8c45c95ce29b70103f58b1652547ef7c75c5115f719534b7497ca34f88fdf5470cc01d3ef37ac60890bffb303ca84ba3d05059adeb58d10a69dc9ccef3779009bac23b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_gettime(0x1, &(0x7f00000004c0))
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r3)
r4 = inotify_init1(0x800)
r5 = gettid()
fcntl$setown(r3, 0x8, r5)
fcntl$setsig(r4, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

3.133052302s ago: executing program 3 (id=10307):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "e925"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0xfbffffff, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)

2.80344935s ago: executing program 2 (id=10308):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000f0010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000"], 0xdc}}, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x1, 0x7, 0x5, {{0x6, 0x4, 0x0, 0xc, 0x18, 0x68, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@end]}}}}})
socket$key(0xf, 0x3, 0x2)

2.796779911s ago: executing program 0 (id=10309):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f0000000000)='./file0\x00') (async)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x22c, 0x7}) (async)
utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x22c, 0x7})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b600000000637f74eb7fb0aa5a00000000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) (async)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd)
creat(&(0x7f00000001c0)='./bus\x00', 0x39f)

2.508198595s ago: executing program 2 (id=10310):
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000080000800100"/27], 0x48)

2.507792416s ago: executing program 2 (id=10311):
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000280), 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r3, 0x0, 0x0, 0x80c00)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
shutdown(r7, 0x1)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c07000090780000"], 0x0)

2.467052359s ago: executing program 1 (id=10304):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x3a) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
syz_usb_connect(0x0, 0x10b, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.460321159s ago: executing program 4 (id=10312):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000011000000000000000007"], 0x30}}], 0x1, 0x4008804)

2.386396566s ago: executing program 1 (id=10313):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000041bcd2fe5bbf697f3a120000bfa2000000000000070f58ed27b33209b8030000dd9479612ba035190000007c73d51685bb03000000bce46e66c8e34b369c2b8fe3d31e1735eb4dc09f7a4bcf81c0d7a3deabcabb0a23616e30f6c3ec4498cc7cce60103fd117db5ef49162a1e6e759196e6d6d294c515e4ffcd028312f9a7434a4a67ebf093007dde1fa2b76ceb49ea8ba383dabe14dda2008fef7946b5234c8f268a1fc3a09915d12f0d585b06a730083eebf328200797092ced5a107cf991e30e26912273e846676af9908196ea84625"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404513083000000000000109022400010a000000090400000103000000092100000001220500090581030000000000"], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xc, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x2, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x449}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@quota}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x8001}}]}, 0x3, 0x431, &(0x7f0000000940)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x441, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000400"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x1600, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
ioctl$VT_ACTIVATE(r5, 0x5606, 0xa)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r1, 0x0, 0x0)

2.308140753s ago: executing program 3 (id=10314):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f00000007c0), 0x1, 0x472, &(0x7f0000000c00)="$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")
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x0)
r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=")
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095", @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000040))
r7 = socket(0x75a39575f312b183, 0x800, 0x3)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x6, &(0x7f0000003b80)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000003d80)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000003bc0)="c6", 0x1, 0x800}])
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r10, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000001000000000000261366dfdac8f42573012e00000000f7c05257acff111394827148960895009500000000000000d500f1311bbb831e1856"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)

2.276682025s ago: executing program 0 (id=10315):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r5 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r2, @ANYBLOB="05"], 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x6b8ffff}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000"], 0xdc}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000100000008100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000000000000000000000000007401984b0000"], 0x48)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@remote}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
syz_usb_control_io$uac1(r5, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]}, 0x0)
sendmsg$inet(r2, &(0x7f0000000f40)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="20e8f41f260ecef789eb9b9970d0ca4c71a8b3c99587a090", 0x18}, {&(0x7f00000009c0)="6a95a30a93f6d7cfe01c934abc8c1dcd93c9d8ec696920d3155a241d04396558550916c88db7d843de8ffea87da843338405ce25d06abde108f6147cf6fa379743545fbf219bd8a506766ab158930df42d63ffe847e05ceb3ecf40489badcc3ac9cb5e7f7c3e6025ae30ab686070f4755c2cdee35ee9c45a791c7dcf6f2405414576d2a1108b12604e21cbe0512e70e74526eb35ca165fdfdf9f279882e700e70cc7a5eb5d005db6c2ea03b9ebde3c82f9eb206a5d8277426addda3c1ae65ec4894df14ad84e43dccb44f70e4805fdc4c143b0f679e4543e2ccef4a83ac99fcc048e634cec0f0699b9b888d58bd97d90", 0xf0}, {&(0x7f0000000ac0)="5e4d00363a79d737b33f8293d61b128bb868da5238b15c5134c457a1c016eef4e10828ce55fc382d5a93235d4b305fed11a171457cb5c3ac75a4f7a6abdc8776c5ba6855cc40b44bc9804f2b7a4651ed30d76e5a156c1d3379da20f75894dfda07e9ee625f3bfa3c3d395dc7c7566c65a9b9c653421a014ae66e586efdcf1a11b810ce6db2966097d2126faeb1dec87ce07f644bd0712ca93831935e4f58566abdc33f29ad1a6110ac476ada752e69c4f5205125cef113a5f6014c70eba87776b3e82fbc8645acb45c282276c46e6d9dc0ebef346b669fc2acff92aae0bf2ed426e75d8d74ed060a5126fb7fd2523c6bd0b293179ee7", 0xf6}, {&(0x7f0000000bc0)="5dd203bc4fccc272f31c51dc215723f1da7756facd2e0d340a813d79d5c6a48703201f4df1964ced7478131a214d7cfb4f9dec9eda78d88da6b7f97898fa1b9bc92926e65ac0f26cf59985b995bd995f56378c92bcdb6a8ee5a25c74f34e8342536bebc5ea171b39a1802223abf3bec438451062ee37ea6dfec1bd437cce45f8c9572a5b902f58ce12da9a699d3f1e4e1fd3b1c307e5e39e6fe8114b419409147a55a333b6aded4d4b3c4554c786a8a0", 0xb0}, {&(0x7f0000000cc0)="9d315c41a3cd873ab607f6f2f248546bb7f11415cc1c97d3f04d51fbaab049ad87e46e31d104d3ef5791cfe4b1f9bedc96b8e65b7f97e3c5f93e7135e61172f73e0fffa8b15eba1083f5b71f7351d213c625110ecf17f94fe6ee986bb681c4a756af03be", 0x64}, {&(0x7f0000000d40)="a99ae3e1243cb754df5f185cc4004c61aee18b6e5271fbf525468ca3556469f62b74bd0ddf7bfc323f721e932539d3c747aab33ab78f1cdcd64b2a02c2c5e74207d776d08314f3b9d480fd28831bda062651e319f396cc16b97baa28d81c27a25bba7e40fa4057564f2d49b4c346c57f8e4b7daa9d06c4b451ff8c5e8964a5cfe984a4ddc5bba552b272fa0082c02bc1bf817ebffe79bbfc202a60c24bc6071bb5743dd70bd229bf5665e817ca9a12cb5654c7bf06c05ffaeacc4fc326847bcd769b6d2dd060f680bbda311da0c52f542c45c14e9323dba7d93da7642dc65a0c122ebe33", 0xe4}, {&(0x7f0000000380)}, {&(0x7f0000000e40)="6a22d7df23251e0046db67bd83ae845bebec2a47195c02511742a4d76f09c882ca2c41e5696a83c0801fb3ea4d5b21e58999dc8c6c560128682646f7363001fbcdd95396950f6d9c8fce9575", 0x4c}], 0x8}, 0x40)
unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

1.686641236s ago: executing program 2 (id=10316):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x300000000000000, 0x0, 0x4400}, 0x0)

1.562599866s ago: executing program 4 (id=10317):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx  \x00'}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
flock(0xffffffffffffffff, 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000005000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

1.265737162s ago: executing program 3 (id=10318):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',fscachel\x00'])
chdir(&(0x7f0000000000)='./file0\x00')
mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

776.598683ms ago: executing program 2 (id=10319):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
clock_gettime(0x1, 0x0)
setitimer(0x0, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r1)
r2 = inotify_init1(0x800)
fcntl$setstatus(r1, 0x4, 0x2c00)
r3 = gettid()
fcntl$setown(r1, 0x8, r3)
fcntl$setsig(r2, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

775.995954ms ago: executing program 4 (id=10320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000003e44f2000000000000000007fffa0000000000f7a7cda6e3360290b3e846a077184c2dfb3bc77847b871db39fdaccee4407932c64968ac76f23ce1f7d299a237538041a4b07fd431b7987e8478321ebaacae9543905c55b60d7ecccb2a5729e3684b48e730b645643f0d862b7083602d60e6e0bcfe244a714000c153f18cfa8264633c099f1c017c784e3be604e6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000400000005000000ff0f00230500000001040000a2000032b505cd825afb540b89d2e507ad80fb0008000000ff010000080000000800000000020000070000000005000000020000f0080000000e000000002e3000"], &(0x7f00000014c0)=""/4096, 0x70, 0x1000, 0x1, 0x8, 0x10000, @value}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r1=>0x0, 0x29, 0x80, 0x9, 0x8fc, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0x5, 0x5}})
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f0000000700100003000000ff03000005000200", @ANYRES32=r0, @ANYBLOB="1100"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400000004000000080000000600"/28], 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r6], 0x20}}, 0x0)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
pipe2(&(0x7f0000000040), 0x100)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008000000000ff10000071000000008000"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r10}, 0x10)

670.641753ms ago: executing program 2 (id=10321):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac000000000101040000000006b8ffff0a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000008180006801400040020010000000000000000"], 0xac}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000018000680140004002081"], 0xac}}, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0xffffffffffffffff, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r7, &(0x7f0000000100)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d202"], 0x0)
ioctl$USBDEVFS_CONTROL(r6, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540), 0x2, 0x3)
ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000000080)={0x7, 0x6, {0x4e, 0xa, 0x4, {0x1, 0x2}, {0x0, 0x2}, @const={0x1, {0x0, 0x3b, 0x2, 0x3}}}, {0x54, 0x3, 0xacc, {0xb1, 0x5}, {0x4, 0x3}, @ramp={0x254, 0xc51, {0xec, 0xfff9, 0xc, 0x6}}}})

660.840483ms ago: executing program 4 (id=10322):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700ffffffff02ffffff0004020000ff00000005", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="66009dae2932fc598a7136bef09dc7f6b22cc84e29c299f23d2e17f9ca4689721fdd0b3cb5b5d62b1f5c26b41b364a91d8b9508a2b699d806e3950ee867577a7a2d5bae2a7e48a41e4bfb9fd73a900a750ec0d4a5b107309cf14be8ac1626b74503e05363e518e62b4daf8bb60d7bc8c45c95ce29b70103f58b1652547ef7c75c5115f719534b7497ca34f88fdf5470cc01d3ef37ac60890bffb303ca84ba3d05059adeb58d10a69dc9ccef3779009bac23b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_gettime(0x1, &(0x7f00000004c0))
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r3)
r4 = inotify_init1(0x800)
r5 = gettid()
fcntl$setown(r3, 0x8, r5)
fcntl$setsig(r4, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

371.166828ms ago: executing program 3 (id=10323):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f0000000300)=""/143, 0x8f}], 0x3, &(0x7f00000003c0)=""/183, 0xb7}, 0x10000)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x24, &(0x7f00000004c0)={0x40, 0x5, 0x32, {0x32, 0x4, "f69124b601511ba812a78ef91bba32b53977d8407f654d9b90d424d9bf52e749180b4bdcb563a0f1af7fa6379a56d00a"}}, &(0x7f0000000540)={0x0, 0x3, 0x13, @string={0x13, 0x3, "6399eb9ee5d0b3321f10c83546333ee9bd"}}, &(0x7f0000000580)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "35e7764a"}, @local=@item_012={0x1, 0x2, 0x9, "f1"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x466}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000680)={0x40, 0x17, 0x3, "9ba843"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a00)={0x20, 0x1, 0xbb, "ecd59c47aee302473dcb7788f6e857ef82dcadf9d72d319538966c064ab80f621973993c15f2727309b73cbf189d26a411630f3d01da90dce758622219fb3e4612c58a84cc8851a148fa8fbd85a419c2f660a80f804e11635a81b76453471e4ea3380db380990251388dff5eec2b444868b6cc06f2d3cf84e7f8aad3dea771d66dd68f1517905606f8d5566bef701d9225ece5be6a7bce080b8cda27a4da5f5961dddd21d9c0cfc616e9667ab20da5a239902012f0198ac39b9107"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x14}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', <r5=>0x0, 0x7, 0x8, 0x4f79, 0x9, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2, {[@noop, @ssrr={0x89, 0x13, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x6, [{@empty, 0x10100000}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'gretap0\x00', <r6=>0x0, 0x7, 0x700, 0x15df6578, 0x3, {{0x11, 0x4, 0x1, 0x3c, 0x44, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@ssrr={0x89, 0x2b, 0x75, [@loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @multicast1, @multicast1, @rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}}}})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc8, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0xc0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

370.663268ms ago: executing program 1 (id=10324):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
write$input_event(r7, &(0x7f0000000300)={{0x77359400}, 0x17, 0xfc01, 0x100}, 0x18)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040))
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380))
syz_emit_ethernet(0xfed7, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='neigh_update\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000040)={'wg0\x00'})

310.682373ms ago: executing program 0 (id=10325):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x424, 0x4000040)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e00008500000082000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000240)='user\x00', 0x0, &(0x7f0000000300)='net/rt_cache\x00', 0xfffffffffffffffd)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x40086602, &(0x7f00000000c0)=@v1={0x91, @adiantum, 0x0, @desc2})
socket(0x1, 0x3, 0x0)

0s ago: executing program 0 (id=10326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
syz_read_part_table(0x5c0, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
pwritev2(r7, 0x0, 0x0, 0x10001, 0x0, 0x0)
close(0xffffffffffffffff)

kernel console output (not intermixed with test programs):

[   T24] audit: type=1326 audit(2000001296.069:19102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.089535][   T24] audit: type=1326 audit(2000001296.069:19103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.113839][   T24] audit: type=1326 audit(2000001296.069:19104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.137215][ T4078] usbhid 1-1:0.0: can't add hid device: -71
[ 2115.143790][ T4078] usbhid: probe of 1-1:0.0 failed with error -71
[ 2115.150628][   T24] audit: type=1326 audit(2000001296.069:19105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.174034][ T4078] usb 1-1: USB disconnect, device number 109
[ 2115.179089][   T24] audit: type=1326 audit(2000001296.069:19106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0872aedadf code=0x7ffc0000
[ 2115.203506][   T24] audit: type=1326 audit(2000001296.069:19107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.227037][   T24] audit: type=1326 audit(2000001296.069:19108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.9941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2115.531594][ T4078] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 2115.610192][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2115.617026][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2115.624626][ T6036] device bridge_slave_0 entered promiscuous mode
[ 2115.631433][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2115.638374][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2115.645398][ T6036] device bridge_slave_1 entered promiscuous mode
[ 2115.691497][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2115.698360][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2115.705653][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2115.712401][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2115.752327][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2115.759754][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2115.767951][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2115.775971][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2115.791491][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2115.799554][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2115.806376][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2115.814058][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2115.822749][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2115.829599][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2115.846912][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2115.854843][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2115.871365][ T6036] device veth0_vlan entered promiscuous mode
[ 2115.878888][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2115.887739][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2115.895321][ T4078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[ 2115.907422][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2115.914785][ T4078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024
[ 2115.925962][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2115.940271][ T6036] device veth1_macvtap entered promiscuous mode
[ 2115.946470][ T4078] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2115.956305][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2115.964622][ T4078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2115.975439][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2116.005424][ T4078] usb 1-1: config 0 descriptor??
[ 2116.010551][T24161] Bluetooth: hci2: command 0x1003 tx timeout
[ 2116.016381][  T688] Bluetooth: hci2: sending frame failed (-49)
[ 2116.041678][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2116.331488][T24490] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 2116.436461][T24161] Bluetooth: hci1: command 0x1009 tx timeout
[ 2116.541774][  T305] device bridge_slave_0 left promiscuous mode
[ 2116.547710][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2116.555628][  T305] device veth1_macvtap left promiscuous mode
[ 2116.561568][  T305] device veth0_vlan left promiscuous mode
[ 2116.626569][  T768] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2116.702747][T24490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2116.713573][T24490] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2116.722419][T24490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2116.731514][T24490] usb 2-1: config 0 descriptor??
[ 2116.733807][ T4078] usbhid 1-1:0.0: can't add hid device: -71
[ 2116.742456][ T4078] usbhid: probe of 1-1:0.0 failed with error -71
[ 2116.751373][ T4078] usb 1-1: USB disconnect, device number 110
[ 2116.854837][  T768] usb 3-1: Using ep0 maxpacket: 16
[ 2116.969806][  T768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 2116.980551][  T768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2116.990106][  T768] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 2116.999109][  T768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2117.007627][  T768] usb 3-1: config 0 descriptor??
[ 2117.190747][ T6048] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc
[ 2117.208559][T24490] keytouch 0003:0926:3333.01EA: fixing up Keytouch IEC report descriptor
[ 2117.220348][T24490] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.01EA/input/input342
[ 2117.310416][T24490] keytouch 0003:0926:3333.01EA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 2117.513848][ T6056] udc-core: couldn't find an available UDC or it's busy
[ 2117.520945][ T6056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2117.798021][   T24] audit: type=1326 audit(2000001299.146:19109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.1.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2532a3ff9 code=0x7ffc0000
[ 2117.822996][   T24] audit: type=1326 audit(2000001299.146:19110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.1.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2532a3ff9 code=0x7ffc0000
[ 2117.846945][   T24] audit: type=1326 audit(2000001299.188:19111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.1.9943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2532a3ff9 code=0x7ffc0000
[ 2118.049672][ T4078] Bluetooth: hci2: command 0x1001 tx timeout
[ 2118.164723][  T688] Bluetooth: hci2: sending frame failed (-49)
[ 2118.281286][ T4078] usb 2-1: USB disconnect, device number 23
[ 2118.806532][ T6068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=6068 comm=syz.1.9951
[ 2119.059812][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9954'.
[ 2119.068936][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9954'.
[ 2119.078643][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9954'.
[ 2119.103922][ T6079] netem: invalid attributes len -24
[ 2119.108958][ T6079] netem: change failed
[ 2119.359134][  T768] usbhid 3-1:0.0: can't add hid device: -71
[ 2119.366187][  T768] usbhid: probe of 3-1:0.0 failed with error -71
[ 2119.376915][  T768] usb 3-1: USB disconnect, device number 105
[ 2119.884924][   T24] kauditd_printk_skb: 66 callbacks suppressed
[ 2119.884933][   T24] audit: type=1400 audit(2000001301.352:19178): avc:  denied  { bind } for  pid=6090 comm="syz.0.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 2119.975253][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2119.982193][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2119.991288][ T6092] device bridge_slave_0 entered promiscuous mode
[ 2120.007056][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2120.025342][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2120.032699][ T6092] device bridge_slave_1 entered promiscuous mode
[ 2120.087740][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2120.094638][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2120.101712][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2120.101721][  T768] Bluetooth: hci2: command 0x1009 tx timeout
[ 2120.114320][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2120.408168][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2120.420321][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2120.435741][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2120.452148][   T24] audit: type=1326 audit(2000001301.940:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.454132][  T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2120.525181][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9960'.
[ 2120.562742][   T24] audit: type=1326 audit(2000001301.982:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.641263][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2120.654047][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2120.660919][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2120.663305][   T24] audit: type=1326 audit(2000001301.982:19181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.679469][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2120.691309][   T24] audit: type=1326 audit(2000001301.982:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.714654][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2120.724196][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6109 comm=syz.2.9962
[ 2120.729103][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2120.750277][   T24] audit: type=1326 audit(2000001301.982:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.751394][  T610] tipc: Left network mode
[ 2120.782513][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2120.794480][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2120.815054][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2120.836540][   T24] audit: type=1326 audit(2000001301.982:19184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.877230][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2120.890013][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2120.902299][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2120.914647][   T24] audit: type=1326 audit(2000001301.982:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2120.950048][ T6092] device veth0_vlan entered promiscuous mode
[ 2120.969919][ T6092] device veth1_macvtap entered promiscuous mode
[ 2121.008814][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2121.019024][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2121.029575][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2121.037965][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2121.050331][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2121.099905][   T24] audit: type=1326 audit(2000001301.982:19186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2121.202855][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2121.283602][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2121.297896][   T24] audit: type=1326 audit(2000001301.982:19187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.9962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0872aeeff9 code=0x7ffc0000
[ 2121.939645][  T610] device bridge_slave_1 left promiscuous mode
[ 2121.945619][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2121.953942][  T610] device bridge_slave_0 left promiscuous mode
[ 2121.960149][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2121.968702][  T610] device veth1_macvtap left promiscuous mode
[ 2121.974565][  T610] device veth0_vlan left promiscuous mode
[ 2122.070601][ T6137] futex_wake_op: syz.2.9967 tries to shift op by -1; fix this program
[ 2123.105079][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9973'.
[ 2123.443535][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9974'.
[ 2123.761509][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2123.768494][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2123.775679][ T6168] device bridge_slave_0 entered promiscuous mode
[ 2123.782624][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2123.789514][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2123.826084][ T6168] device bridge_slave_1 entered promiscuous mode
[ 2123.919502][  T610] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2124.124135][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2124.131034][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2124.138145][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2124.145003][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2124.156221][  T610] tipc: Disabling bearer <udp:syz1>
[ 2124.164564][  T610] tipc: Left network mode
[ 2124.290799][T24161] Bluetooth: hci0: command 0x1003 tx timeout
[ 2124.297104][T26371] Bluetooth: hci0: sending frame failed (-49)
[ 2124.372723][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2124.391046][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2124.422975][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2124.430496][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2124.449101][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2124.457667][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2124.464534][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2124.474985][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2124.486194][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2124.493053][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2124.517808][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2124.527476][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2124.541967][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2124.556358][ T6168] device veth0_vlan entered promiscuous mode
[ 2124.564964][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2124.573014][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2124.580392][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2124.592087][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2124.603437][ T6168] device veth1_macvtap entered promiscuous mode
[ 2124.615606][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2124.628296][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2124.762991][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9978'.
[ 2124.853486][  T610] device bridge_slave_1 left promiscuous mode
[ 2124.859571][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2124.867043][  T610] device bridge_slave_0 left promiscuous mode
[ 2124.873376][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2124.881834][  T610] device veth1_macvtap left promiscuous mode
[ 2124.887755][  T610] device veth0_vlan left promiscuous mode
[ 2125.545970][ T6194] futex_wake_op: syz.0.9982 tries to shift op by -1; fix this program
[ 2125.732588][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9983'.
[ 2125.854041][   T25] Bluetooth: hci1: command 0x1003 tx timeout
[ 2125.860905][T26371] Bluetooth: hci1: sending frame failed (-49)
[ 2126.275657][   T25] Bluetooth: hci0: command 0x1001 tx timeout
[ 2126.281566][T26371] Bluetooth: hci0: sending frame failed (-49)
[ 2126.728220][T17341] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 2127.128224][T17341] usb 4-1: Using ep0 maxpacket: 8
[ 2127.242384][T17341] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2127.328393][T17341] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[ 2127.337328][T17341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[ 2127.345347][T17341] usb 4-1: SerialNumber: syz
[ 2127.364268][T17341] usb 4-1: config 0 descriptor??
[ 2127.410630][T17341] uvcvideo: Found UVC 0.00 device <unnamed> (05ac:8501)
[ 2127.417545][T17341] uvcvideo: No valid video chain found.
[ 2127.719991][ T6224] incfs: Can't find or create .index dir in ./file0
[ 2127.726739][ T6224] incfs: mount failed -5
[ 2128.018472][   T25] Bluetooth: hci1: command 0x1001 tx timeout
[ 2128.093918][T26371] Bluetooth: hci1: sending frame failed (-49)
[ 2128.146500][ T6224] incfs_lookup_dentry err:-14
[ 2128.184957][ T6224] incfs: Can't find or create .index dir in ./file0
[ 2128.191490][ T6224] incfs: mount failed -14
[ 2128.242352][T17341] Bluetooth: hci0: command 0x1009 tx timeout
[ 2128.327226][ T6234] netlink: 165 bytes leftover after parsing attributes in process `syz.0.9991'.
[ 2129.058756][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9993'.
[ 2129.186944][   T24] kauditd_printk_skb: 31 callbacks suppressed
[ 2129.186955][   T24] audit: type=1326 audit(2000001311.119:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.216505][   T24] audit: type=1326 audit(2000001311.119:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.242817][   T24] audit: type=1326 audit(2000001311.140:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.266985][   T24] audit: type=1326 audit(2000001311.140:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.290411][   T24] audit: type=1326 audit(2000001311.140:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.356240][T29932] usb 4-1: USB disconnect, device number 126
[ 2129.362507][   T24] audit: type=1326 audit(2000001311.140:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.388103][   T24] audit: type=1326 audit(2000001311.151:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.4.9994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75228aaff9 code=0x7ffc0000
[ 2129.718476][ T6255] futex_wake_op: syz.4.9995 tries to shift op by -1; fix this program
[ 2130.075098][   T25] Bluetooth: hci1: command 0x1009 tx timeout
[ 2130.181481][ T6265] xt_CT: No such helper "snmp_trap"
[ 2130.394111][   T24] audit: type=1326 audit(2000001312.390:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.3.10000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2130.432368][   T24] audit: type=1326 audit(2000001312.390:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.3.10000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2130.458583][   T24] audit: type=1326 audit(2000001312.411:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.3.10000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2130.698434][  T768] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 2131.070252][ T6276] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.10002' sets config #0
[ 2131.165195][  T768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2131.178042][  T768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2131.187777][  T768] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2131.196659][  T768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2131.205167][  T768] usb 4-1: config 0 descriptor??
[ 2131.818323][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2131.825469][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2131.832690][ T6283] device bridge_slave_0 entered promiscuous mode
[ 2131.839427][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2131.846288][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2131.853928][ T6283] device bridge_slave_1 entered promiscuous mode
[ 2131.870120][  T768] usb 4-1: string descriptor 0 read error: -22
[ 2131.893082][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2131.899934][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2131.907035][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2131.913833][ T6283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2131.932523][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2131.939760][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2131.947200][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2131.954504][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2131.963544][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2131.971566][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2131.978408][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2131.987251][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2131.995295][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2132.002108][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2132.012561][T29932] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2132.020812][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2132.028640][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2132.039174][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2132.050226][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2132.058151][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2132.065886][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2132.071302][  T768] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.01EB/input/input343
[ 2132.084662][   T25] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2132.093480][ T6283] device veth0_vlan entered promiscuous mode
[ 2132.093701][  T768] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.01EB/input/input344
[ 2132.110075][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2132.116512][  T768] uclogic 0003:256C:006D.01EB: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[ 2132.121616][ T6283] device veth1_macvtap entered promiscuous mode
[ 2132.140858][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2132.150901][  T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2132.272695][T24161] usb 4-1: USB disconnect, device number 127
[ 2132.317048][   T25] usb 1-1: Using ep0 maxpacket: 32
[ 2132.402998][T29932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2132.413929][T29932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2132.423635][T29932] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 2132.432895][T29932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2132.441949][T29932] usb 5-1: config 0 descriptor??
[ 2132.462164][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2132.472964][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2132.482914][   T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2132.491803][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2132.500265][   T25] usb 1-1: config 0 descriptor??
[ 2132.537484][   T25] hub 1-1:0.0: USB hub found
[ 2132.727443][ T6279] udc-core: couldn't find an available UDC or it's busy
[ 2132.734281][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2132.742361][ T6279] udc-core: couldn't find an available UDC or it's busy
[ 2132.749288][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2132.770896][ T6292] device batadv_slave_1 entered promiscuous mode
[ 2132.872620][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10006'.
[ 2132.881565][   T25] hub 1-1:0.0: 1 port detected
[ 2132.889596][T29932] saitek 0003:06A3:0621.01EC: unknown main item tag 0x0
[ 2132.907712][T29932] saitek 0003:06A3:0621.01EC: unknown main item tag 0x0
[ 2132.914537][T29932] saitek 0003:06A3:0621.01EC: unknown main item tag 0x0
[ 2132.921373][T29932] saitek 0003:06A3:0621.01EC: unknown main item tag 0x0
[ 2132.928213][T29932] saitek 0003:06A3:0621.01EC: unknown main item tag 0x0
[ 2132.936510][T29932] saitek 0003:06A3:0621.01EC: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0
[ 2132.950416][  T305] device bridge_slave_1 left promiscuous mode
[ 2132.956562][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2132.963872][  T305] device bridge_slave_0 left promiscuous mode
[ 2132.970140][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2132.985313][  T305] device veth1_macvtap left promiscuous mode
[ 2132.997230][  T305] device veth0_vlan left promiscuous mode
[ 2133.090785][ T6282] udc-core: couldn't find an available UDC or it's busy
[ 2133.097583][ T6282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2133.272390][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10007'.
[ 2133.283155][ T6300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 2133.710174][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2133.717053][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2133.724362][ T6306] device bridge_slave_0 entered promiscuous mode
[ 2133.731840][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2133.738702][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2133.746518][ T6306] device bridge_slave_1 entered promiscuous mode
[ 2133.797929][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2133.805687][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2133.840803][ T6306] device veth0_vlan entered promiscuous mode
[ 2133.851825][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2133.860227][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2133.868142][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2133.876298][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2133.884279][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2133.893073][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2133.901482][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2133.908361][ T4033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2133.915881][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2133.924549][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2133.932848][ T4078] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 2133.946954][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2133.953820][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2133.961340][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2133.969317][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2133.977641][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2133.991523][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2134.021510][   T25] hub 1-1:0.0: hub_hub_status failed (err = -32)
[ 2134.027991][   T25] hub 1-1:0.0: config failed, can't get hub status (err -32)
[ 2134.164302][   T25] usbhid 1-1:0.0: can't add hid device: -32
[ 2134.171017][   T25] usbhid: probe of 1-1:0.0 failed with error -32
[ 2134.245465][ T6306] device veth1_macvtap entered promiscuous mode
[ 2134.286798][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2134.316688][ T4078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2134.332150][ T4078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2134.347612][ T4078] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[ 2134.358082][ T4078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.377817][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2134.412092][ T4078] usb 4-1: config 0 descriptor??
[ 2134.821008][  T768] usb 5-1: USB disconnect, device number 117
[ 2134.879776][  T305] device bridge_slave_1 left promiscuous mode
[ 2134.886074][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2134.897735][  T305] device bridge_slave_0 left promiscuous mode
[ 2134.903790][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2134.911864][  T305] device veth1_macvtap left promiscuous mode
[ 2134.918010][  T305] device veth0_vlan left promiscuous mode
[ 2134.964698][T17341] usb 1-1: USB disconnect, device number 111
[ 2135.259313][ T4078] usbhid 4-1:0.0: can't add hid device: -71
[ 2135.265125][ T4078] usbhid: probe of 4-1:0.0 failed with error -71
[ 2135.274838][ T4078] usb 4-1: USB disconnect, device number 2
[ 2135.653543][   T24] kauditd_printk_skb: 87 callbacks suppressed
[ 2135.653556][   T24] audit: type=1326 audit(2000001317.904:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.711105][   T24] audit: type=1326 audit(2000001317.967:19317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.739353][   T24] audit: type=1326 audit(2000001317.967:19318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.763431][   T24] audit: type=1326 audit(2000001317.967:19319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.800124][ T6341] input: syz0 as /devices/virtual/input/input345
[ 2135.801991][   T24] audit: type=1326 audit(2000001317.967:19320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.840017][   T24] audit: type=1326 audit(2000001317.967:19321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.864689][   T24] audit: type=1326 audit(2000001317.967:19322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.890687][   T24] audit: type=1326 audit(2000001317.967:19323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23f5d2cff9 code=0x7ffc0000
[ 2135.890974][ T6345] syz.4.10021[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2135.919227][   T24] audit: type=1326 audit(2000001317.967:19324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23f5d2d033 code=0x7ffc0000
[ 2135.945128][ T6345] syz.4.10021[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2135.956457][   T24] audit: type=1326 audit(2000001317.967:19325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.2.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23f5d2badf code=0x7ffc0000
[ 2135.992005][ T4078] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 2136.011462][   T25] Bluetooth: hci0: command 0x1003 tx timeout
[ 2136.017592][T30528] Bluetooth: hci0: sending frame failed (-49)
[ 2136.744408][T21898] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 2136.782620][ T4078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2136.793397][ T4078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2136.802939][ T4078] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2136.811877][ T4078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2136.830036][ T4078] usb 3-1: config 0 descriptor??
[ 2136.973372][T21898] usb 4-1: Using ep0 maxpacket: 32
[ 2137.115983][T29932] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2137.123512][T21898] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2137.131652][T21898] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2137.140039][T21898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2137.148840][T21898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2137.158560][T21898] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2137.168188][T21898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12288, setting to 1024
[ 2137.179475][T21898] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2137.189336][T21898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2137.202130][T21898] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2137.210882][T21898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2137.224734][T21898] usb 4-1: config 0 descriptor??
[ 2137.469500][T21898] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2137.482683][T21898] usb 4-1: USB disconnect, device number 3
[ 2137.489420][T21898] usblp0: removed
[ 2137.496532][ T4078] usb 3-1: string descriptor 0 read error: -22
[ 2137.506125][T29932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2137.516846][T29932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2137.526513][T29932] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 2137.535687][T29932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2137.544444][T29932] usb 5-1: config 0 descriptor??
[ 2137.707159][ T4078] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.01ED/input/input346
[ 2137.720873][ T4078] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.01ED/input/input347
[ 2137.736012][ T4078] uclogic 0003:256C:006D.01ED: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[ 2137.898482][ T4078] usb 3-1: USB disconnect, device number 106
[ 2137.991996][   T25] Bluetooth: hci0: command 0x1001 tx timeout
[ 2137.992517][T29932] saitek 0003:06A3:0621.01EE: unknown main item tag 0x0
[ 2137.999005][T30528] Bluetooth: hci0: sending frame failed (-49)
[ 2138.006673][T29932] saitek 0003:06A3:0621.01EE: unknown main item tag 0x0
[ 2138.017895][T29932] saitek 0003:06A3:0621.01EE: unknown main item tag 0x0
[ 2138.026868][T29932] saitek 0003:06A3:0621.01EE: unknown main item tag 0x0
[ 2138.033975][T29932] saitek 0003:06A3:0621.01EE: unknown main item tag 0x0
[ 2138.041955][T29932] saitek 0003:06A3:0621.01EE: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0
[ 2138.186975][ T6358] udc-core: couldn't find an available UDC or it's busy
[ 2138.193761][ T6358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2138.334361][T29932] usb 1-1: new full-speed USB device number 112 using dummy_hcd
[ 2138.639023][T29932] usb 1-1: device descriptor read/64, error -71
[ 2139.048516][T29932] usb 1-1: device descriptor read/64, error -71
[ 2139.315051][T29932] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[ 2139.415947][ T6387] netlink: 'syz.2.10031': attribute type 4 has an invalid length.
[ 2139.730160][   T25] usb 5-1: USB disconnect, device number 118
[ 2139.781571][T29932] usb 1-1: device descriptor read/64, error -71
[ 2140.038834][   T25] Bluetooth: hci0: command 0x1009 tx timeout
[ 2140.352823][T29932] usb 1-1: device descriptor read/64, error -71
[ 2140.498227][T29932] usb usb1-port1: attempt power cycle
[ 2140.954643][ T6411] futex_wake_op: syz.0.10037 tries to shift op by 32; fix this program
[ 2142.352316][T29932] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 2142.680182][ T6437] futex_wake_op: syz.3.10044 tries to shift op by -1; fix this program
[ 2142.783897][T29932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2142.795556][T29932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2142.805320][T29932] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 2142.814214][T29932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2142.825870][T29932] usb 3-1: config 0 descriptor??
[ 2142.903751][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10045'.
[ 2143.281000][T29932] saitek 0003:06A3:0621.01EF: unknown main item tag 0x0
[ 2143.310657][T29932] saitek 0003:06A3:0621.01EF: unknown main item tag 0x0
[ 2143.465723][T29932] saitek 0003:06A3:0621.01EF: unknown main item tag 0x0
[ 2143.702880][ T6427] udc-core: couldn't find an available UDC or it's busy
[ 2143.710140][ T6427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2143.874646][T29932] saitek 0003:06A3:0621.01EF: unknown main item tag 0x0
[ 2143.893902][T29932] saitek 0003:06A3:0621.01EF: unknown main item tag 0x0
[ 2143.917270][T29932] saitek 0003:06A3:0621.01EF: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0
[ 2143.939259][   T24] kauditd_printk_skb: 70 callbacks suppressed
[ 2143.939271][   T24] audit: type=1400 audit(2000001326.611:19396): avc:  denied  { setopt } for  pid=6454 comm="syz.0.10050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2144.021152][   T24] audit: type=1400 audit(2000001326.611:19397): avc:  denied  { bind } for  pid=6454 comm="syz.0.10050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2144.073471][ T6462] FAULT_INJECTION: forcing a failure.
[ 2144.073471][ T6462] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2144.088326][ T6462] CPU: 1 PID: 6462 Comm: syz.3.10051 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 2144.098114][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2144.108008][ T6462] Call Trace:
[ 2144.111147][ T6462]  dump_stack_lvl+0x1e2/0x24b
[ 2144.115918][ T6462]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 2144.121217][ T6462]  dump_stack+0x15/0x17
[ 2144.125203][ T6462]  should_fail+0x3c6/0x510
[ 2144.129455][ T6462]  should_fail_alloc_page+0x52/0x60
[ 2144.134494][ T6462]  __alloc_pages_nodemask+0x1b3/0xaf0
[ 2144.139694][ T6462]  ? do_syscall_64+0x34/0x70
[ 2144.144119][ T6462]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2144.150028][ T6462]  ? gfp_pfmemalloc_allowed+0x120/0x120
[ 2144.155411][ T6462]  ? avc_has_perm_noaudit+0x117/0x240
[ 2144.160615][ T6462]  shmem_alloc_page+0x257/0x420
[ 2144.165295][ T6462]  ? put_page+0xd0/0xd0
[ 2144.169289][ T6462]  ? slab_post_alloc_hook+0x61/0x2f0
[ 2144.174412][ T6462]  ? percpu_counter_add_batch+0x13d/0x160
[ 2144.179966][ T6462]  shmem_alloc_and_acct_page+0x395/0x8e0
[ 2144.185432][ T6462]  ? shmem_swapin_page+0x1950/0x1950
[ 2144.190550][ T6462]  ? find_get_entry+0x44c/0x4c0
[ 2144.195238][ T6462]  ? page_cache_prev_miss+0x410/0x410
[ 2144.200445][ T6462]  ? down_read_trylock+0x179/0x1d0
[ 2144.205389][ T6462]  ? find_lock_entry+0x1df/0x200
[ 2144.210165][ T6462]  shmem_getpage_gfp+0x891/0x2480
[ 2144.215023][ T6462]  ? __kasan_check_write+0x14/0x20
[ 2144.219977][ T6462]  ? shmem_getpage+0xa0/0xa0
[ 2144.224395][ T6462]  ? iov_iter_fault_in_readable+0x31f/0x4f0
[ 2144.230130][ T6462]  shmem_write_begin+0xca/0x1b0
[ 2144.234901][ T6462]  generic_perform_write+0x2cd/0x570
[ 2144.240022][ T6462]  ? grab_cache_page_write_begin+0xa0/0xa0
[ 2144.245659][ T6462]  ? file_remove_privs+0x570/0x570
[ 2144.250608][ T6462]  ? __kasan_check_write+0x14/0x20
[ 2144.255557][ T6462]  __generic_file_write_iter+0x23c/0x560
[ 2144.261023][ T6462]  ? generic_write_checks+0x3b9/0x470
[ 2144.266318][ T6462]  generic_file_write_iter+0xaf/0x1c0
[ 2144.271656][ T6462]  vfs_write+0xb4c/0xe70
[ 2144.275730][ T6462]  ? kernel_write+0x3d0/0x3d0
[ 2144.280417][ T6462]  ? mutex_trylock+0xa0/0xa0
[ 2144.284848][ T6462]  ? __fdget_pos+0x2e7/0x3a0
[ 2144.289271][ T6462]  ? ksys_write+0x77/0x2c0
[ 2144.291615][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2144.293516][ T6462]  ksys_write+0x199/0x2c0
[ 2144.293527][ T6462]  ? sysvec_apic_timer_interrupt+0xcb/0xe0
[ 2144.293537][ T6462]  ? __ia32_sys_read+0x90/0x90
[ 2144.293547][ T6462]  ? debug_smp_processor_id+0x17/0x20
[ 2144.293562][ T6462]  __x64_sys_write+0x7b/0x90
[ 2144.300519][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2144.304538][ T6462]  do_syscall_64+0x34/0x70
[ 2144.304551][ T6462]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2144.304566][ T6462] RIP: 0033:0x7fc99c802ff9
[ 2144.312786][ T6458] device bridge_slave_0 entered promiscuous mode
[ 2144.314777][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2144.314783][ T6462] RSP: 002b:00007fc99b47c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2144.314796][ T6462] RAX: ffffffffffffffda RBX: 00007fc99c9baf80 RCX: 00007fc99c802ff9
[ 2144.314809][ T6462] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000006
[ 2144.321257][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2144.324591][ T6462] RBP: 00007fc99b47c090 R08: 0000000000000000 R09: 0000000000000000
[ 2144.324597][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2144.324603][ T6462] R13: 0000000000000000 R14: 00007fc99c9baf80 R15: 00007ffd17063548
[ 2144.525979][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2144.537676][ T6458] device bridge_slave_1 entered promiscuous mode
[ 2145.414097][T17341] usb 3-1: USB disconnect, device number 107
[ 2145.514281][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2145.524192][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2145.544223][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2145.573104][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2145.589794][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2145.596682][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2145.607797][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2145.632810][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2145.656754][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2145.663629][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2145.961620][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2146.012548][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2146.028373][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2146.051167][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2146.060541][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2146.088242][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2146.100185][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2146.122689][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2146.135421][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2146.144469][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2146.152796][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2146.166697][ T4033] device bridge_slave_1 left promiscuous mode
[ 2146.175395][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2146.195725][ T4033] device bridge_slave_0 left promiscuous mode
[ 2146.202199][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2146.212846][ T4033] device veth1_macvtap left promiscuous mode
[ 2146.219337][ T4033] device veth0_vlan left promiscuous mode
[ 2146.716377][ T6458] device veth0_vlan entered promiscuous mode
[ 2146.738096][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2146.749304][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2146.760232][ T6458] device veth1_macvtap entered promiscuous mode
[ 2146.783396][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2146.803497][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2146.814093][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2146.822577][ T6518] futex_wake_op: syz.4.10060 tries to shift op by -1; fix this program
[ 2146.888964][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2146.897639][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2148.262247][   T24] audit: type=1400 audit(2000001330.771:19398): avc:  denied  { connect } for  pid=6532 comm="syz.0.10069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2148.417161][T24161] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2148.607582][  T320] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2148.645824][T24161] usb 5-1: Using ep0 maxpacket: 16
[ 2148.798318][T24161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2148.809656][T24161] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2148.840325][T24161] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2148.890675][T24161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2148.912887][T24161] usb 5-1: config 0 descriptor??
[ 2148.990621][   T24] audit: type=1400 audit(2000001331.915:19399): avc:  denied  { read } for  pid=80 comm="acpid" name="event-" dev="devtmpfs" ino=6271 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 2149.012294][   T24] audit: type=1400 audit(2000001331.915:19400): avc:  denied  { open } for  pid=80 comm="acpid" path="/dev/input/event-" dev="devtmpfs" ino=6271 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 2149.035102][   T24] audit: type=1400 audit(2000001331.915:19401): avc:  denied  { ioctl } for  pid=80 comm="acpid" path="/dev/input/event-" dev="devtmpfs" ino=6271 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[ 2149.160313][  T320] usb 4-1: config 0 has no interfaces?
[ 2149.378050][  T320] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f
[ 2149.386705][T24161] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.01F0/input/input348
[ 2149.532731][  T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[ 2149.541247][  T320] usb 4-1: Product: syz
[ 2149.545232][  T320] usb 4-1: Manufacturer: syz
[ 2149.550980][  T320] usb 4-1: SerialNumber: syz
[ 2149.556132][  T320] usb 4-1: config 0 descriptor??
[ 2149.567240][T24161] microsoft 0003:045E:07DA.01F0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[ 2149.585931][T24161] usb 5-1: USB disconnect, device number 119
[ 2149.792802][   T25] usb 4-1: USB disconnect, device number 4
[ 2149.935984][ T6570] futex_wake_op: syz.1.10078 tries to shift op by -1; fix this program
[ 2150.291144][   T24] audit: type=1326 audit(2000001333.281:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.362891][   T24] audit: type=1326 audit(2000001333.312:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.410353][   T24] audit: type=1326 audit(2000001333.312:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.470406][   T24] audit: type=1326 audit(2000001333.312:19405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.540177][   T24] audit: type=1326 audit(2000001333.312:19406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.584010][   T24] audit: type=1326 audit(2000001333.312:19407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2150.635713][  T320] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2150.648478][   T24] audit: type=1326 audit(2000001333.312:19408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.3.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2151.251931][ T6597] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 2151.273719][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2151.293632][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2151.312273][  T320] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2151.330495][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.331943][ T6606] device veth1_to_team entered promiscuous mode
[ 2151.351758][  T320] usb 4-1: config 0 descriptor??
[ 2151.750613][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10088'.
[ 2152.044781][  T320] usb 4-1: string descriptor 0 read error: -22
[ 2152.088550][ T6623] futex_wake_op: syz.4.10093 tries to shift op by -1; fix this program
[ 2152.255816][  T320] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.01F1/input/input349
[ 2152.280249][  T320] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.01F1/input/input350
[ 2152.294952][  T320] uclogic 0003:256C:006D.01F1: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[ 2152.451905][  T320] usb 4-1: USB disconnect, device number 5
[ 2152.759273][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10099'.
[ 2152.768099][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10099'.
[ 2152.782090][ T6644] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 2153.512703][ T6657] syz.2.10102[6657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2153.512771][ T6657] syz.2.10102[6657] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2153.617863][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10103'.
[ 2153.662515][ T6665] device vlan2 entered promiscuous mode
[ 2153.667983][ T6665] device ip6gretap0 entered promiscuous mode
[ 2154.011378][   T15] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 2154.071437][   T24] kauditd_printk_skb: 131 callbacks suppressed
[ 2154.071449][   T24] audit: type=1326 audit(2000001337.251:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.102707][   T24] audit: type=1326 audit(2000001337.282:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.320388][   T24] audit: type=1326 audit(2000001337.524:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.348871][   T24] audit: type=1326 audit(2000001337.535:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.377880][   T24] audit: type=1326 audit(2000001337.577:19544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.408775][   T24] audit: type=1326 audit(2000001337.608:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.453614][   T24] audit: type=1326 audit(2000001337.640:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.453760][   T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2154.491723][   T24] audit: type=1326 audit(2000001337.661:19547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.516521][   T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2154.535868][   T15] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2154.548077][   T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2154.556891][   T15] usb 2-1: config 0 descriptor??
[ 2154.591863][   T24] audit: type=1326 audit(2000001337.787:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.615686][   T24] audit: type=1326 audit(2000001337.787:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad7ce9bfb code=0x7ffc0000
[ 2154.737869][ T6686] futex_wake_op: syz.3.10108 tries to shift op by -1; fix this program
[ 2155.272531][   T15] usb 2-1: string descriptor 0 read error: -22
[ 2155.387039][T29932] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2155.483771][   T15] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.01F2/input/input352
[ 2155.521632][   T15] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.01F2/input/input353
[ 2155.564428][   T15] uclogic 0003:256C:006D.01F2: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[ 2155.729855][T29932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2155.747201][T29932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2155.757162][   T15] usb 2-1: USB disconnect, device number 24
[ 2155.834561][T29932] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2155.843657][T29932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2155.851554][T29932] usb 5-1: SerialNumber: syz
[ 2156.042140][ T6708] binder: 6705:6708 ioctl 4018620d 0 returned -22
[ 2156.570474][T17341] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 2157.465770][T17341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2157.475858][T17341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2157.586175][T17341] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2157.595259][T17341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2157.603453][T17341] usb 3-1: SerialNumber: syz
[ 2158.027857][ T4033] tipc: Disabling bearer <udp:syz2>
[ 2158.035201][ T4033] tipc: Left network mode
[ 2158.939314][T24161] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 2159.064913][T17341] usb 3-1: 0:2 : does not exist
[ 2159.069663][T17341] usb 3-1: unit 5: unexpected type 0x09
[ 2159.077442][T17341] usb 3-1: USB disconnect, device number 108
[ 2159.084021][T29932] usb 5-1: 0:2 : does not exist
[ 2159.095911][T29932] usb 5-1: unit 5 not found!
[ 2159.126769][T26034] udevd[26034]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 2159.144537][T29932] usb 5-1: USB disconnect, device number 120
[ 2159.154171][ T4033] device bridge_slave_1 left promiscuous mode
[ 2159.174438][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2159.182286][T16683] udevd[16683]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[ 2159.198563][ T4033] device bridge_slave_0 left promiscuous mode
[ 2159.204487][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2160.274547][ T4033] device veth1_macvtap left promiscuous mode
[ 2160.280385][ T4033] device veth0_vlan left promiscuous mode
[ 2160.436677][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2160.475903][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2160.508791][T24161] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 2160.575649][T24161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2160.594295][T24161] usb 2-1: config 0 descriptor??
[ 2160.647751][   T24] kauditd_printk_skb: 90 callbacks suppressed
[ 2160.647764][   T24] audit: type=1326 audit(2000001344.162:19640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.679699][   T24] audit: type=1326 audit(2000001344.193:19641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.705517][   T24] audit: type=1326 audit(2000001344.193:19642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.730112][   T24] audit: type=1326 audit(2000001344.193:19643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.753823][   T24] audit: type=1326 audit(2000001344.193:19644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.780438][   T24] audit: type=1326 audit(2000001344.193:19645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.805602][   T24] audit: type=1326 audit(2000001344.193:19646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.829910][   T24] audit: type=1326 audit(2000001344.193:19647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.856938][   T24] audit: type=1326 audit(2000001344.193:19648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2160.887707][   T24] audit: type=1326 audit(2000001344.193:19649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.3.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2161.024883][T24161] saitek 0003:06A3:0621.01F3: unknown main item tag 0x0
[ 2161.032715][T24161] saitek 0003:06A3:0621.01F3: unknown main item tag 0x0
[ 2161.039576][T24161] saitek 0003:06A3:0621.01F3: unknown main item tag 0x0
[ 2161.046719][T24161] saitek 0003:06A3:0621.01F3: unknown main item tag 0x0
[ 2161.053771][T24161] saitek 0003:06A3:0621.01F3: unknown main item tag 0x0
[ 2161.062423][T24161] saitek 0003:06A3:0621.01F3: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0
[ 2161.219453][ T6749] udc-core: couldn't find an available UDC or it's busy
[ 2161.226537][ T6749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2162.060951][T24161] Bluetooth: hci0: command 0x1003 tx timeout
[ 2162.066897][T30528] Bluetooth: hci0: sending frame failed (-49)
[ 2162.613005][T24161] usb 2-1: USB disconnect, device number 25
[ 2163.480508][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10140'.
[ 2164.041755][T24161] Bluetooth: hci0: command 0x1001 tx timeout
[ 2164.047610][T30528] Bluetooth: hci0: sending frame failed (-49)
[ 2164.443225][ T6823] futex_wake_op: syz.1.10143 tries to shift op by -1; fix this program
[ 2164.910926][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2164.918103][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2164.925353][ T6830] device bridge_slave_0 entered promiscuous mode
[ 2164.932785][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2164.939935][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2164.949895][ T6830] device bridge_slave_1 entered promiscuous mode
[ 2165.078823][ T4033] device ip6gretap0 left promiscuous mode
[ 2165.210595][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2165.217504][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2165.224639][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2165.231482][ T6830] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2165.239082][  T320] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2165.271053][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2165.281125][T13660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2165.288465][T13660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2165.308214][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2165.367206][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10150'.
[ 2165.401989][T13660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2165.408882][T13660] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2165.433151][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2165.441126][   T24] kauditd_printk_skb: 125 callbacks suppressed
[ 2165.441136][   T24] audit: type=1326 audit(2000001349.203:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.464490][T13660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2165.477432][T13660] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2165.489783][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2165.499217][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2165.506793][   T24] audit: type=1326 audit(2000001349.214:19776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.543352][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2165.557647][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2165.566853][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2165.575028][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2165.582660][ T6830] device veth0_vlan entered promiscuous mode
[ 2165.596955][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2165.615519][  T320] usb 4-1: device descriptor read/64, error -71
[ 2165.626868][ T6830] device veth1_macvtap entered promiscuous mode
[ 2165.653212][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2165.664064][T13660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2165.675612][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10149'.
[ 2165.685069][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10149'.
[ 2165.745910][   T24] audit: type=1326 audit(2000001349.518:19777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.770910][   T24] audit: type=1326 audit(2000001349.539:19778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.794767][   T24] audit: type=1326 audit(2000001349.560:19779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.818373][   T24] audit: type=1326 audit(2000001349.581:19780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.844075][   T24] audit: type=1326 audit(2000001349.623:19781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.868269][   T24] audit: type=1326 audit(2000001349.634:19782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2165.930200][ T4033] device bridge_slave_1 left promiscuous mode
[ 2165.937816][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2165.950469][ T4033] device bridge_slave_0 left promiscuous mode
[ 2165.960216][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2165.965839][ T6855] binder: 6853:6855 ioctl 4018620d 0 returned -22
[ 2165.979477][ T4033] device veth1_macvtap left promiscuous mode
[ 2165.985758][ T4033] device veth0_vlan left promiscuous mode
[ 2166.043010][  T320] usb 4-1: device descriptor read/64, error -71
[ 2166.043269][T24161] Bluetooth: hci0: command 0x1009 tx timeout
[ 2166.326444][  T320] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2166.355572][   T24] audit: type=1326 audit(2000001350.159:19783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2166.442891][   T24] audit: type=1326 audit(2000001350.201:19784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.3.10148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99c802bfb code=0x7ffc0000
[ 2166.659964][  T320] usb 4-1: device descriptor read/64, error -71
[ 2167.331478][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10155'.
[ 2167.830860][T17341] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2167.966852][ T6884] futex_wake_op: syz.0.10158 tries to shift op by -1; fix this program
[ 2167.992997][T24161] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 2168.011724][  T320] usb 4-1: device descriptor read/64, error -71
[ 2168.126330][  T320] usb usb4-port1: attempt power cycle
[ 2168.174004][T17341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2168.335770][T17341] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2168.344669][T17341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2168.352474][T17341] usb 5-1: Product: syz
[ 2168.356465][T17341] usb 5-1: Manufacturer: syz
[ 2168.360841][T17341] usb 5-1: SerialNumber: syz
[ 2168.364289][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2168.376382][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2168.376475][T17341] usb 5-1: config 0 descriptor??
[ 2168.390954][T24161] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2168.399746][T24161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2168.408367][T24161] usb 2-1: config 0 descriptor??
[ 2168.516051][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2168.523166][  T320] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2168.525673][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2168.537895][ T6889] device bridge_slave_0 entered promiscuous mode
[ 2168.544628][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2168.551547][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2168.558979][ T6889] device bridge_slave_1 entered promiscuous mode
[ 2168.726022][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2168.726609][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2168.743554][ T6889] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2168.745070][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2168.750710][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2168.767003][ T6889] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2168.774223][  T320] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2168.792794][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2168.800989][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2168.812817][  T320] usb 4-1: config 0 descriptor??
[ 2168.818069][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2168.830458][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2168.838995][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2168.877852][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2168.896353][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2168.910931][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2168.932590][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2168.940595][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2168.948544][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2168.960939][ T6889] device veth0_vlan entered promiscuous mode
[ 2168.976803][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2168.986860][ T6889] device veth1_macvtap entered promiscuous mode
[ 2168.998395][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2169.016296][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2169.087504][T24161] usb 2-1: string descriptor 0 read error: -22
[ 2169.269672][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10164'.
[ 2169.325633][T24161] uclogic 0003:256C:006D.01F4: failed retrieving string descriptor #200: -71
[ 2169.337461][T24161] uclogic 0003:256C:006D.01F4: failed retrieving pen parameters: -71
[ 2169.358786][T24161] uclogic 0003:256C:006D.01F4: failed probing pen v2 parameters: -71
[ 2169.375001][T24161] uclogic 0003:256C:006D.01F4: failed probing parameters: -71
[ 2169.390590][T24161] uclogic: probe of 0003:256C:006D.01F4 failed with error -71
[ 2169.407235][T24161] usb 2-1: USB disconnect, device number 26
[ 2169.516525][  T320] usb 4-1: string descriptor 0 read error: -22
[ 2169.715929][  T320] uclogic 0003:256C:006D.01F5: failed retrieving string descriptor #200: -71
[ 2169.724582][  T320] uclogic 0003:256C:006D.01F5: failed retrieving pen parameters: -71
[ 2169.732461][  T320] uclogic 0003:256C:006D.01F5: failed probing pen v2 parameters: -71
[ 2169.740357][  T320] uclogic 0003:256C:006D.01F5: failed probing parameters: -71
[ 2169.747685][  T320] uclogic: probe of 0003:256C:006D.01F5 failed with error -71
[ 2169.756382][  T320] usb 4-1: USB disconnect, device number 8
[ 2169.935454][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10166'.
[ 2169.944786][T24161] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 2170.191914][T24161] usb 1-1: Using ep0 maxpacket: 16
[ 2170.391743][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2170.461603][T22063] usb 5-1: USB disconnect, device number 121
[ 2170.501916][   T24] kauditd_printk_skb: 162 callbacks suppressed
[ 2170.501928][   T24] audit: type=1326 audit(2000001354.507:19947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.534331][   T24] audit: type=1326 audit(2000001354.507:19948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.544831][T24161] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2170.558463][   T24] audit: type=1326 audit(2000001354.507:19949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.601307][   T24] audit: type=1326 audit(2000001354.518:19950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.625350][   T24] audit: type=1326 audit(2000001354.518:19951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.651975][   T24] audit: type=1326 audit(2000001354.518:19952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.677984][   T24] audit: type=1326 audit(2000001354.518:19953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.701985][   T24] audit: type=1326 audit(2000001354.518:19954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.725843][T24161] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 2170.733700][   T24] audit: type=1326 audit(2000001354.518:19955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2170.757760][T24161] usb 1-1: can't read configurations, error -61
[ 2170.766656][   T24] audit: type=1326 audit(2000001354.518:19956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.4.10171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f251043d033 code=0x7ffc0000
[ 2170.915565][T24161] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2170.982237][T22063] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2171.163081][T24161] usb 1-1: Using ep0 maxpacket: 16
[ 2171.182759][   T49] device bridge_slave_1 left promiscuous mode
[ 2171.188752][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2171.196108][   T49] device bridge_slave_0 left promiscuous mode
[ 2171.202145][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2171.209750][   T49] device veth1_macvtap left promiscuous mode
[ 2171.215896][   T49] device veth0_vlan left promiscuous mode
[ 2171.286975][T22063] usb 5-1: device descriptor read/64, error -71
[ 2171.334424][T24161] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2171.477433][T24161] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 2171.484960][T24161] usb 1-1: can't read configurations, error -61
[ 2171.491517][T24161] usb usb1-port1: attempt power cycle
[ 2171.553599][T17341] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2171.677601][T22063] usb 5-1: device descriptor read/64, error -71
[ 2171.886743][T24161] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 2171.896754][T17341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2171.907840][T17341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2171.917637][T17341] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2171.926549][T17341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2171.943814][T22063] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2171.945355][T17341] usb 4-1: config 0 descriptor??
[ 2172.001071][T24161] usb 1-1: Using ep0 maxpacket: 16
[ 2172.200883][ T4078] Bluetooth: hci1: command 0x1003 tx timeout
[ 2172.206867][  T688] Bluetooth: hci1: sending frame failed (-49)
[ 2172.213548][T24161] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2172.258038][T22063] usb 5-1: device descriptor read/64, error -71
[ 2172.315144][T24161] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 2172.331580][T24161] usb 1-1: can't read configurations, error -71
[ 2172.715408][T22063] usb 5-1: device descriptor read/64, error -71
[ 2172.830047][T22063] usb usb5-port1: attempt power cycle
[ 2173.191331][T17341] usb 4-1: string descriptor 0 read error: -71
[ 2173.210565][T17341] uclogic 0003:256C:006D.01F6: failed retrieving string descriptor #200: -71
[ 2173.219191][T17341] uclogic 0003:256C:006D.01F6: failed retrieving pen parameters: -71
[ 2173.227438][T17341] uclogic 0003:256C:006D.01F6: failed probing pen v2 parameters: -71
[ 2173.235686][T17341] uclogic 0003:256C:006D.01F6: failed probing parameters: -71
[ 2173.243348][T17341] uclogic: probe of 0003:256C:006D.01F6 failed with error -71
[ 2173.255763][T17341] usb 4-1: USB disconnect, device number 9
[ 2173.257732][T22063] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2173.382543][ T6968] tipc: Started in network mode
[ 2173.393244][ T6968] tipc: Own node identity 1, cluster identity 4711
[ 2173.409574][ T6968] tipc: 32-bit node address hash set to 1
[ 2173.495798][T22063] usb 5-1: device descriptor read/8, error -71
[ 2173.730469][T22063] usb 5-1: device descriptor read/8, error -71
[ 2173.747935][T24161] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 2174.181131][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2174.192053][T24161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2174.236508][T24161] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2174.245907][T24161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2174.247181][ T6984] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 2174.257356][T24161] usb 2-1: config 0 descriptor??
[ 2174.263047][ T6984] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff)
[ 2174.267944][ T4078] Bluetooth: hci1: command 0x1001 tx timeout
[ 2174.282160][ T6984] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 2174.288657][  T688] Bluetooth: hci1: sending frame failed (-49)
[ 2174.292383][ T6984] tipc: Enabled bearer <eth:veth0_to_batadv>, priority 10
[ 2174.428904][ T6984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2174.435953][ T6984] IPv6: NLM_F_CREATE should be set when creating new route
[ 2174.753262][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10190'.
[ 2174.952482][T24161] usb 2-1: string descriptor 0 read error: -22
[ 2175.135840][ T7009] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2175.162255][T24161] uclogic 0003:256C:006D.01F7: failed retrieving string descriptor #200: -71
[ 2175.178687][T24161] uclogic 0003:256C:006D.01F7: failed retrieving pen parameters: -71
[ 2175.231618][T24161] uclogic 0003:256C:006D.01F7: failed probing pen v2 parameters: -71
[ 2175.241028][T24161] uclogic 0003:256C:006D.01F7: failed probing parameters: -71
[ 2175.250187][T24161] uclogic: probe of 0003:256C:006D.01F7 failed with error -71
[ 2175.293653][T24161] usb 2-1: USB disconnect, device number 27
[ 2175.609812][T22063] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 2175.629030][   T24] kauditd_printk_skb: 189 callbacks suppressed
[ 2175.629041][   T24] audit: type=1326 audit(2000001359.895:20146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.682236][   T24] audit: type=1326 audit(2000001359.927:20147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.709471][   T24] audit: type=1326 audit(2000001359.948:20148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.733587][   T24] audit: type=1326 audit(2000001359.979:20149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.760733][   T24] audit: type=1326 audit(2000001360.011:20150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.799581][   T24] audit: type=1326 audit(2000001360.032:20151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2175.904614][T22063] usb 1-1: device descriptor read/64, error -71
[ 2176.047500][   T24] audit: type=1326 audit(2000001360.337:20152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2176.085580][   T24] audit: type=1326 audit(2000001360.358:20153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2176.109199][   T24] audit: type=1326 audit(2000001360.379:20154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2176.132685][   T24] audit: type=1326 audit(2000001360.400:20155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.10191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2176.173920][T24490] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 2176.489260][T24161] Bluetooth: hci1: command 0x1009 tx timeout
[ 2176.533213][T24490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2176.545918][T24490] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2176.555709][T24490] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 2176.564614][T24490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2176.571518][T22063] usb 1-1: device descriptor read/64, error -71
[ 2176.579251][T24490] usb 2-1: config 0 descriptor??
[ 2176.878045][T22063] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2177.172006][T24490] hid-picolcd 0003:04D8:F002.01F8: item fetching failed at offset 3/5
[ 2177.180084][T24490] hid-picolcd 0003:04D8:F002.01F8: device report parse failed
[ 2177.189507][T24490] hid-picolcd: probe of 0003:04D8:F002.01F8 failed with error -22
[ 2177.313776][T22063] usb 1-1: device descriptor read/64, error -71
[ 2177.656433][ T4078] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 2177.704041][T22063] usb 1-1: device descriptor read/64, error -71
[ 2177.827875][T22063] usb usb1-port1: attempt power cycle
[ 2177.843298][T24490] usb 2-1: USB disconnect, device number 28
[ 2177.921299][ T7071] tipc: Started in network mode
[ 2177.926188][ T7071] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711
[ 2177.935924][ T7071] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 2177.944143][ T7071] tipc: Enabled bearer <udp:syz1>, priority 10
[ 2178.509459][ T4078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2178.523106][ T4078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2178.558196][ T4078] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2178.602281][ T7077] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2178.626148][ T4078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2178.646931][ T7077] exFAT-fs (loop0): hint_cluster is invalid (17)
[ 2178.647348][ T4078] usb 4-1: config 0 descriptor??
[ 2179.063784][T24161] tipc: 32-bit node address hash set to 1000000
[ 2179.136265][T22063] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 2179.341752][T22063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2179.352585][T22063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2179.363452][T22063] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2179.372426][T22063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2179.381028][T22063] usb 1-1: config 0 descriptor??
[ 2179.570950][ T4078] usb 4-1: string descriptor 0 read error: -22
[ 2179.951217][ T4078] uclogic 0003:256C:006D.01F9: failed retrieving string descriptor #200: -71
[ 2179.960091][ T4078] uclogic 0003:256C:006D.01F9: failed retrieving pen parameters: -71
[ 2179.970323][ T4078] uclogic 0003:256C:006D.01F9: failed probing pen v2 parameters: -71
[ 2179.978504][ T4078] uclogic 0003:256C:006D.01F9: failed probing parameters: -71
[ 2180.106451][ T4078] uclogic: probe of 0003:256C:006D.01F9 failed with error -71
[ 2180.117981][ T4078] usb 4-1: USB disconnect, device number 10
[ 2180.143666][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2180.150586][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2180.158348][ T7100] device bridge_slave_0 entered promiscuous mode
[ 2180.165307][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2180.172274][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2180.179618][ T7100] device bridge_slave_1 entered promiscuous mode
[ 2180.228436][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2180.235277][ T7100] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2180.242447][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2180.249290][ T7100] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2180.271434][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2180.278744][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2180.286459][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2180.293923][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2180.304938][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2180.312879][T22063] usb 1-1: string descriptor 0 read error: -22
[ 2180.319288][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2180.326143][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2180.335092][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2180.343209][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2180.350050][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2180.365197][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2180.382051][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2180.410239][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2180.424174][ T7100] device veth0_vlan entered promiscuous mode
[ 2180.430863][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2180.439178][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2180.448007][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2180.476206][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2180.486318][ T7100] device veth1_macvtap entered promiscuous mode
[ 2180.513916][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2180.529593][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2181.013884][   T24] kauditd_printk_skb: 94 callbacks suppressed
[ 2181.013905][   T24] audit: type=1326 audit(2000001365.546:20250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.049397][   T24] audit: type=1326 audit(2000001365.557:20251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.073065][   T24] audit: type=1326 audit(2000001365.588:20252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.096930][   T24] audit: type=1326 audit(2000001365.588:20253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.121127][   T24] audit: type=1326 audit(2000001365.588:20254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.122393][T23527] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 2181.145094][   T24] audit: type=1326 audit(2000001365.588:20255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.177843][   T24] audit: type=1326 audit(2000001365.588:20256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f251043cff9 code=0x7ffc0000
[ 2181.202149][   T24] audit: type=1326 audit(2000001365.588:20257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f251043d033 code=0x7ffc0000
[ 2181.225576][   T24] audit: type=1326 audit(2000001365.588:20258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f251043badf code=0x7ffc0000
[ 2181.236680][T22063] uclogic 0003:256C:006D.01FA: failed retrieving string descriptor #100: -71
[ 2181.253521][   T24] audit: type=1326 audit(2000001365.588:20259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.4.10219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f251043d087 code=0x7ffc0000
[ 2181.283148][T22063] uclogic 0003:256C:006D.01FA: failed retrieving pen parameters: -71
[ 2181.302982][T22063] uclogic 0003:256C:006D.01FA: failed probing pen v1 parameters: -71
[ 2181.322508][ T4078] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2181.334640][T22063] uclogic 0003:256C:006D.01FA: failed probing parameters: -71
[ 2181.352669][T22063] uclogic: probe of 0003:256C:006D.01FA failed with error -71
[ 2181.387165][T22063] usb 1-1: USB disconnect, device number 121
[ 2181.446992][  T610] device bridge_slave_1 left promiscuous mode
[ 2181.447418][ T7136] binder: Unknown parameter 'Lj_type'
[ 2181.461576][  T610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2181.475304][  T610] device bridge_slave_0 left promiscuous mode
[ 2181.490237][  T610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2181.493599][T23527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2181.508650][  T610] device veth1_macvtap left promiscuous mode
[ 2181.517193][  T610] device veth0_vlan left promiscuous mode
[ 2181.561073][T23527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2181.570736][T23527] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2181.582177][T23527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2181.593906][T23527] usb 2-1: config 0 descriptor??
[ 2181.626777][ T4078] usb 5-1: device descriptor read/64, error -71
[ 2182.131880][ T4078] usb 5-1: device descriptor read/64, error -71
[ 2182.549416][ T4078] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 2183.178446][ T4078] usb 5-1: device descriptor read/64, error -71
[ 2183.317968][ T7165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2183.509176][T23527] usbhid 2-1:0.0: can't add hid device: -71
[ 2183.515484][T23527] usbhid: probe of 2-1:0.0 failed with error -71
[ 2183.526405][T23527] usb 2-1: USB disconnect, device number 29
[ 2183.867966][ T4078] usb 5-1: device descriptor read/64, error -71
[ 2184.036216][ T4078] usb usb5-port1: attempt power cycle
[ 2184.712486][T23527] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 2184.796760][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.805938][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.815504][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.825724][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.853560][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.887823][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.907901][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2184.995703][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2185.021608][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2185.031984][ T7193] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10237'.
[ 2185.140417][T23527] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2185.790534][T23527] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2185.801210][T23527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2185.813761][T23527] usb 2-1: Product: syz
[ 2185.818925][T23527] usb 2-1: Manufacturer: syz
[ 2185.823541][T23527] usb 2-1: SerialNumber: syz
[ 2186.121594][   T24] kauditd_printk_skb: 62 callbacks suppressed
[ 2186.121608][   T24] audit: type=1326 audit(2000001370.924:20322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.166610][   T24] audit: type=1326 audit(2000001370.945:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.217001][   T24] audit: type=1326 audit(2000001370.945:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.241575][ T7223] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2186.363096][   T24] audit: type=1326 audit(2000001370.945:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.416174][   T24] audit: type=1326 audit(2000001370.945:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.685839][   T24] audit: type=1326 audit(2000001370.945:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc81340ff9 code=0x7ffc0000
[ 2186.730198][ T4078] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2186.749912][T23527] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 2186.857927][T23527] usb 2-1: USB disconnect, device number 30
[ 2186.866412][T23527] usblp0: removed
[ 2186.875078][   T24] audit: type=1326 audit(2000001370.945:20328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc81341033 code=0x7ffc0000
[ 2186.940729][   T24] audit: type=1326 audit(2000001370.945:20329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc8133fadf code=0x7ffc0000
[ 2186.975310][   T24] audit: type=1326 audit(2000001370.945:20330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc81341087 code=0x7ffc0000
[ 2187.007350][   T24] audit: type=1326 audit(2000001370.945:20331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.0.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc8133f990 code=0x7ffc0000
[ 2187.063307][ T4078] usb 1-1: device descriptor read/64, error -71
[ 2187.556299][ T4078] usb 1-1: device descriptor read/64, error -71
[ 2188.005942][ T4078] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 2188.312488][ T4078] usb 1-1: device descriptor read/64, error -71
[ 2189.847759][ T7301] __nla_validate_parse: 92 callbacks suppressed
[ 2189.847780][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10263'.
[ 2191.574847][   T24] kauditd_printk_skb: 59 callbacks suppressed
[ 2191.574856][   T24] audit: type=1400 audit(2000001376.637:20391): avc:  denied  { mount } for  pid=7291 comm="syz.2.10262" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2191.696217][   T24] audit: type=1400 audit(2000001376.774:20392): avc:  denied  { unmount } for  pid=7100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 2192.012090][ T3124] Bluetooth: hci0: command 0x1003 tx timeout
[ 2192.018462][  T688] Bluetooth: hci0: sending frame failed (-49)
[ 2192.307314][ T7339] FAULT_INJECTION: forcing a failure.
[ 2192.307314][ T7339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2192.324581][ T7339] CPU: 0 PID: 7339 Comm: syz.3.10274 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0
[ 2192.334367][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2192.344260][ T7339] Call Trace:
[ 2192.347393][ T7339]  dump_stack_lvl+0x1e2/0x24b
[ 2192.351910][ T7339]  ? bfq_pos_tree_add_move+0x43b/0x43b
[ 2192.357199][ T7339]  dump_stack+0x15/0x17
[ 2192.361186][ T7339]  should_fail+0x3c6/0x510
[ 2192.365442][ T7339]  should_fail_usercopy+0x1a/0x20
[ 2192.370298][ T7339]  _copy_from_user+0x20/0xd0
[ 2192.374727][ T7339]  kstrtouint_from_user+0xca/0x2a0
[ 2192.379677][ T7339]  ? kstrtol_from_user+0x310/0x310
[ 2192.384627][ T7339]  ? snprintf+0xd6/0x120
[ 2192.388702][ T7339]  ? memset+0x35/0x40
[ 2192.392521][ T7339]  proc_fail_nth_write+0xa6/0x290
[ 2192.397385][ T7339]  ? security_file_permission+0x7b/0xb0
[ 2192.402771][ T7339]  ? proc_fail_nth_read+0x210/0x210
[ 2192.407800][ T7339]  ? security_file_permission+0x86/0xb0
[ 2192.413182][ T7339]  ? rw_verify_area+0x1c3/0x360
[ 2192.417872][ T7339]  ? proc_fail_nth_read+0x210/0x210
[ 2192.422897][ T7339]  vfs_write+0x36a/0xe70
[ 2192.426984][ T7339]  ? kernel_write+0x3d0/0x3d0
[ 2192.431498][ T7339]  ? __kasan_check_write+0x14/0x20
[ 2192.436441][ T7339]  ? mutex_lock+0xa5/0x110
[ 2192.440693][ T7339]  ? mutex_trylock+0xa0/0xa0
[ 2192.445116][ T7339]  ? __fdget_pos+0x2e7/0x3a0
[ 2192.449540][ T7339]  ? ksys_write+0x77/0x2c0
[ 2192.453795][ T7339]  ksys_write+0x199/0x2c0
[ 2192.457958][ T7339]  ? __ia32_sys_read+0x90/0x90
[ 2192.462564][ T7339]  ? __kasan_check_write+0x14/0x20
[ 2192.467524][ T7339]  ? fput_many+0x160/0x1b0
[ 2192.471772][ T7339]  ? debug_smp_processor_id+0x17/0x20
[ 2192.476971][ T7339]  __x64_sys_write+0x7b/0x90
[ 2192.481406][ T7339]  do_syscall_64+0x34/0x70
[ 2192.485648][ T7339]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 2192.491369][ T7339] RIP: 0033:0x7fc99c801adf
[ 2192.495617][ T7339] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[ 2192.515065][ T7339] RSP: 002b:00007fc99b45b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2192.523304][ T7339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc99c801adf
[ 2192.531282][ T7339] RDX: 0000000000000001 RSI: 00007fc99b45b0a0 RDI: 0000000000000009
[ 2192.539182][ T7339] RBP: 00007fc99b45b090 R08: 0000000000000000 R09: 0000000000000000
[ 2192.546984][ T7339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2192.554883][ T7339] R13: 0000000000000000 R14: 00007fc99c9bb058 R15: 00007ffd17063548
[ 2192.652718][   T24] audit: type=1326 audit(2000001377.782:20393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.693457][   T24] audit: type=1326 audit(2000001377.782:20394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.717489][   T24] audit: type=1326 audit(2000001377.803:20395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.741455][   T24] audit: type=1326 audit(2000001377.803:20396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.783285][   T24] audit: type=1326 audit(2000001377.803:20397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.820249][   T24] audit: type=1326 audit(2000001377.803:20398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc99c802ff9 code=0x7ffc0000
[ 2192.851125][   T24] audit: type=1326 audit(2000001377.803:20399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc99c803033 code=0x7ffc0000
[ 2192.878405][   T24] audit: type=1326 audit(2000001377.814:20400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.3.10277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc99c801adf code=0x7ffc0000
[ 2192.980746][ T7353] syz.2.10278[7353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2192.981235][ T7353] syz.2.10278[7353] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2193.133133][T17341] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 2193.442731][T17341] usb 4-1: device descriptor read/64, error -71
[ 2193.448967][T29932] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[ 2193.460130][ T7360] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 2193.469604][ T7360] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[ 2193.480318][ T7360] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038 (0x7fffffff)
[ 2193.529140][ T6599] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2193.918877][T29932] usb 3-1: config index 0 descriptor too short (expected 65233, got 154)
[ 2193.927192][T29932] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 2193.935746][T29932] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 2193.946385][T29932] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4
[ 2193.975910][   T25] Bluetooth: hci0: command 0x1001 tx timeout
[ 2193.976557][T17341] usb 4-1: device descriptor read/64, error -71
[ 2193.981865][  T688] Bluetooth: hci0: sending frame failed (-49)
[ 2193.995057][ T6599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2194.005844][ T6599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2194.015530][ T6599] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 2194.024395][ T6599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.034907][ T6599] usb 5-1: config 0 descriptor??
[ 2194.118895][T29932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2194.127787][T29932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2194.135620][T29932] usb 3-1: Product: syz
[ 2194.139564][T29932] usb 3-1: Manufacturer: syz
[ 2194.143957][T29932] usb 3-1: SerialNumber: syz
[ 2194.251963][T17341] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2194.290520][ T7367] EXT4-fs (loop0): can't mount with commit=7, fs mounted w/o journal
[ 2194.646536][ T6599] saitek 0003:06A3:0621.01FB: unknown main item tag 0x0
[ 2194.653353][T17341] usb 4-1: device descriptor read/64, error -71
[ 2194.659447][ T6599] saitek 0003:06A3:0621.01FB: unknown main item tag 0x0
[ 2194.666281][ T6599] saitek 0003:06A3:0621.01FB: unknown main item tag 0x0
[ 2194.673164][T29932] usb 3-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 2194.681471][ T6599] saitek 0003:06A3:0621.01FB: unknown main item tag 0x0
[ 2194.682225][ T7358] udc-core: couldn't find an available UDC or it's busy
[ 2194.688212][ T6599] saitek 0003:06A3:0621.01FB: unknown main item tag 0x0
[ 2194.695027][ T7358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2194.701749][T29932] usb 3-1: found format II with max.bitrate = 0, frame size=2
[ 2194.716394][T29932] usb 3-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 2194.725545][ T6599] saitek 0003:06A3:0621.01FB: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0
[ 2194.737149][T29932] usb 3-1: found format II with max.bitrate = 0, frame size=2
[ 2194.803977][T29932] usb 3-1: 2:130: cannot set enable PITCH
[ 2194.826532][T29932] usb 3-1: USB disconnect, device number 109
[ 2194.836183][T26034] udevd[26034]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 2194.932258][ T7376] device syzkaller0 entered promiscuous mode
[ 2195.075437][T17341] usb 4-1: device descriptor read/64, error -71
[ 2195.762800][T17341] usb usb4-port1: attempt power cycle
[ 2195.956022][T23527] Bluetooth: hci0: command 0x1009 tx timeout
[ 2195.968299][ T7393] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 2196.289632][ T6599] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 2196.536935][   T24] kauditd_printk_skb: 126 callbacks suppressed
[ 2196.536946][   T24] audit: type=1326 audit(2000001381.857:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.566590][   T24] audit: type=1326 audit(2000001381.889:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.590086][   T24] audit: type=1326 audit(2000001381.910:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.622469][   T24] audit: type=1326 audit(2000001381.941:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.679718][ T6599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2196.696066][ T6599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2196.702990][   T24] audit: type=1326 audit(2000001381.983:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.715426][ T6599] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2196.729449][   T24] audit: type=1326 audit(2000001382.004:20532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.765271][ T6599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.783920][ T6599] usb 1-1: config 0 descriptor??
[ 2196.823688][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10290'.
[ 2196.825641][   T24] audit: type=1326 audit(2000001382.151:20533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.863068][T23527] usb 5-1: USB disconnect, device number 3
[ 2196.907601][   T24] audit: type=1326 audit(2000001382.151:20534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2196.955835][   T24] audit: type=1326 audit(2000001382.151:20535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2197.003539][   T24] audit: type=1326 audit(2000001382.151:20536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc81340bfb code=0x7ffc0000
[ 2197.451420][ T6599] usb 1-1: string descriptor 0 read error: -22
[ 2197.610503][ T7418] syz.3.10295[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2197.610554][ T7418] syz.3.10295[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2197.612884][ T7419] syz.3.10295[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2197.633395][ T7419] syz.3.10295[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2197.645867][ T7418] devtmpfs: Unknown parameter 'c'
[ 2198.108363][ T6599] uclogic 0003:256C:006D.01FC: failed retrieving string descriptor #100: -71
[ 2198.137203][ T6599] uclogic 0003:256C:006D.01FC: failed retrieving pen parameters: -71
[ 2198.146229][ T6599] uclogic 0003:256C:006D.01FC: failed probing pen v1 parameters: -71
[ 2198.154122][ T6599] uclogic 0003:256C:006D.01FC: failed probing parameters: -71
[ 2198.161674][ T6599] uclogic: probe of 0003:256C:006D.01FC failed with error -71
[ 2198.170816][ T6599] usb 1-1: USB disconnect, device number 124
[ 2198.344529][ T7433] device wg2 entered promiscuous mode
[ 2198.726582][ T7445] syz.0.10301[7445] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2198.726651][ T7445] syz.0.10301[7445] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2199.160777][ T7450] syz.4.10305[7450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2199.172292][ T7450] syz.4.10305[7450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2199.234436][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2199.253172][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2199.260611][ T7453] device bridge_slave_0 entered promiscuous mode
[ 2199.267442][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2199.274490][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2199.281846][ T7453] device bridge_slave_1 entered promiscuous mode
[ 2199.338819][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2199.345721][ T7453] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2199.352817][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2199.359581][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2199.386388][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2199.393498][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2199.400728][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2199.408106][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2199.418867][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2199.459695][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2199.466595][ T4033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2199.647041][ T7453] device veth0_vlan entered promiscuous mode
[ 2199.666249][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2199.686569][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2199.708648][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2199.824290][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2199.832267][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2199.840328][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2199.847186][ T4033] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2199.854535][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2199.862562][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2199.898548][ T7453] device veth1_macvtap entered promiscuous mode
[ 2199.909105][ T7468] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 2199.915226][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2199.939509][ T7468] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff)
[ 2199.957096][ T7468] syz.0.10309 (pid 7468) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 2199.971794][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2200.016590][ T2916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2200.298347][T29932] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 2200.527518][   T25] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 2200.707648][ T2916] device bridge_slave_1 left promiscuous mode
[ 2200.713687][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2200.721155][ T2916] device bridge_slave_0 left promiscuous mode
[ 2200.727406][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2200.735034][ T2916] device veth1_macvtap left promiscuous mode
[ 2200.745134][ T2916] device veth0_vlan left promiscuous mode
[ 2200.840552][T29932] usb 2-1: config 10 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2200.854602][T29932] usb 2-1: config 10 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2200.868601][T29932] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[ 2200.878011][T29932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2200.890346][ T7502] tipc: Started in network mode
[ 2200.900560][ T7502] tipc: Own node identity 9e8bc79c944d, cluster identity 4711
[ 2200.909054][ T7502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2200.930418][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2200.942258][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2201.051633][ T7504] netlink: 'syz.4.10317': attribute type 4 has an invalid length.
[ 2201.173904][   T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2201.183361][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2201.200622][ T7487] xt_bpf: check failed: parse error
[ 2201.240905][   T25] usb 1-1: SerialNumber: syz
[ 2201.294134][ T7507] syz.3.10318[7507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2201.294200][ T7507] syz.3.10318[7507] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2201.480099][ T7495] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10315'.
[ 2201.535367][T29932] usbhid 2-1:10.0: can't add hid device: -71
[ 2201.541575][T29932] usbhid: probe of 2-1:10.0 failed with error -71
[ 2201.550778][T29932] usb 2-1: USB disconnect, device number 31
[ 2201.572900][ T7498] tipc: Disabling bearer <eth:syzkaller0>
[ 2201.579131][   T25] usb 1-1: skipping empty audio interface (v1)
[ 2201.585330][   T25] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[ 2201.597840][   T25] usb 1-1: USB disconnect, device number 125
[ 2202.189377][   T24] kauditd_printk_skb: 23 callbacks suppressed
[ 2202.189389][   T24] audit: type=1400 audit(2000001387.791:20560): avc:  denied  { ioctl } for  pid=7522 comm="syz.1.10324" path="socket:[224382]" dev="sockfs" ino=224382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2202.232890][T23527] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 2202.384713][ T7529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 2202.393544][ T7529] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038 (0x7fffffff)
[ 2202.413632][   T24] audit: type=1400 audit(2000001388.033:20561): avc:  denied  { setattr } for  pid=7524 comm="syz.0.10325" path="/107/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 2202.449455][   T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2202.538818][T23527] usb 3-1: device descriptor read/64, error -71
[ 2202.735536][   T25] usb 4-1: Using ep0 maxpacket: 32
SYZFAIL: SIGSEGV
pc-offset:0xfffffffffffe9a9b pc:0x7f72511213d5 addr:0x7f72c40241d0 code=1 (errno 11: Resource temporarily unavailable)
[ 2202.833047][   T24] audit: type=1400 audit(2000001388.464:20562): avc:  denied  { write } for  pid=258 comm="syz-executor" path="pipe:[13378]" dev="pipefs" ino=13378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 2202.869430][ T7537]  loop0: p3 < > p4 < >
[ 2202.873462][ T7537] loop0: partition table partially beyond EOD, truncated
[ 2202.880589][ T7537] loop0: p3 start 4284289 is beyond EOD, truncated
[ 2202.887194][   T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2202.898843][   T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2202.937048][ T2916] tipc: Disabling bearer <udp:syz1>
[ 2202.946813][ T2916] tipc: Left network mode
[ 2202.963974][T23527] usb 3-1: device descriptor read/64, error -71
[ 2203.040251][   T25] usb 4-1: string descriptor 0 read error: -71
[ 2203.046268][   T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2203.055529][   T25] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2203.111379][   T25] usb 4-1: can't set config #4, error -71
[ 2203.124186][   T25] usb 4-1: USB disconnect, device number 14
[ 2203.804645][ T2916] device bridge_slave_1 left promiscuous mode
[ 2203.810705][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2203.818071][ T2916] device bridge_slave_0 left promiscuous mode
[ 2203.824115][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2203.831713][ T2916] device veth1_macvtap left promiscuous mode
[ 2203.837509][ T2916] device veth0_vlan left promiscuous mode
[ 2204.261900][ T2916] tipc: Left network mode
[ 2204.266164][ T2916] tipc: Disabling bearer <eth:veth0_to_batadv>
[ 2204.272186][ T2916] tipc: Left network mode
[ 2205.101088][ T2916] device bridge_slave_1 left promiscuous mode
[ 2205.107063][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.114265][ T2916] device bridge_slave_0 left promiscuous mode
[ 2205.120334][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.127972][ T2916] device bridge_slave_1 left promiscuous mode
[ 2205.133877][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.141227][ T2916] device bridge_slave_0 left promiscuous mode
[ 2205.147220][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.154824][ T2916] device bridge_slave_1 left promiscuous mode
[ 2205.160724][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.168055][ T2916] device bridge_slave_0 left promiscuous mode
[ 2205.174110][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.181905][ T2916] device bridge_slave_1 left promiscuous mode
[ 2205.187917][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.195270][ T2916] device bridge_slave_0 left promiscuous mode
[ 2205.201361][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.209281][ T2916] device veth1_macvtap left promiscuous mode
[ 2205.215127][ T2916] device veth0_vlan left promiscuous mode
[ 2205.220848][ T2916] device veth1_macvtap left promiscuous mode
[ 2205.226629][ T2916] device veth0_vlan left promiscuous mode
[ 2205.232448][ T2916] device veth1_macvtap left promiscuous mode
[ 2205.238246][ T2916] device veth0_vlan left promiscuous mode
[ 2205.244070][ T2916] device veth1_macvtap left promiscuous mode
[ 2205.250013][ T2916] device veth0_vlan left promiscuous mode