last executing test programs:

19.420252275s ago: executing program 3 (id=1930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
sync()
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000001a80)=ANY=[@ANYBLOB="757466383d312c726f6469722c757466383d312c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c756e695f786c61746531302c6e6f6e756d7461696c1d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d742c73686f72746e616d453d77696e6e742c666c75bcf54c28e66e9487347cd0c573682c726f6469722c73686f72746e616d653d6d697865642c95000000000000006563283d72656c617865642c726f6469722c7569643d", @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRES8=r3, @ANYRESDEC=r3], 0x6, 0x2a3, &(0x7f00000005c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x145842, 0x0)
r6 = geteuid()
lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
statx(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = getegid()
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x513, &(0x7f00000010c0)="$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")
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000f00)={0x698, 0x0, 0x0, [{{0x3, 0x2, 0x7fffffff, 0x0, 0x3, 0x33, {0x0, 0x948, 0x9, 0x1, 0x4, 0x100000000, 0x3, 0x101, 0x3ff, 0x1000, 0x2, 0x0, 0x0, 0x9, 0x80000001}}, {0x4, 0x8, 0x1b, 0x7, 'blkio.throttle.io_serviced\x00'}}, {{0x1, 0x3, 0xb, 0x0, 0xa, 0x4, {0x2, 0x3, 0x200, 0x7fffffff, 0x80000001, 0xfffffffffffffd4b, 0x6, 0xfffffffb, 0xff82, 0xc000, 0x1, 0x0, 0x0, 0x3, 0xfe}}, {0x6, 0x3, 0x3, 0x1000, '*\\,'}}, {{0x2, 0x3, 0x6, 0x400, 0xfff, 0x704, {0x3, 0x6, 0x200, 0xfffffffffffffffa, 0x24, 0x0, 0x400, 0x9, 0x9, 0xa000, 0x0, 0x0, 0x0, 0x3, 0x8}}, {0xfffffffffffffffd, 0x1ce9dc7, 0x6, 0x1, ',-\\@+*'}}, {{0x5, 0x1, 0xa463, 0x81, 0x0, 0x2501, {0x0, 0x1, 0x5, 0xffffffff, 0x8, 0x5, 0x3, 0x8, 0x0, 0x3000, 0x6, 0x0, 0x0, 0x5, 0x1}}, {0x4, 0x6, 0x1, 0x0, '('}}, {{0x3, 0x1, 0xc5f, 0x7, 0x3, 0x5, {0x4, 0x4, 0x7ff, 0x7, 0x0, 0x100000000007, 0x7fffffff, 0x20, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x3f, 0x3}}, {0x1, 0x2, 0x5, 0xec10, 'vfat\x00'}}, {{0x2, 0x0, 0x700, 0x2, 0x7, 0x200000, {0x5, 0x4, 0x4, 0x2, 0xff, 0x9, 0xd30e, 0x3ff, 0x3, 0x1000, 0xfffffff7, 0x0, 0x0, 0x6, 0x3}}, {0x4, 0x0, 0x5, 0xfff, 'vfat\x00'}}, {{0x2, 0x2, 0x7d5ab319, 0x200, 0x7, 0x0, {0x4, 0x8, 0x40, 0x7fffffffffffffff, 0x3, 0xdffffffffffffff8, 0x7ff, 0x8, 0x3, 0x2000, 0x6359c452, r6, r9, 0x2, 0x85f9}}, {0x6, 0x6, 0x1b, 0x7ff, 'blkio.throttle.io_serviced\x00'}}, {{0x2, 0x1, 0x6, 0x54, 0x9, 0x9, {0x3, 0x56, 0x4, 0x6, 0x6, 0x4, 0x1399c628, 0x2, 0x4, 0xc000, 0x9, 0x0, 0xffffffffffffffff, 0x3fffc0, 0x8519}}, {0x2, 0x2, 0x5, 0xc, 'vfat\x00'}}, {{0x0, 0x2, 0x0, 0x21e, 0xd9, 0x0, {0x5, 0x7f, 0x6, 0xfff0000000000000, 0x2, 0x3, 0x7f, 0x1, 0x2, 0x4000, 0xffff, r7, 0xee00, 0x7}}, {0x4, 0x5, 0x1b, 0x8, 'blkio.throttle.io_serviced\x00'}}, {{0x2, 0x0, 0x6, 0x2, 0x9, 0x4, {0x4, 0x8, 0xfffffffffffffffb, 0x200, 0xfffffffffffffffc, 0xb7, 0x100, 0x0, 0x3, 0xa000, 0x400, r8, r10, 0x7d0, 0x1}}, {0x5, 0x1f, 0x5, 0xc10, 'vfat\x00'}}]}, 0x698)
r11 = getpgid(0x0)
statx(r4, &(0x7f0000004180)='./bus\x00', 0x4000, 0x20, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getgroups(0x2, &(0x7f00000042c0)=[0xee00, <r13=>0xee01])
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000004300)=<r14=>0x0)
r15 = getuid()
r16 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r16, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000200)})
sendmmsg$unix(r5, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="38e5eadc85bdd24e6acb1472d97bd94fb48ee56058f84c93dcc71d50c201df802ef3b145acc7edb5938c8a47d4eed913317e9374e64290645a5380291927177dcc7bbd3f081f16e9f4b23350c3c2cf118724c264ada4e302d7895caa3e41f048af65424713ca", 0x66}, {&(0x7f0000000340)="59b174bf7fee180b97a852859a1bdb04f35c594cbb81ff7ebeb242912d8c2d693851994917b9943f341b3ade34", 0x2d}, {&(0x7f0000000380)="a8cfbbf3b67c05548c3f3a0d48005c5c019782db1eb74f0cc7b2036768a3529190a5d4888dd59853799db72227f0ae16e246af792c3a024238f99e1e06fa4a89c6f93baaaf279ea40d47659aec3af3c94630843da1bdcfc82efe2100a343", 0x5e}, {&(0x7f0000000400)="a1135276a0eae7f3135e9e1f42b88d6a7678a969cb7478b5e83d8c5807979784295c154a4d1b0bfc74d15503f7fa04b0722218e19bec76ca76c7a3c14980203960d56230d068ca1fcd32b68f4cdfd2d042a3c2d6de4816365345155278250c392c2da2b3611401ae77f8ded39e95bc414a7343d08d7ae8f40dea5bd1000d359c1921865b279c5a3d3a5414b0389db25834ee08439941e5d76f2d5a0e2e41cb339dc688fe9f8c64d03bf971c7c7768c32", 0xb0}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f0000000880)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, &(0x7f0000004400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000001c00000000000000010000d0d8ce6f00", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r16], 0x128, 0x44084}}], 0x2, 0x4)
lseek(r5, 0xd93, 0x0)
write$binfmt_script(r5, &(0x7f0000000580)={'#! ', './file1'}, 0xb)
r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000d85dbf53d2f27332ec2e4fba4420de200813f461d24d2b843015326ebab71d97e56947763b732127567b5a873b7697536763be9e7e5ef697446f4d30ee5e718b85f65c0ac9d848dd40d631bdf2fbf299d0b56f009b576dcd065ce6333405e4e53ff8044b3d50cdc1149e1bf94d43d1374120da73477a775ebc831577ae1e59aa29bd7321d930009e6671a3b41c992001bd7f3987b0a618f495", @ANYRES32=r17, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc8900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000080000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r18=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, @map_fd={0x18, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x4, &(0x7f0000000180)=""/4, 0x41100, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, r2, r5, r17, r18], &(0x7f00000008c0)=[{0x3ff, 0x2, 0x4, 0x4}, {0x4, 0x2, 0x5, 0xc}], 0x10, 0x1}, 0x90)

12.995422999s ago: executing program 4 (id=1953):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
read$FUSE(r0, &(0x7f0000020940)={0x2020}, 0x2020)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r7 = dup(r6)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) (async)
syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000001980)={[{@gid}, {@fmask={'fmask', 0x3d, 0xfffffffffffffffe}}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@namecase}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x1}}], [{@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}, 0x1, 0x150a, &(0x7f0000002c80)="$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") (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x234) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x0, 0x533, &(0x7f0000000000)="$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")

12.935611074s ago: executing program 4 (id=1954):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
r6 = getpgrp(0xffffffffffffffff)
sched_setscheduler(r6, 0x0, 0x0)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff})
fsetxattr(r4, &(0x7f0000000240)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='\x00', 0x1, 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r10}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r11}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

10.52953153s ago: executing program 4 (id=1961):
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7ffffffc]}, 0x8)
close(r1)
r2 = gettid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xfffffe08, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x846) (async)
sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xfffffe08, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x846)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200440, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'ext4\x00'}}, {@version_L}, {@aname={'aname', 0x3d, '-,,$}\'&(#+!,\''}}, {@nodevmap}, {@cache_mmap}]}})
fcntl$setown(0xffffffffffffffff, 0x8, r2) (async)
fcntl$setown(0xffffffffffffffff, 0x8, r2)
fcntl$setown(r0, 0x8, r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220f0000000b4496ab59030d34b68a0b0f4b99cb9cacb9933082f9f60afc9c9f6faec079e01a7f2bc9e66475cfe0416d12694dc143cb769040d5829778d72393b49161dd5eeb695ba370ec5069327f039baa37efd0864036e01ebff74285bd17971527434bfda9b17186d952023d1108a1926818364ed162616902"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10)
write$evdev(r5, &(0x7f0000000000), 0x100000008)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x40084503, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") (async)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
rmdir(&(0x7f0000000280)='./file2\x00') (async)
rmdir(&(0x7f0000000280)='./file2\x00')

10.467636675s ago: executing program 4 (id=1962):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200004a850802b7030000000000008500000083000000bf0900000000000055090100000000009500000600000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200004a850802b7030000000000008500000083000000bf0900000000000055090100000000009500000600000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'batadv_slave_0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0x10}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r3, 0xfffffffb, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000dc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000c00)=@delqdisc={0x1c0, 0x25, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x10, 0xfff2}, {0xfff1, 0xfff1}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffd}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x807}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ce0}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) (async)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000dc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000c00)=@delqdisc={0x1c0, 0x25, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x10, 0xfff2}, {0xfff1, 0xfff1}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffd}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x807}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ce0}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x8, 0x8, 0x400, 0x20, 0xffffffffffffffff, 0xfffff800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
pwritev2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pwritev2(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) (async)
write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0x8, 0x3f, 0x800, 0x7e, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x10, 0xfffffff7, 0x4}})
signalfd4(r0, &(0x7f00000004c0)={[0x5]}, 0x8, 0x80000) (async)
r12 = signalfd4(r0, &(0x7f00000004c0)={[0x5]}, 0x8, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x2b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x55, &(0x7f00000002c0)=""/85, 0x41100, 0xc, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000500)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x2, 0x3, 0x3, 0x7}, {0x2, 0x1, 0x81, 0x5}, {0x3, 0x4, 0x3, 0x1}, {0x1, 0x1, 0x4, 0xb}, {0x0, 0x2, 0x10, 0x2}], 0x10, 0x9}, 0x90)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000340)={[{@grpjquota}, {@noblock_validity}, {@nouid32}, {@jqfmt_vfsv0}, {@nogrpid}, {@nouid32}, {@resuid={'resuid', 0x3d, 0xee00}}, {@data_err_abort}, {@grpid}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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")
syz_usb_connect(0x2, 0x2d, &(0x7f0000002c40)={{0x12, 0x1, 0x200, 0x4a, 0x3a, 0x9d, 0x10, 0x2833, 0x211, 0x3344, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3f, 0xf2, 0xa0, 0x6f, [{{0x9, 0x4, 0xf, 0x9, 0x1, 0xff, 0x1, 0x0, 0xf, [], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x8, 0x6, 0x5}}]}}]}}]}}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0})
r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1ece31000000000001090224000100000000090400000203000000092100000001220b0009058103"], 0x0)
syz_usb_control_io$hid(r13, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x0, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r14}, 0x10)

10.381044163s ago: executing program 4 (id=1963):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414"], 0x38}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r7 = dup(r4)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080"])

10.378124363s ago: executing program 4 (id=1964):
setxattr$security_ima(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8000000004a4, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@errors_remount}]}, 0x0, 0x566, &(0x7f00000015c0)="$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")
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x35, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setfsuid(0x0)
chdir(&(0x7f0000000280)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x800000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000540)="a5f68cfcd2774b0af1724392dc9325f0036372f84d723406b634be2fd80707475070209f80000000b67b9394eb50c02b0de0afa9eb6f000ba9dfb70700bea6394b1f58deb4139165d288ec907fa0b7351f50d17e99421c86a77588f7810faf4900000000000000")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
r9 = fcntl$dupfd(r6, 0x0, r6)
readv(r7, &(0x7f0000000440)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1)
ioctl$TCFLSH(r9, 0x400455c8, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000280)=0xfffffffffffffde9)
truncate(&(0x7f0000000300)='./file1\x00', 0x401)
setns(0xffffffffffffffff, 0x0)

8.82492565s ago: executing program 1 (id=1971):
creat(0x0, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100), 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x0, 0x0, 0x0}, 0x90)
socket(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a340664128463b2edda3", 0x14}], 0x1, 0x0)
r6 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffffad}}, 0x0)
splice(r4, 0x0, r6, 0x0, 0xe8, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
stat(0x0, &(0x7f00000004c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
mknod(0x0, 0x0, 0x0)

8.776836344s ago: executing program 3 (id=1970):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000, 0x2609, 0xffffffffffffffff, 0xc1da}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$packet(0x11, 0xa, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[], 0x0)
syz_mount_image$erofs(&(0x7f0000000800), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000600)=ANY=[], 0x0, 0x1d3, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)

8.554705371s ago: executing program 2 (id=1972):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2100084c, &(0x7f0000000480), 0x7e, 0x14f5, &(0x7f0000001580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x0, 'cpuacct'}, {0x0, 'net_cls'}, {0x0, 'net_prio'}, {0x0, 'rdma'}, {0x0, 'blkio'}]}, 0x29)
mkdir(&(0x7f0000000200)='./control\x00', 0x0)
inotify_init1(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2000, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2c1f9ff4fa245d5cde0080045000028000000000032917800003af81869ab8656e5d23ca30000ffffffff1100907800000000ac8800000600000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f0000000080)='?', 0x1)
clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', '', [], 0xa, "bda1ab4c45cc43da6404a0df8fd51da3d4964fd4ba"}, 0x19)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, r0, 0x0)
pivot_root(&(0x7f0000000040)='./file0/file0\x00', 0x0)

8.393824255s ago: executing program 2 (id=1973):
socket$nl_generic(0x11, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getegid() (async)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8a00000042127c44311c20b0ab1109d758568a30ea8402000000000000002d5ac7024f6617868d263a1e9e5049caaebf81cc1cdbffbed730403d98c449228026ab9c0769eae98bb934f39fcc3956a39a7954891cbaf2f9682d03747c36526cf313e924f930fc5dae3e830377433259b246de022f6f884d7c4d106a80119fe2aaef41ff1f737928c0b364643adf82e40a62f743ef59ce3fe074423f4c6dc5896032450d4c884b3e93c47e6b3816fbbe5fcc4f08f9b87d3a5a251a3178e657c60fc6cba424a3f8b10041febc70aa53ac", @ANYRES16=0x0, @ANYRES16], 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async, rerun: 64)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000004ac0), &(0x7f0000004b40)=0x60, 0x0) (rerun: 64)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000004bc0)=@o_path={&(0x7f0000004b80)='./file1\x00', 0x0, 0x10}, 0x18)
signalfd(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_create(0x8, 0x0, &(0x7f0000000280)) (async, rerun: 32)
timer_delete(0x0) (rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r4, 0x0, 0x34, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000d40)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@nomblk_io_submit, 0x0}, {@noauto_da_alloc}, {@oldalloc}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}], [{@dont_hash}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000355c2e298ad1759b00000008000300", @ANYRES32=r5, @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x45, 0x0, 0x2}, {}, {}, {0x20}, {0x6}]})

8.388426335s ago: executing program 2 (id=1974):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = epoll_create1(0x0)
r5 = eventfd2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)={0x20000006})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES8=r0], 0x1c}}, 0x2040040)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)

7.941062822s ago: executing program 1 (id=1976):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c4}, 0x8010)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220a000000c1"], 0x0}, 0x0)

7.490107659s ago: executing program 2 (id=1977):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
lseek(0xffffffffffffffff, 0x146e80000000000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = getuid()
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0x78, 0x0, r3, {0x7f, 0xc8d6, 0x0, {0x2, 0x9, 0x343c, 0x8930, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x3ff, 0x2000, 0x365, r4, 0xee00, 0xa, 0x1000}}}, 0x78)
syz_open_procfs(0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020010000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r8}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00')
readlinkat(r9, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
syz_usb_connect(0x0, 0x4b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9)
syz_usb_connect$uac1(0x0, 0xfa, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x1, 0x3, 0x0, 0x2}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}})

6.625363689s ago: executing program 3 (id=1979):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000001f00)={[{@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@check_strict}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_win95}, {@rodir}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@shortname_mixed}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@index_on}]})
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

5.721155363s ago: executing program 3 (id=1983):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7, 0x9, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x70)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socket$inet_udp(0x2, 0x2, 0x0)

5.420289228s ago: executing program 1 (id=1984):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002c1001c0"])
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ptrace(0x10, 0x1)
waitid(0x0, 0x0, 0x0, 0xc, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4.496943343s ago: executing program 2 (id=1986):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1806000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x2, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e78e70a3e56a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x4, 0xfe}, {0x6, 0x24, 0x1a, 0x80, 0xc}, [@call_mgmt={0x5, 0x24, 0x1, 0x7, 0xb9}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xff, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x65, 0x50, 0x3, 0x60}, 0x37, &(0x7f0000000180)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x48, "888698bfe79aecfb164dabb9c4ad19e8"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ae6a84eb7d662556b2cde7dcac7c12a3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0xb, 0x5}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}]})
syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x1, 0x5e, {0x5e, 0x11, "a86f6667718cda6e0690d72b7793eb4ba9a3e923f320c2740b8056ed21d4fa9a7279acc2936320e45820ff19cb906591633d0fdeff71db8281d11bf45258f67090fa358d8ed2cb9e675685b9d7f3c75087a3bccdce176cce1a6b7528"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a80)={0x44, &(0x7f00000006c0)={0x20, 0x3, 0x99, "5ad18b0ba1ca7a8d218b4e65981ba3ff372185c438dcde7d5ed5b5f1505c7ef49a4046a6d80945dd1f0fb5879ae56723c76940372e698a92a0d13420f601a2f188cd4767772ec77d99c8072d5903f4674a063d8f335eec1b37aca4c0bcd06f53a25ff8fb3557380dbea24758c8a501535fd9ce66b4a16a2b40b7f5ef52d24e4fe8693298665cbb5ac5619c6c308672d92cead8162909957a78"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000002940)={0x20, 0x80, 0x1c, {0x7, 0x2, 0x10, 0x3, 0x6, 0xf001, 0x3ff, 0xc5d, 0x101, 0x6, 0x4, 0x3ff}}, &(0x7f0000002980)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000029c0)={0x20, 0x83, 0x2}, &(0x7f0000002a00)={0x20, 0x87, 0x2, 0xfc00}, &(0x7f0000002a40)={0x20, 0x89, 0x2, 0x1}})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffe, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r8}, &(0x7f0000000940), &(0x7f0000000980)='%pK    \x00'}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r11, 0x0, 0x0)
syz_usb_control_io$hid(r11, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r11, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r11, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

2.630210015s ago: executing program 3 (id=1990):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x0, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9}, @country_functional={0xc, 0x24, 0x7, 0x32, 0x3, [0x209, 0x800, 0xc9]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x200, 0x7, 0x80, 0x7, 0x49}]}}}}}]}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f00000000c0))
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x0, 0xf6f, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = gettid()
r5 = inotify_init1(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, <r6=>0x0})
kcmp(r4, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)

2.402130664s ago: executing program 1 (id=1991):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0xfff)
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, 0xffffffffffffffff})
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x400, 0x8, 0x8, 0x2}, 0x10)
syz_emit_ethernet(0xa6, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x70, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @sack={0x5, 0x16, [0xd, 0x5, 0x9, 0x100, 0xfffffffa]}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0xe, "ce2781a9dfe9bc8597d90a8c"}, @mptcp=@generic={0x0, 0x4, "e2cb"}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)

2.390585095s ago: executing program 0 (id=1992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0)

2.314579721s ago: executing program 1 (id=1993):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000001f00)={[{@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@check_strict}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_win95}, {@rodir}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@shortname_mixed}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x6, 0x2d1, &(0x7f0000000740)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@index_on}]})
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2.20575565s ago: executing program 0 (id=1994):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000180100"/20], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=<r6=>r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001640)="e009cc6541b865fbe351a9b5b24ce1a3adfc69a26b5c7b247d8e9ff3adfecda18b2a18f2380115689ebbac08481665d876e11a5184a3c3054fac7b3dc79a794ad4d8eeab089946ddf930d9c948c471e96daefa884737e99dd75f0fb4054b4511b95d886ded346a9114b8942e0e62698448f42adca7425731bdd616ba0db6e3adc8728e5d3cfba3e5aab9ab24dbe9f18e2822bd20567666310d115a9fba6d13d7c6ff200d165754b677d8e5f52f2dbd1c941d9c867fc5f363bcf30d1779e5e18845ee3c7e33877bec118c27eb72cf80ba6ee9d0fa1ca756b65f03a78f4ed2e0a3c49d2a792eccec864762525b7b280371918cbee49bc068", 0xf7}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000009c0)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e80)="b5", 0x1}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r5, @ANYBLOB="ac1414aaac1414aa000000001400000000000000000000000200000005000000000000001400000000000000000300000200000009000000000000001100000000000000000000000100000001000000000000001c000000000000000000000008000000d592b869e58c9ee6613de7cca1b2a6b9265bc569264dfbccf8b092ca116f7fb97d57351f4932650df672ce4d07c3e467a6c3edab020c465b7071cf83cda8b37258671aea8ba2ca67cfb686209cef980e44428539c412dba6d57aa9d1f20c0849f7b061dda06d", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="ac1e01017f0000010000000024000000000000400000000007000008861100000000000baadcd31bbe3d93832f0000000000000014000000000000000000000001000000ffffff7f0000000007fa51170660747f691fa1d3f412a76494de57799ad576d08e44c5e87556aeda"], 0xe8}}, {{&(0x7f0000002180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f00000021c0)="44f800a75f25a495baffaf52129e749eebbcffa8f3a687a02cb9c9e0a62ca6da15821d29714e0209642656e662266aa8d0d9452978106d6a793f5ee2154d17aaa987d981144d7455c5fafd92dddca9a9a80779d550b70295a68e98aa2253d8fa15f57b7b35787e966e9a7ca649cd5025f74ff98589d59479cbfd0d14cceb97450beadaa7bc6735273c6d6b84607d1a1109500c2af686ba84a2756bae85900edea902bcfd8b2e351d7b372ff811aecc68f3536de5c4362b631de8cc7803c937ca7f009806be3fbbccb19bc02eabb39c5bdf3270c69b0caba162ec", 0xda}, {0xfffffffffffffffc}, {&(0x7f00000003c0)="87c4774c41aeada03ba896fc94de6219f33293a365103cc43c7368fe658ff37ca56fe7edafbe8082b35ac6c31e64c927bc588bb85675d8a2e8128f5b60abd73bc5c438d1d7e480336b5c9d8144e24f66619aaf1e96ef45b5e433e72305817b088749c55e931fbb6d8cd1053248f7659d525e1594f00275b6486e49077e6ff70fbe9b73afba2327788a00fd8e9c36898624f14e36abf73123cdd391c75d5f46f2046ec79af9e366f06fbffe28f9acfd8e5daedee2f0ed496401f21615ec26ea705bdec21f952d48c6d2f86be8c5ac1e1547345daec0bae7d19dc625b131920d65161c630f243a719a9b", 0xe9}, {&(0x7f0000000840)="0b7c6b31ffa435a53a56b08c04dbd9ee8611d6abe405f35be37bb77b19ca10711ea5a54aeed00d24c4ec70c3ac8972e25153b272b4e1622ea227127d4478821fd8e30d9dfa6a40464c4ceed3c17ecd6af0243f568eadc81b7b2ad43bfb613f37e879bc2c2cccbef72e65e700397e7b936311748929e934b4f6896599fa3048efdbcaa1f44c104006925e63f34b1eecf81917118663eab1874c6cd879f83c", 0x9e}, {&(0x7f00000005c0)="f067055ae3e26ed4fe3fbad2956d5da63023b326d822c05220ff1cf8ab149d4af23e758992c736ccec7132dbfcfe844b91d43e", 0x33}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xf8}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="71b75504bedc626605de7ba0", 0xc}, {&(0x7f00000004c0)="5541b897394007", 0x7}, {&(0x7f0000000500)="d7167c61637712d6059d5de1b3e31ca4280fd1439be300554ecce096b40612bb629827f3f0706655fc2d196f8b070d9bc508af5f39026eb6d751c0384e63d56a4875cdbba5a5a26ba57f0d18f0b8a4ea752e932b649c43e586e080ba752bab5fabdd63ad93dcac8274c75caa25f8c11301cf69250ee84f5521869a20ec00aae478a0ee92cbf94f758874591a0802ff65692bf75744ca73faa1fc3f384e2b091e1f", 0xa1}], 0x3, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x48}}, {{&(0x7f0000000780)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="f56ec73fdabbfae4b407885a4fbcfa0169aa0e4d37cba2d15c4133651d5b250b1ea9273944d0b0fd182315c454", 0x2d}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="3cb4e6a2951c7bd22f9c38cc7ba70b1e32d0600a22cbc080996c3857f9888ae31e3a566b2a920379c2b47fc06e838aed421530d01497d0aae4bfba47d6ff5582b9b97ca51df0d8485e8d", 0x4a}, {&(0x7f0000002bc0)="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", 0x1000}], 0x4, &(0x7f0000001a00)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xe7, 0x3, 0x7, [{@local, 0x6}, {@empty}, {@remote, 0xfffff000}, {@remote, 0x4}]}, @cipso={0x86, 0x52, 0x0, [{0x7, 0xe, "10796b6379e10d6648d53794"}, {0x7, 0x2}, {0x7, 0x5, "e1a1b4"}, {0x6, 0x3, "f3"}, {0x0, 0x12, "e408dc2af6859f8fb438a229b0df2555"}, {0x7, 0x12, "75993c6fe99b86e88e096f734640102d"}, {0x2, 0x10, "80a57b588474b03f5b6f2c3f2ccc"}]}, @lsrr={0x83, 0x1f, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x7, [{@private=0xa010102, 0xfa000}, {@loopback, 0xd9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5e}, {@broadcast, 0xf82f}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x0, 0xa, "77d78237d2736f0f"}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x2, [{@remote, 0x1f47}]}]}}}, @ip_retopts={{0x118, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x9, [@empty, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @loopback, @multicast2, @loopback, @private=0xa010102, @empty, @private=0xa010102]}, @cipso={0x86, 0xc, 0x1, [{0x1, 0x6, "3e69a976"}]}, @cipso={0x86, 0x60, 0xffffffffffffffff, [{0x2, 0x3, '6'}, {0x0, 0x12, "28000000f500"/16}, {0x7, 0xb, "443056ae2328533e9c"}, {0x1, 0xb, "1ee7f2bff56291d3d9"}, {0x6, 0x12, "5e52fb44ec82944b37ad2311bdbb00d8"}, {0x1, 0xb, "8c734bc56154ce30ca"}, {0x5, 0x7, "9b3f7d77f8"}, {0x2, 0xb, "150c4dc94c54bed30f"}]}, @timestamp={0x44, 0x10, 0x4b, 0x0, 0x7, [0x2, 0x7, 0xf]}, @end, @lsrr={0x83, 0x7, 0x2f, [@loopback]}, @rr={0x7, 0x17, 0x3f, [@remote, @broadcast, @empty, @remote, @rand_addr=0x64010102]}, @cipso={0x86, 0x45, 0x2, [{0x1, 0x9, "f64134ca4337de"}, {0x0, 0xd, "c6985372b77bd50342f351"}, {0x5, 0x12, "46fa24431c92590a6c5f1893ed2a9fb3"}, {0x1, 0x6, "dd400b82"}, {0x6, 0x11, "9727411edc34e0bcee70cb6ae1ef48"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}], 0x288}}], 0x9, 0x240000f1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
unshare(0x400)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
setitimer(0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x269048, &(0x7f00000004c0)=ANY=[])

1.486518719s ago: executing program 2 (id=1995):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff86)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0) (async)
syz_emit_ethernet(0xa9, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x73, 0x3a, 0x0, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0xc3, 0xffff, "d255d5ac4cfe80964d144af397dd826e20f069b3201d5a0916124ac65099ac616ac753814e66565797fb926eb36d74c55f0e06792dcb9a370567e3b59c27a73a249342c69a3d5c9817e9567974634ce358fa905e32642a281c06aa7929bdaac4331281f5b9026693c5bdc8"}}}}}}, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400"], 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000001100290a00000000ff01000000000008", @ANYRES32=r3], 0x20}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) (async)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (async)
mount$incfs(&(0x7f0000001280)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x90, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfbd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x44804}, 0x4000081)

1.449735542s ago: executing program 1 (id=1996):
setpriority(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2000040, &(0x7f00000008c0)={[{@prjquota}, {@nodiscard}, {@noquota}, {@init_itable}, {@nogrpid}, {@resgid}, {@sysvgroups}, {@nojournal_checksum}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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")
syz_emit_ethernet(0x6c, &(0x7f0000000880)=ANY=[], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, 0x0, &(0x7f0000000040)}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
syz_usb_control_io(r9, 0x0, 0x0)

1.322095402s ago: executing program 0 (id=1997):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1004508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x0, 0x100}, 0x48) (rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async, rerun: 32)
io_setup(0x80000001, 0x0) (async, rerun: 32)
syz_open_procfs(0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020600) (async)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x20642, 0x0) (async, rerun: 64)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') (rerun: 64)
setns(r5, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) (async)
clock_gettime(0x9, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

1.130417988s ago: executing program 0 (id=1998):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x28002, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r4, 0x200002)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@loopback}}, 0xe8)
sendfile(r6, r5, 0x0, 0x8)

254.31539ms ago: executing program 0 (id=1999):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x19, &(0x7f0000000940)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @alu={0x7, 0x0, 0x8, 0xa, 0xe, 0xfffffffffffffff4, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query, @jmp={0x5, 0x0, 0x5, 0x0, 0x7, 0xffffffffffffffe0, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4749}}], &(0x7f0000000140)='syzkaller\x00', 0x3000000, 0xe8, &(0x7f0000000480)=""/232, 0x41100, 0x20, '\x00', r2, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x5, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x4, 0x1, 0x10, 0x5}], 0x10, 0x27f}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x8, 0xffffffffffffff20, 0x0}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2266"], 0x3e) (async)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r11, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044094}, 0x80) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, <r12=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10)

83.774253ms ago: executing program 0 (id=2001):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r7, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@mcast2={0xff, 0x3}]}}}], 0x28}}], 0x1, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x40}}, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)

0s ago: executing program 3 (id=2002):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r7, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x0, 0x0, [@mcast2={0xff, 0x3}]}}}], 0x28}}], 0x1, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x40}}, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)

kernel console output (not intermixed with test programs):

 0000000000000001
[  339.442002][ T7663] R13: 0000000000000000 R14: 00007fec1abad130 R15: 00007ffe374561b8
[  339.679706][   T49] device bridge_slave_1 left promiscuous mode
[  339.685827][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.694133][   T49] device bridge_slave_0 left promiscuous mode
[  339.700390][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.709615][   T49] device veth0_vlan left promiscuous mode
[  339.868677][ T2893] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  339.908912][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  339.916310][   T25] usb 1-1: can't read configurations, error -61
[  340.008768][   T25] usb usb1-port1: attempt power cycle
[  340.098203][ T7677] syz.4.1735[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  340.098499][ T7677] syz.4.1735[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  340.317280][ T7679] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  340.338289][ T2893] usb 2-1: Using ep0 maxpacket: 16
[  340.418674][   T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  340.426128][ T1786] usbhid 4-1:0.0: can't add hid device: -71
[  340.431928][ T1786] usbhid: probe of 4-1:0.0 failed with error -71
[  340.440595][ T1786] usb 4-1: USB disconnect, device number 60
[  340.458699][ T2893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.470351][ T2893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.480425][ T2893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  340.493209][ T2893] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  340.502185][ T2893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.510887][ T2893] usb 2-1: config 0 descriptor??
[  340.658649][  T303] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  340.748641][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  340.756166][   T25] usb 1-1: can't read configurations, error -61
[  340.898625][  T303] usb 3-1: Using ep0 maxpacket: 16
[  340.908614][   T25] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  341.018711][  T303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.029634][  T303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.041495][  T303] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  341.053187][  T303] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  341.063874][  T303] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  341.074235][  T303] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  341.208648][   T25] usb 1-1: unable to read config index 0 descriptor/start: -71
[  341.209449][ T2893] koneplus 0003:1E7D:2E22.0034: item fetching failed at offset 0/2
[  341.219316][   T25] usb 1-1: can't read configurations, error -71
[  341.234578][ T2893] koneplus 0003:1E7D:2E22.0034: parse failed
[  341.241471][  T303] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  341.246716][   T25] usb usb1-port1: unable to enumerate USB device
[  341.256833][  T303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.267276][ T2893] koneplus: probe of 0003:1E7D:2E22.0034 failed with error -22
[  341.276065][  T303] usb 3-1: Product: syz
[  341.300140][  T303] usb 3-1: Manufacturer: syz
[  341.304544][  T303] usb 3-1: SerialNumber: syz
[  342.258647][  T303] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  342.278743][  T303] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed
[  342.318806][  T303] cdc_ncm 3-1:1.0: bind() failure
[  342.332796][  T303] cdc_ncm 3-1:1.1: bind() failure
[  342.346417][  T303] usb 3-1: USB disconnect, device number 72
[  342.346656][ T7707] kvm: pic: non byte write
[  342.362245][ T7707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294411775 (8588823550 ns) > initial count (314966016 ns). Using initial count to start timer.
[  342.576362][  T303] usb 2-1: USB disconnect, device number 64
[  342.630014][ T7712] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  342.677419][ T7707] kvm: pic: non byte write
[  343.004692][ T7724] syz.0.1746[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.004753][ T7724] syz.0.1746[7724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.843661][  T320] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  343.873291][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'.
[  343.995693][ T7738] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  344.222891][ T7744] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295)
[  344.222891][ T7744] 
[  344.234848][ T7744] exFAT-fs (loop1): error, failed to bmap (inode : ffff888123bb1570 iblock : 0, err : -5)
[  344.334694][  T320] usb 3-1: Using ep0 maxpacket: 32
[  344.458668][  T320] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.469376][  T320] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.598699][  T320] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  344.607636][  T320] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  344.615764][  T320] usb 3-1: Product: syz
[  344.619776][  T320] usb 3-1: Manufacturer: syz
[  344.659349][  T320] hub 3-1:4.0: USB hub found
[  344.861736][   T24] kauditd_printk_skb: 16 callbacks suppressed
[  344.861748][   T24] audit: type=1326 audit(1724177818.209:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  344.907994][   T24] audit: type=1326 audit(1724177818.209:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  344.908731][  T320] hub 3-1:4.0: 2 ports detected
[  344.936958][   T24] audit: type=1326 audit(1724177818.209:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  344.960819][   T24] audit: type=1326 audit(1724177818.209:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  344.984318][   T24] audit: type=1326 audit(1724177818.209:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.007649][   T24] audit: type=1326 audit(1724177818.209:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.030958][   T24] audit: type=1326 audit(1724177818.209:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.054343][   T24] audit: type=1326 audit(1724177818.209:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.077483][   T24] audit: type=1326 audit(1724177818.209:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.100964][  T303] Bluetooth: hci0: command 0x1003 tx timeout
[  345.106801][  T966] Bluetooth: hci0: sending frame failed (-49)
[  345.113433][   T24] audit: type=1326 audit(1724177818.209:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5633468e79 code=0x7ffc0000
[  345.137557][ T7750] EXT4-fs (loop1): 1 truncate cleaned up
[  345.139883][ T7726] udc-core: couldn't find an available UDC or it's busy
[  345.143035][ T7750] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  345.159222][ T7726] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  345.178653][ T1845] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  345.188699][  T320] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  345.197113][  T320] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  345.240717][  T320] usb 3-1: USB disconnect, device number 73
[  345.453488][ T7746] F2FS-fs (loop3): Test dummy encryption mode enabled
[  345.470812][ T7746] F2FS-fs (loop3): invalid crc value
[  345.492155][ T7746] F2FS-fs (loop3): Found nat_bits in checkpoint
[  345.513365][ T7746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  345.578719][ T1845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.589810][ T1845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.603074][ T1845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.612335][ T1845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.629223][ T1845] usb 5-1: config 0 descriptor??
[  345.681093][ T7764] FAULT_INJECTION: forcing a failure.
[  345.681093][ T7764] name failslab, interval 1, probability 0, space 0, times 0
[  345.698773][ T7764] CPU: 0 PID: 7764 Comm: syz.3.1756 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  345.708561][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  345.718531][ T7764] Call Trace:
[  345.721670][ T7764]  dump_stack_lvl+0x1e2/0x24b
[  345.726173][ T7764]  ? panic+0x812/0x812
[  345.730078][ T7764]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  345.735374][ T7764]  dump_stack+0x15/0x17
[  345.739413][ T7764]  should_fail+0x3c6/0x510
[  345.743658][ T7764]  ? sk_prot_alloc+0x5f/0x370
[  345.748144][ T7764]  __should_failslab+0xa4/0xe0
[  345.752744][ T7764]  should_failslab+0x9/0x20
[  345.757089][ T7764]  kmem_cache_alloc+0x3d/0x2e0
[  345.761673][ T7764]  ? kmem_cache_alloc_trace+0x18a/0x2e0
[  345.767062][ T7764]  ? selinux_sk_alloc_security+0x60/0x140
[  345.772611][ T7764]  sk_prot_alloc+0x5f/0x370
[  345.777034][ T7764]  ? selinux_sk_alloc_security+0x70/0x140
[  345.782590][ T7764]  sk_alloc+0x38/0x4d0
[  345.786498][ T7764]  unix_create1+0x91/0x5f0
[  345.790749][ T7764]  unix_stream_connect+0x3de/0x1470
[  345.795783][ T7764]  ? local_bh_enable+0x1f/0x30
[  345.800381][ T7764]  ? unix_bind+0x9e0/0x9e0
[  345.804634][ T7764]  ? __sock_create+0x64b/0x760
[  345.809239][ T7764]  p9_fd_create_unix+0x210/0x430
[  345.814006][ T7764]  ? p9_pollwake+0x180/0x180
[  345.818432][ T7764]  ? ____kasan_slab_free+0x12c/0x160
[  345.823558][ T7764]  ? p9_client_create+0x737/0x1130
[  345.828502][ T7764]  ? kfree+0xc3/0x270
[  345.832322][ T7764]  p9_client_create+0x81b/0x1130
[  345.837098][ T7764]  ? p9_parse_header+0x6c0/0x6c0
[  345.841870][ T7764]  ? slab_post_alloc_hook+0x80/0x2f0
[  345.846993][ T7764]  ? kstrdup+0x4f/0x70
[  345.850896][ T7764]  ? __kasan_check_write+0x14/0x20
[  345.855843][ T7764]  v9fs_session_init+0x1fa/0x19b0
[  345.860706][ T7764]  ? v9fs_show_options+0x570/0x570
[  345.865651][ T7764]  ? __kasan_kmalloc+0x9/0x10
[  345.870164][ T7764]  ? v9fs_mount+0x5f/0x7b0
[  345.874438][ T7764]  v9fs_mount+0x75/0x7b0
[  345.878499][ T7764]  legacy_get_tree+0xf1/0x190
[  345.883022][ T7764]  ? incfs_get_verity_signature+0x420/0x420
[  345.888743][ T7764]  vfs_get_tree+0x88/0x290
[  345.892993][ T7764]  do_new_mount+0x2ba/0xb30
[  345.897333][ T7764]  ? do_move_mount_old+0x160/0x160
[  345.902277][ T7764]  ? security_capable+0x87/0xb0
[  345.906966][ T7764]  ? ns_capable+0x89/0xe0
[  345.911308][ T7764]  path_mount+0x56f/0xcb0
[  345.915468][ T7764]  __se_sys_mount+0x2c4/0x3b0
[  345.919980][ T7764]  ? __x64_sys_mount+0xd0/0xd0
[  345.924582][ T7764]  __x64_sys_mount+0xbf/0xd0
[  345.929009][ T7764]  do_syscall_64+0x34/0x70
[  345.933261][ T7764]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  345.938984][ T7764] RIP: 0033:0x7f5bd34d5e79
[  345.943240][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.962685][ T7764] RSP: 002b:00007f5bd2153038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  345.970925][ T7764] RAX: ffffffffffffffda RBX: 00007f5bd3671f80 RCX: 00007f5bd34d5e79
[  345.978744][ T7764] RDX: 0000000020000380 RSI: 0000000020000240 RDI: 0000000020000200
[  345.986549][ T7764] RBP: 00007f5bd2153090 R08: 00000000200003c0 R09: 0000000000000000
[  345.994370][ T7764] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002
[  346.002254][ T7764] R13: 0000000000000000 R14: 00007f5bd3671f80 R15: 00007ffe1271c318
[  346.011110][ T7764] 9pnet: p9_fd_create_unix (7764): problem connecting socket: ./file3: -12
[  346.090424][ T7771] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  346.403497][ T7775] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22
[  346.440754][ T7776] udc-core: couldn't find an available UDC or it's busy
[  346.447924][ T7776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  346.483411][ T1845] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[  346.492344][ T1845] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving
[  346.537015][ T1845] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  346.701231][ T7753] device syzkaller0 entered promiscuous mode
[  346.709817][  T303] usb 5-1: USB disconnect, device number 63
[  346.778654][  T320] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  347.058663][  T320] usb 2-1: Using ep0 maxpacket: 16
[  347.158638][ T1858] Bluetooth: hci0: command 0x1001 tx timeout
[  347.165091][  T966] Bluetooth: hci0: sending frame failed (-49)
[  347.178973][  T320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.189966][  T320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.200960][  T320] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  347.210633][  T320] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  347.220179][  T320] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  347.229805][  T320] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  347.318717][ T1858] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  347.492646][  T320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  347.501766][  T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.509853][  T320] usb 2-1: Product: syz
[  347.513842][  T320] usb 2-1: Manufacturer: syz
[  347.518255][  T320] usb 2-1: SerialNumber: syz
[  347.648630][ T1858] usb 3-1: Using ep0 maxpacket: 16
[  347.688722][ T1858] usb 3-1: no configurations
[  347.693180][ T1858] usb 3-1: can't read configurations, error -22
[  347.848659][ T1858] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  347.959098][ T7797] erofs: Unknown parameter 'ÿÿÿÿ)|'
[  348.040308][ T7796] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  348.040308][ T7796] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  348.040308][ T7796] 
[  348.070869][ T7796] EXT4-fs (loop3): 1 orphan inode deleted
[  348.076408][ T7796] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,nodiscard,nodelalloc,init_itable,stripe=0x0000000000000003,resgid=0x0000000000000000,block_validity,nouser_xattr,usrquota,,errors=continue
[  348.098813][ T1858] usb 3-1: Using ep0 maxpacket: 16
[  348.103967][ T7796] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff)
[  348.138689][ T1858] usb 3-1: no configurations
[  348.143123][ T1858] usb 3-1: can't read configurations, error -22
[  348.151357][ T1858] usb usb3-port1: attempt power cycle
[  348.438660][  T320] cdc_ncm 2-1:1.0: SET_CRC_MODE failed
[  348.458709][  T320] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[  348.466651][ T7819] EXT4-fs (loop3): 1 truncate cleaned up
[  348.472236][ T7819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  348.498711][  T320] cdc_ncm 2-1:1.0: bind() failure
[  348.504950][  T320] cdc_ncm 2-1:1.1: bind() failure
[  348.517485][  T320] usb 2-1: USB disconnect, device number 65
[  348.558642][ T1858] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  348.808684][ T1858] usb 3-1: Using ep0 maxpacket: 16
[  348.848708][ T1858] usb 3-1: no configurations
[  348.853208][ T1858] usb 3-1: can't read configurations, error -22
[  349.008638][ T1858] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  349.098723][ T1858] usb 3-1: Using ep0 maxpacket: 16
[  349.195271][ T7830] fuse: Unknown parameter '0x000000000000000a00000000000000000000'
[  349.254610][ T1786] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  349.339227][  T320] Bluetooth: hci0: command 0x1009 tx timeout
[  349.345309][ T1858] usb 3-1: no configurations
[  349.349773][ T1858] usb 3-1: can't read configurations, error -22
[  349.356024][ T1858] usb usb3-port1: unable to enumerate USB device
[  349.578665][ T1786] usb 2-1: Using ep0 maxpacket: 16
[  349.718752][ T1786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  349.726891][ T1786] usb 2-1: config 0 has no interface number 0
[  349.732795][ T1786] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  349.858760][ T1786] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  349.867745][ T1786] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  349.896075][ T1786] usb 2-1: Product: syz
[  349.900559][ T1786] usb 2-1: SerialNumber: syz
[  349.913329][ T1786] usb 2-1: config 0 descriptor??
[  349.938673][ T7825] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  349.946558][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'.
[  350.188669][ T1858] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  350.199329][ T1786] usb 2-1: invalid MIDI in EP 0
[  350.204361][ T1786] snd-usb-audio: probe of 2-1:0.2 failed with error -22
[  350.211928][ T1786] usb 2-1: USB disconnect, device number 66
[  350.434044][ T1845] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  350.748702][ T1858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.762060][ T1858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.771781][ T1858] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  350.780644][ T1858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.789298][ T1858] usb 5-1: config 0 descriptor??
[  350.848856][ T1845] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  350.858175][ T1845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.961398][ T1845] usb 3-1: config 0 descriptor??
[  351.215469][ T7857] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  351.488651][   T25] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  351.758648][   T25] usb 4-1: Using ep0 maxpacket: 16
[  351.888711][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.899529][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.909060][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  351.918590][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  351.928239][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  351.937795][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  352.218811][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  352.227723][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.235486][   T25] usb 4-1: Product: syz
[  352.239535][   T25] usb 4-1: Manufacturer: syz
[  352.243964][   T25] usb 4-1: SerialNumber: syz
[  352.359534][ T1858] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0036/input/input48
[  352.372103][ T1858] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  352.443389][ T7865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  352.452218][ T7865] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff)
[  352.465088][ T7865] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  352.473332][ T7865] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.1781: mark_inode_dirty error
[  352.484611][ T7865] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  352.493136][ T7865] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1781: mark_inode_dirty error
[  352.505980][ T7865] overlayfs: failed to resolve './file2': -2
[  352.560067][ T1858] usb 5-1: USB disconnect, device number 64
[  352.778670][ T1786] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  353.018704][ T1786] usb 2-1: Using ep0 maxpacket: 32
[  353.079301][   T24] kauditd_printk_skb: 54 callbacks suppressed
[  353.079312][   T24] audit: type=1326 audit(1724177826.429:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.109877][   T24] audit: type=1326 audit(1724177826.439:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.133624][   T24] audit: type=1326 audit(1724177826.459:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.157186][ T1786] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  353.165182][ T1786] usb 2-1: config 0 has no interface number 0
[  353.171538][   T24] audit: type=1326 audit(1724177826.459:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.194999][   T25] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[  353.200393][   T24] audit: type=1326 audit(1724177826.459:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.206369][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.223589][   T25] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed
[  353.235882][   T24] audit: type=1326 audit(1724177826.459:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.259841][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.261114][   T24] audit: type=1326 audit(1724177826.459:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.290166][   T24] audit: type=1326 audit(1724177826.459:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.313901][   T24] audit: type=1326 audit(1724177826.459:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.329137][   T25] cdc_ncm 4-1:1.0: bind() failure
[  353.337318][   T24] audit: type=1326 audit(1724177826.459:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.4.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  353.342494][ T7872] device bridge_slave_0 entered promiscuous mode
[  353.373735][   T25] cdc_ncm 4-1:1.1: bind() failure
[  353.377226][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.387849][   T25] usb 4-1: USB disconnect, device number 61
[  353.389296][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.402431][ T7872] device bridge_slave_1 entered promiscuous mode
[  353.418709][ T1786] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d92, bcdDevice= 1.bd
[  353.436957][ T1786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.488949][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.495812][ T7872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.502982][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.509845][ T7872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.516717][ T1786] usb 2-1: Product: syz
[  353.521473][ T1786] usb 2-1: Manufacturer: syz
[  353.525912][ T1786] usb 2-1: SerialNumber: syz
[  353.548048][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.555238][ T1786] usb 2-1: config 0 descriptor??
[  353.562333][ T1845] usb 3-1: Cannot set autoneg
[  353.566913][ T1845] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  353.580241][ T1845] usb 3-1: USB disconnect, device number 78
[  353.589545][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.629304][ T7885] /dev/loop4: Can't open blockdev
[  353.688634][  T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  353.802245][  T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  353.822943][ T2893] usb 2-1: USB disconnect, device number 67
[  353.831848][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  353.840428][  T303] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.847338][  T303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.854588][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  353.859108][ T7889] EXT4-fs (loop3): Test dummy encryption mode enabled
[  353.864451][  T303] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.869347][ T7889] EXT4-fs (loop3): Ignoring removed oldalloc option
[  353.875850][  T303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.883200][ T7889] EXT4-fs (loop3): Test dummy encryption mode enabled
[  353.922756][ T7889] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.1787: invalid block
[  353.934612][ T7889] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1787: couldn't read orphan inode 11 (err -117)
[  353.961210][ T7893] fuse: Unknown parameter '0x000000000000000a00000000000000000000'
[  353.976671][ T7889] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue
[  354.087835][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  354.096035][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  354.107186][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  354.120541][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  354.129096][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  354.136306][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  354.144956][ T7872] device veth0_vlan entered promiscuous mode
[  354.154691][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  354.162728][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  354.172616][ T7872] device veth1_macvtap entered promiscuous mode
[  354.181140][ T7897] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  354.183162][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  354.193360][ T7897] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue
[  354.199905][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  354.229198][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  354.267440][  T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  354.275509][  T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  354.738662][  T352] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  355.136401][ T7915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.158861][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.195993][ T7914] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  355.206445][ T7914] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff)
[  355.326285][ T7927] device pim6reg1 entered promiscuous mode
[  355.778753][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.812949][ T7942] udc-core: couldn't find an available UDC or it's busy
[  355.820823][ T7942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  356.083024][ T7951] /dev/loop4: Can't open blockdev
[  356.158640][ T1845] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  356.687520][ T1845] usb 2-1: device descriptor read/64, error -71
[  356.832539][ T7965] xt_hashlimit: size too large, truncated to 1048576
[  356.838747][ T7967] xt_hashlimit: size too large, truncated to 1048576
[  357.217000][ T1845] usb 2-1: Using ep0 maxpacket: 16
[  357.268664][ T2893] usb 1-1: new low-speed USB device number 67 using dummy_hcd
[  357.348721][  T303] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  357.348770][ T1845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.366850][ T1845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.376425][ T1845] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  357.385209][ T1845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.393912][ T1845] usb 2-1: config 0 descriptor??
[  357.752781][  T303] usb 3-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config
[  357.769324][ T2893] usb 1-1: config 1 interface 0 altsetting 28 endpoint 0x2 has invalid maxpacket 1023, setting to 8
[  357.780974][ T2893] usb 1-1: config 1 interface 0 has no altsetting 0
[  357.787375][  T303] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  357.801315][  T303] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  357.811201][  T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.903591][ T1845] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0
[  357.907600][  T303] usb 3-1: config 0 descriptor??
[  357.915358][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  357.925702][ T1845] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0
[  357.933479][ T1845] cp2112 0003:10C4:EA90.0037: unexpected long global item
[  357.942755][ T1845] cp2112 0003:10C4:EA90.0037: parse failed
[  357.949326][ T1845] cp2112: probe of 0003:10C4:EA90.0037 failed with error -22
[  358.107868][ T1845] usb 2-1: USB disconnect, device number 68
[  358.302537][ T7982] FAULT_INJECTION: forcing a failure.
[  358.302537][ T7982] name failslab, interval 1, probability 0, space 0, times 0
[  358.315134][ T7982] CPU: 0 PID: 7982 Comm: syz.3.1807 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  358.324822][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  358.334714][ T7982] Call Trace:
[  358.337848][ T7982]  dump_stack_lvl+0x1e2/0x24b
[  358.342354][ T7982]  ? panic+0x812/0x812
[  358.346256][ T7982]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  358.351647][ T7982]  ? avc_has_perm+0x14d/0x400
[  358.356156][ T7982]  dump_stack+0x15/0x17
[  358.360144][ T7982]  should_fail+0x3c6/0x510
[  358.364401][ T7982]  ? vmemdup_user+0x3d/0x160
[  358.368831][ T7982]  __should_failslab+0xa4/0xe0
[  358.373435][ T7982]  should_failslab+0x9/0x20
[  358.377765][ T7982]  __kmalloc+0x60/0x330
[  358.381760][ T7982]  vmemdup_user+0x3d/0x160
[  358.386014][ T7982]  kvm_vcpu_ioctl_set_cpuid+0x86/0xb50
[  358.391304][ T7982]  ? _copy_from_user+0x96/0xd0
[  358.395905][ T7982]  kvm_arch_vcpu_ioctl+0x102e/0x1f10
[  358.401025][ T7982]  ? 0xffffffffa0010000
[  358.405016][ T7982]  ? is_bpf_text_address+0x172/0x190
[  358.410139][ T7982]  ? kvm_arch_vcpu_put+0x5a0/0x5a0
[  358.415088][ T7982]  ? __kernel_text_address+0x9b/0x110
[  358.420293][ T7982]  ? arch_stack_walk+0xf3/0x140
[  358.424982][ T7982]  ? stack_trace_save+0x113/0x1c0
[  358.429838][ T7982]  ? terminate_walk+0x407/0x4f0
[  358.434525][ T7982]  ? stack_trace_snprint+0xf0/0xf0
[  358.439475][ T7982]  ? kmem_cache_free+0xa9/0x1e0
[  358.444164][ T7982]  ? kmem_cache_free+0xa9/0x1e0
[  358.448853][ T7982]  ? kasan_set_track+0x5d/0x70
[  358.453452][ T7982]  ? kasan_set_track+0x4b/0x70
[  358.458046][ T7982]  ? kasan_set_free_info+0x23/0x40
[  358.463078][ T7982]  ? ____kasan_slab_free+0x121/0x160
[  358.468246][ T7982]  ? __kasan_slab_free+0x11/0x20
[  358.472973][ T7982]  ? slab_free_freelist_hook+0xc0/0x190
[  358.478366][ T7982]  ? kmem_cache_free+0xa9/0x1e0
[  358.483043][ T7982]  ? putname+0xe7/0x140
[  358.487040][ T7982]  ? do_sys_openat2+0x1fc/0x710
[  358.491719][ T7982]  ? __x64_sys_openat+0x243/0x290
[  358.496590][ T7982]  ? do_syscall_64+0x34/0x70
[  358.501186][ T7982]  ? _kstrtoull+0x3a0/0x4a0
[  358.505520][ T7982]  ? kstrtouint_from_user+0x20a/0x2a0
[  358.510731][ T7982]  ? kstrtol_from_user+0x310/0x310
[  358.515675][ T7982]  ? memset+0x35/0x40
[  358.519493][ T7982]  ? __fsnotify_parent+0x4b9/0x6c0
[  358.524442][ T7982]  ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0
[  358.531038][ T7982]  ? proc_fail_nth_write+0x20b/0x290
[  358.536162][ T7982]  ? ioctl_has_perm+0x1f8/0x560
[  358.540848][ T7982]  ? do_vfs_ioctl+0x798/0x1a30
[  358.545463][ T7982]  ? __kasan_check_write+0x14/0x20
[  358.550401][ T7982]  ? mutex_lock_killable+0xa5/0x110
[  358.555429][ T7982]  ? __mutex_lock_interruptible_slowpath+0x10/0x10
[  358.561770][ T7982]  kvm_vcpu_ioctl+0x6be/0xce0
[  358.566281][ T7982]  ? kvm_create_vcpu_debugfs+0x170/0x170
[  358.571742][ T7982]  ? selinux_file_ioctl+0x3cc/0x540
[  358.576783][ T7982]  ? selinux_file_alloc_security+0x120/0x120
[  358.582593][ T7982]  ? __fget_files+0x31e/0x380
[  358.587110][ T7982]  ? security_file_ioctl+0x84/0xb0
[  358.592062][ T7982]  ? kvm_create_vcpu_debugfs+0x170/0x170
[  358.597518][ T7982]  __se_sys_ioctl+0x114/0x190
[  358.602036][ T7982]  __x64_sys_ioctl+0x7b/0x90
[  358.606461][ T7982]  do_syscall_64+0x34/0x70
[  358.610714][ T7982]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  358.616438][ T7982] RIP: 0033:0x7f5bd34d5e79
[  358.620692][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.640394][ T7982] RSP: 002b:00007f5bd2153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  358.648724][ T7982] RAX: ffffffffffffffda RBX: 00007f5bd3671f80 RCX: 00007f5bd34d5e79
[  358.656710][ T7982] RDX: 0000000020000080 RSI: 000000004008ae8a RDI: 0000000000000009
[  358.664520][ T7982] RBP: 00007f5bd2153090 R08: 0000000000000000 R09: 0000000000000000
[  358.672424][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.680232][ T7982] R13: 0000000000000000 R14: 00007f5bd3671f80 R15: 00007ffe1271c318
[  358.906162][ T1845] usb 3-1: USB disconnect, device number 79
[  359.031060][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'.
[  359.621059][ T8006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  359.638042][ T8006] EXT4-fs (loop3): 1 truncate cleaned up
[  359.646474][ T8006] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  359.660462][   T24] kauditd_printk_skb: 32 callbacks suppressed
[  359.660480][   T24] audit: type=1400 audit(1724177833.009:1953): avc:  denied  { map } for  pid=8005 comm="syz.3.1814" path="/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  359.670161][ T8006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1814: bg 0: block 2048: padding at end of block bitmap is not set
[  359.829002][ T8006] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  359.848950][ T2893] usb 1-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.40
[  359.864768][ T2893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.889041][ T8006] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #12: block 7: comm syz.3.1814: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=12, rec_len=0, size=68 fake=0
[  359.949472][ T2893] usb 1-1: can't set config #1, error -71
[  359.961213][ T2893] usb 1-1: USB disconnect, device number 67
[  360.008765][ T7473] EXT4-fs error (device loop3): ext4_read_inline_dir:1596: inode #12: block 7: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=92, inode=12, rec_len=0, size=148 fake=0
[  360.032427][ T7473] EXT4-fs error (device loop3): ext4_lookup:1831: inode #12: comm syz-executor: deleted inode referenced: 13
[  360.107839][ T7473] EXT4-fs error (device loop3): ext4_lookup:1831: inode #12: comm syz-executor: deleted inode referenced: 13
[  360.119936][   T24] audit: type=1326 audit(1724177833.469:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.0.1815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900773fe79 code=0x0
[  361.183408][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.194985][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.217271][ T8046] device bridge_slave_0 entered promiscuous mode
[  361.227179][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.228624][ T1845] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  361.234177][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.249059][ T8046] device bridge_slave_1 entered promiscuous mode
[  361.317286][ T8053] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.378394][ T8053] exFAT-fs (loop0): unable to read boot sector
[  361.398488][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.405359][ T8046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.412479][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.419241][ T8046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.426406][ T8053] exFAT-fs (loop0): failed to read boot sector
[  361.432441][ T8053] exFAT-fs (loop0): failed to recognize exfat type
[  361.462667][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.478990][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.486257][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.494286][ T8055] EXT4-fs (loop1): dax option not supported
[  361.506280][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  361.516497][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.523451][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.539913][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  361.548150][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.555028][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.562749][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  361.571148][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  361.596811][ T8046] device veth0_vlan entered promiscuous mode
[  361.610003][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  361.628509][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  361.637193][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  361.645576][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  361.658766][ T1845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.662502][ T8046] device veth1_macvtap entered promiscuous mode
[  361.676695][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  361.684845][ T1845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.684861][ T1845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  361.684887][ T1845] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  361.684899][ T1845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.686816][ T1845] usb 5-1: config 0 descriptor??
[  361.699777][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  361.737865][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  361.753438][ T8055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  361.775489][ T8055] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  361.793092][ T2456] device bridge_slave_1 left promiscuous mode
[  361.818769][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.827445][ T8055] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  361.836067][ T2456] device bridge_slave_0 left promiscuous mode
[  361.842294][ T8055] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.1827: mark_inode_dirty error
[  361.853677][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.860892][ T8055] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  361.869706][ T2456] device veth1_macvtap left promiscuous mode
[  361.872751][ T8055] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1827: mark_inode_dirty error
[  361.875641][ T2456] device veth0_vlan left promiscuous mode
[  362.023097][ T8062] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  362.035273][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  362.043999][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  362.052218][ T8062] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff)
[  362.062690][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  362.079761][ T8062] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27
[  362.089203][ T8062] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #2: comm syz.0.1828: mark_inode_dirty error
[  362.100656][ T8062] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27
[  362.103328][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  362.109299][ T8062] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.1828: mark_inode_dirty error
[  362.198787][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.323456][   T24] audit: type=1326 audit(1724177835.669:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.402582][   T24] audit: type=1326 audit(1724177835.729:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.413695][ T8028] device syzkaller0 entered promiscuous mode
[  362.428739][   T24] audit: type=1326 audit(1724177835.729:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.455963][   T24] audit: type=1326 audit(1724177835.729:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.480235][   T24] audit: type=1326 audit(1724177835.729:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.508607][  T319] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  362.518404][   T24] audit: type=1326 audit(1724177835.729:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.547984][ T8028] udc-core: couldn't find an available UDC or it's busy
[  362.553417][   T24] audit: type=1326 audit(1724177835.729:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.554880][ T8028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  362.578316][   T24] audit: type=1326 audit(1724177835.729:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1aa10e79 code=0x7ffc0000
[  362.639663][ T1845] acrux 0003:1A34:0802.0038: item fetching failed at offset 3/5
[  362.647429][ T1845] acrux 0003:1A34:0802.0038: parse failed
[  362.653870][ T1845] acrux: probe of 0003:1A34:0802.0038 failed with error -22
[  362.681010][ T8078] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1830: bad orphan inode 8192
[  362.691545][ T8078] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  363.128304][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.139116][  T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.148822][  T319] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  363.157767][  T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.171076][  T319] usb 4-1: config 0 descriptor??
[  363.186768][ T8090] EXT4-fs (loop0): 1 truncate cleaned up
[  363.198027][ T8090] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  363.223671][ T2456] device bridge_slave_1 left promiscuous mode
[  363.229788][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.237030][ T2456] device bridge_slave_0 left promiscuous mode
[  363.243500][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.332854][ T2893] usb 5-1: USB disconnect, device number 65
[  363.488742][  T352] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  363.714592][  T319] usbhid 4-1:0.0: can't add hid device: -71
[  363.720918][  T319] usbhid: probe of 4-1:0.0 failed with error -71
[  363.727944][  T319] usb 4-1: USB disconnect, device number 62
[  363.989127][  T352] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  364.011133][  T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.066721][  T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.076608][  T352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  364.412846][  T352] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  364.431215][  T352] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  364.443392][  T352] usb 3-1: Manufacturer: syz
[  364.451645][  T352] usb 3-1: config 0 descriptor??
[  364.576978][ T8130] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  364.587849][ T8130] exFAT-fs (loop0): unable to read boot sector
[  364.594175][ T8130] exFAT-fs (loop0): failed to read boot sector
[  364.603458][ T8130] exFAT-fs (loop0): failed to recognize exfat type
[  364.735689][ T8132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  364.746132][ T8132] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  364.961780][  T352] appleir 0003:05AC:8243.0039: unknown main item tag 0x0
[  364.978817][  T352] appleir 0003:05AC:8243.0039: No inputs registered, leaving
[  364.996308][  T352] appleir 0003:05AC:8243.0039: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  365.058632][ T1786] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  365.338619][ T1786] usb 4-1: Using ep0 maxpacket: 8
[  365.458708][ T1786] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  365.467612][ T1786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.476120][ T1786] usb 4-1: config 0 descriptor??
[  365.648626][  T319] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  365.938670][ T1786] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  365.958601][ T1786] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0
[  365.958807][  T319] usb 2-1: device descriptor read/64, error -71
[  366.308642][  T352] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  366.378677][  T319] usb 2-1: device descriptor read/64, error -71
[  366.428644][ T1845] usb 3-1: reset high-speed USB device number 80 using dummy_hcd
[  366.548670][ T1786] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  366.558821][ T1786] asix: probe of 4-1:0.0 failed with error -71
[  366.565485][ T1786] usb 4-1: USB disconnect, device number 63
[  366.668627][  T319] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  366.679278][  T352] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  366.688194][  T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.697129][  T352] usb 5-1: config 0 descriptor??
[  366.978643][  T319] usb 2-1: device descriptor read/64, error -71
[  366.998659][ T1845] usb 3-1: device descriptor read/64, error -71
[  367.158887][ T1845] usb 3-1: device reset changed ep0 maxpacket size!
[  367.165486][   T25] usb 3-1: USB disconnect, device number 80
[  367.319243][   T25] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  367.348705][ T1786] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  367.388659][  T319] usb 2-1: device descriptor read/64, error -71
[  367.508792][  T319] usb usb2-port1: attempt power cycle
[  367.559539][   T25] usb 3-1: Using ep0 maxpacket: 16
[  367.708743][ T1786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.719627][ T1786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.729201][ T1786] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  367.738012][ T1786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.746848][ T1786] usb 4-1: config 0 descriptor??
[  367.838847][   T25] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  367.847868][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.855728][   T25] usb 3-1: Product: syz
[  367.859767][   T25] usb 3-1: Manufacturer: syz
[  367.864124][   T25] usb 3-1: SerialNumber: syz
[  367.869420][   T25] usb 3-1: config 0 descriptor??
[  367.938655][  T319] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  368.118689][  T319] usb 2-1: device descriptor read/8, error -71
[  368.168685][   T25] r8152 3-1:0.0: Unknown version 0x0000
[  368.174914][   T25] usb 3-1: USB disconnect, device number 81
[  368.269545][ T1786] wacom 0003:056A:00D0.003A: unknown main item tag 0x0
[  368.276437][ T1786] wacom 0003:056A:00D0.003A: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  368.286565][ T1786] wacom 0003:056A:00D0.003A: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0
[  368.297999][ T1786] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.003A/input/input50
[  368.408660][  T319] usb 2-1: device descriptor read/8, error -71
[  368.475233][ T1858] usb 4-1: USB disconnect, device number 64
[  368.542263][ T8185] F2FS-fs (loop1): invalid crc value
[  368.548965][ T8185] F2FS-fs (loop1): Found nat_bits in checkpoint
[  368.570783][ T8185] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  368.577485][ T8185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  368.592604][   T24] kauditd_printk_skb: 70 callbacks suppressed
[  368.592615][   T24] audit: type=1400 audit(1724177841.939:2033): avc:  denied  { create } for  pid=8184 comm="syz.1.1855" name="#35" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  368.619705][   T24] audit: type=1400 audit(1724177841.939:2034): avc:  denied  { link } for  pid=8184 comm="syz.1.1855" name="#35" dev="loop1" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  368.641467][   T24] audit: type=1400 audit(1724177841.939:2035): avc:  denied  { rename } for  pid=8184 comm="syz.1.1855" name="#36" dev="loop1" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  368.642736][ T7643] attempt to access beyond end of device
[  368.642736][ T7643] loop1: rw=524288, want=45072, limit=40427
[  368.675743][ T7643] attempt to access beyond end of device
[  368.675743][ T7643] loop1: rw=0, want=45072, limit=40427
[  368.703295][ T2456] attempt to access beyond end of device
[  368.703295][ T2456] loop1: rw=2049, want=45120, limit=40427
[  368.861570][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.868436][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.875863][ T8194] device bridge_slave_0 entered promiscuous mode
[  368.884758][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.891845][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.899040][ T8194] device bridge_slave_1 entered promiscuous mode
[  368.931845][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.938718][ T8194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.945773][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.952606][ T8194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.970223][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  368.977772][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.985327][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.995649][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.002391][ T1786] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  369.004029][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.017770][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.033077][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  369.041083][  T320] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.047911][  T320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.055128][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  369.073035][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  369.087148][ T8194] device veth0_vlan entered promiscuous mode
[  369.094004][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  369.103060][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  369.110939][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  369.118478][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  369.133847][ T8194] device veth1_macvtap entered promiscuous mode
[  369.140028][  T352] usb 5-1: Cannot set autoneg
[  369.144514][  T352] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  369.147283][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  369.169256][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  369.177842][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  369.183441][  T352] usb 5-1: USB disconnect, device number 66
[  369.269653][ T8207] EXT4-fs (loop3): Unrecognized mount option "fsname=%" or missing value
[  369.425087][ T8211] EXT4-fs (loop1): 1 orphan inode deleted
[  369.430955][ T8211] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue
[  369.519339][ T2456] device bridge_slave_1 left promiscuous mode
[  369.526420][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.534147][ T2456] device bridge_slave_0 left promiscuous mode
[  369.540434][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.558750][ T1786] usb 3-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config
[  369.568851][ T2456] device veth1_macvtap left promiscuous mode
[  369.578622][ T1786] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 2031, setting to 1024
[  369.598751][ T2456] device veth0_vlan left promiscuous mode
[  369.608624][ T1786] usb 3-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  369.630215][ T1786] usb 3-1: config 1 interface 0 has no altsetting 0
[  369.699520][   T24] audit: type=1400 audit(1724177843.049:2036): avc:  denied  { getopt } for  pid=8210 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  370.238189][ T1786] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40
[  370.247489][ T1786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.277691][ T1786] usb 3-1: Product: 䀊
[  370.281830][ T1786] usb 3-1: Manufacturer: з
[  370.286312][ T1786] usb 3-1: SerialNumber: �
[  370.318730][ T8192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  370.638695][  T303] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  370.689593][ T8226] F2FS-fs (loop3): Test dummy encryption mode enabled
[  370.697789][ T8226] F2FS-fs (loop3): invalid crc value
[  370.705036][ T8226] F2FS-fs (loop3): Found nat_bits in checkpoint
[  370.726309][ T8226] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  370.778731][ T1786] usbhid 3-1:1.0: can't add hid device: -71
[  370.784572][ T1786] usbhid: probe of 3-1:1.0 failed with error -71
[  370.795004][ T1786] usb 3-1: USB disconnect, device number 82
[  370.888623][  T303] usb 2-1: Using ep0 maxpacket: 16
[  371.074791][   T24] audit: type=1400 audit(1724177844.419:2037): avc:  denied  { map } for  pid=8246 comm="syz.4.1870" path="socket:[49511]" dev="sockfs" ino=49511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  371.099542][   T24] audit: type=1400 audit(1724177844.419:2038): avc:  denied  { accept } for  pid=8246 comm="syz.4.1870" path="socket:[49511]" dev="sockfs" ino=49511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  371.166493][  T352] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  371.218731][  T303] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  371.227859][  T303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.235941][  T303] usb 2-1: Product: syz
[  371.240261][  T303] usb 2-1: Manufacturer: syz
[  371.244698][  T303] usb 2-1: SerialNumber: syz
[  371.292754][  T303] usb 2-1: config 0 descriptor??
[  371.558897][  T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.569729][  T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.579502][  T352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.592149][  T352] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  371.601021][  T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.609399][  T352] usb 4-1: config 0 descriptor??
[  371.749946][   T24] audit: type=1326 audit(1724177845.099:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff574567e79 code=0x7ffc0000
[  371.773616][  T303] usb 2-1: USB disconnect, device number 73
[  371.774315][   T24] audit: type=1326 audit(1724177845.119:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff574567e79 code=0x7ffc0000
[  372.080395][ T8240] udc-core: couldn't find an available UDC or it's busy
[  372.087751][ T8240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  372.360733][  T320] Bluetooth: hci0: command 0x1003 tx timeout
[  372.374902][  T966] Bluetooth: hci0: sending frame failed (-49)
[  372.814957][ T8268] SELinux:  duplicate or incompatible mount options
[  373.849367][ T8288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  373.878658][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.040799][   T24] audit: type=1326 audit(1724177847.389:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.3.1881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f54f38e79 code=0x0
[  374.078671][  T352] usbhid 4-1:0.0: can't add hid device: -71
[  374.084586][  T352] usbhid: probe of 4-1:0.0 failed with error -71
[  374.092596][  T352] usb 4-1: USB disconnect, device number 65
[  374.098667][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.438796][  T303] Bluetooth: hci0: command 0x1001 tx timeout
[  374.444782][  T966] Bluetooth: hci0: sending frame failed (-49)
[  374.528621][  T352] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  374.802091][  T352] usb 4-1: Using ep0 maxpacket: 8
[  374.968676][  T352] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  374.977191][  T352] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  374.987619][  T352] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12
[  374.996567][  T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.010142][  T352] usb 4-1: config 0 descriptor??
[  375.136871][  T352] uvcvideo: Found UVC 0.00 device <unnamed> (05a9:2640)
[  375.146347][  T352] uvcvideo: No valid video chain found.
[  375.321226][  T303] usb 4-1: USB disconnect, device number 66
[  375.838643][  T352] usb 5-1: new low-speed USB device number 67 using dummy_hcd
[  375.984640][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.991606][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.000873][ T8331] device bridge_slave_0 entered promiscuous mode
[  376.034604][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.041495][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.052347][ T8331] device bridge_slave_1 entered promiscuous mode
[  376.100737][  T352] usb 5-1: Invalid ep0 maxpacket: 16
[  376.146255][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.153165][ T8331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.160231][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.167011][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.192393][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.200691][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.208235][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  376.216002][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  376.232396][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  376.240827][  T303] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.247694][  T303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.249511][  T352] usb 5-1: new low-speed USB device number 68 using dummy_hcd
[  376.258123][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  376.270674][  T303] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.277496][  T303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.288793][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  376.296624][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  376.309708][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  376.321272][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  376.332224][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  376.340716][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  376.353990][ T8331] device veth0_vlan entered promiscuous mode
[  376.423184][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  376.440348][ T8331] device veth1_macvtap entered promiscuous mode
[  376.450679][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  376.460941][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  376.508666][  T352] usb 5-1: Invalid ep0 maxpacket: 16
[  376.513900][  T352] usb usb5-port1: attempt power cycle
[  376.524577][ T8344] FAT-fs (loop0): Directory bread(block 64) failed
[  376.528640][  T303] Bluetooth: hci0: command 0x1009 tx timeout
[  376.531354][ T8344] FAT-fs (loop0): Directory bread(block 65) failed
[  376.543397][ T8344] FAT-fs (loop0): Directory bread(block 66) failed
[  376.549855][ T8344] FAT-fs (loop0): Directory bread(block 67) failed
[  376.556277][ T8344] FAT-fs (loop0): Directory bread(block 68) failed
[  376.562793][ T8344] FAT-fs (loop0): Directory bread(block 69) failed
[  376.569187][ T8344] FAT-fs (loop0): Directory bread(block 70) failed
[  376.575467][ T8344] FAT-fs (loop0): Directory bread(block 71) failed
[  376.582104][ T8344] FAT-fs (loop0): Directory bread(block 72) failed
[  376.588427][ T8344] FAT-fs (loop0): Directory bread(block 73) failed
[  376.928650][  T352] usb 5-1: new low-speed USB device number 69 using dummy_hcd
[  377.046502][  T352] usb 5-1: Invalid ep0 maxpacket: 16
[  377.118722][ T1857] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  377.133650][ T8360] FAT-fs (loop3): Directory bread(block 64) failed
[  377.140065][ T8360] FAT-fs (loop3): Directory bread(block 65) failed
[  377.146336][ T8360] FAT-fs (loop3): Directory bread(block 66) failed
[  377.152946][ T8360] FAT-fs (loop3): Directory bread(block 67) failed
[  377.160084][ T8360] FAT-fs (loop3): Directory bread(block 68) failed
[  377.166638][ T8360] FAT-fs (loop3): Directory bread(block 69) failed
[  377.173367][ T8360] FAT-fs (loop3): Directory bread(block 70) failed
[  377.179856][ T8360] FAT-fs (loop3): Directory bread(block 71) failed
[  377.186212][ T8360] FAT-fs (loop3): Directory bread(block 72) failed
[  377.192655][ T8360] FAT-fs (loop3): Directory bread(block 73) failed
[  377.208630][  T352] usb 5-1: new low-speed USB device number 70 using dummy_hcd
[  377.298697][  T352] usb 5-1: Invalid ep0 maxpacket: 16
[  377.303944][  T352] usb usb5-port1: unable to enumerate USB device
[  377.368610][ T1857] usb 1-1: Using ep0 maxpacket: 16
[  377.498673][ T1857] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.509405][ T1857] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.519194][ T1857] usb 1-1: config 0 interface 0 has no altsetting 0
[  377.525643][ T1857] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  377.534734][ T1857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.546220][ T1857] usb 1-1: config 0 descriptor??
[  378.004230][ T8348] EXT4-fs (loop0): error: could not find journal device path: error -2
[  378.488636][ T1857] usbhid 1-1:0.0: can't add hid device: -71
[  378.494529][ T1857] usbhid: probe of 1-1:0.0 failed with error -71
[  378.500871][  T303] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  378.516918][ T1857] usb 1-1: USB disconnect, device number 68
[  378.565673][ T8392] 9pnet: Could not find request transport: fdCrfdno=p¢ú…K^ìöwý�Í°)'w""Ís‘Cé$	ˆE&W0x0000000000000009
[  378.677612][ T8395] SELinux:  Context Ž is not valid (left unmapped).
[  378.678777][ T8389] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  378.684951][   T24] audit: type=1400 audit(1724177852.029:2042): avc:  denied  { create } for  pid=8394 comm="syz.4.1901" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E
[  378.697033][ T8389] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  378.718302][   T24] audit: type=1400 audit(1724177852.059:2043): avc:  denied  { associate } for  pid=8394 comm="syz.4.1901" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=8E
[  378.721603][ T1858] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  378.752755][ T8389] F2FS-fs (loop0): invalid crc value
[  378.758091][   T24] audit: type=1400 audit(1724177852.059:2044): avc:  denied  { read write open } for  pid=8394 comm="syz.4.1901" path="/59/file1" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E
[  378.783717][   T24] audit: type=1400 audit(1724177852.089:2045): avc:  denied  { lock } for  pid=8394 comm="syz.4.1901" path="/59/file1" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E
[  378.791928][ T8389] F2FS-fs (loop0): Found nat_bits in checkpoint
[  378.807406][   T24] audit: type=1400 audit(1724177852.129:2046): avc:  denied  { ioctl } for  pid=8386 comm="syz.2.1898" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  378.872758][ T8389] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  378.879682][ T8389] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  378.906141][   T24] audit: type=1400 audit(1724177852.249:2047): avc:  denied  { create } for  pid=8388 comm="syz.0.1899" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  378.935300][   T24] audit: type=1400 audit(1724177852.269:2048): avc:  denied  { unlink } for  pid=7305 comm="syz-executor" name="file1" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E
[  378.988319][  T303] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.999706][  T303] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.010040][  T303] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  379.019144][  T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.126225][ T8405] netlink: 492 bytes leftover after parsing attributes in process `syz.0.1899'.
[  379.279840][ T8407] udc-core: couldn't find an available UDC or it's busy
[  379.286671][   T24] audit: type=1400 audit(1724177852.629:2049): avc:  denied  { read write } for  pid=8375 comm="syz.3.1895" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  379.294266][ T8407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  379.310585][   T24] audit: type=1400 audit(1724177852.629:2050): avc:  denied  { open } for  pid=8375 comm="syz.3.1895" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  379.409081][ T1858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.419837][ T1858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.429427][ T1858] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  379.438331][ T1858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.449443][  T303] usbhid 4-1:17.0: can't add hid device: -71
[  379.455344][  T303] usbhid: probe of 4-1:17.0 failed with error -71
[  379.461755][ T1858] usb 3-1: config 0 descriptor??
[  379.472911][  T303] usb 4-1: USB disconnect, device number 67
[  379.524226][ T8411] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  379.532079][ T8411] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  379.542694][ T8411] F2FS-fs (loop3): invalid crc value
[  379.552713][ T8411] F2FS-fs (loop3): Found nat_bits in checkpoint
[  379.594466][ T8411] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  379.601490][ T8411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  379.703100][ T8421] overlayfs: missing 'lowerdir'
[  380.187847][ T2456] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  380.196566][ T2456] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  380.338745][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.345661][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.352946][ T8438] device bridge_slave_0 entered promiscuous mode
[  380.361329][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.368283][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.375853][ T8438] device bridge_slave_1 entered promiscuous mode
[  380.455260][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.462147][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.469248][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.476005][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.500805][ T1845] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.508282][ T1845] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.548660][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  380.556233][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  380.577407][ T8438] device veth0_vlan entered promiscuous mode
[  380.584315][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.592753][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.598623][  T320] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  380.601106][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  380.616378][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  380.626889][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  380.636378][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.643249][  T355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.651410][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  380.705155][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.712080][  T355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.748622][   T24] audit: type=1400 audit(1724177854.019:2051): avc:  denied  { write } for  pid=8460 comm="syz.0.1910" name="file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  380.791559][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  380.799660][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  380.814838][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  380.826955][ T8438] device veth1_macvtap entered promiscuous mode
[  380.838304][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'.
[  380.847997][ T8465] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1911'.
[  380.863227][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.871466][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.906901][ T8467] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  381.000645][ T8471] fuse: Bad value for 'fd'
[  381.318720][  T320] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  381.329547][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.342013][  T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  381.355110][  T320] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  381.364010][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.372789][  T320] usb 4-1: config 0 descriptor??
[  381.498743][ T1858] usbhid 3-1:0.0: can't add hid device: -71
[  381.504849][ T1858] usbhid: probe of 3-1:0.0 failed with error -71
[  381.518047][   T49] device bridge_slave_1 left promiscuous mode
[  381.524806][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.535007][   T49] device bridge_slave_0 left promiscuous mode
[  381.542882][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.556309][   T49] device veth1_macvtap left promiscuous mode
[  381.596971][   T49] device veth0_vlan left promiscuous mode
[  381.704459][ T1858] usb 3-1: USB disconnect, device number 83
[  381.781166][ T8480] netlink: 'syz.0.1913': attribute type 3 has an invalid length.
[  381.788914][ T8480] netlink: 'syz.0.1913': attribute type 3 has an invalid length.
[  381.934460][  T320] hid (null): invalid report_count -613007256
[  381.943011][  T320] nintendo 0003:057E:2009.003B: invalid report_count -613007256
[  381.951106][  T320] nintendo 0003:057E:2009.003B: item 0 4 1 9 parsing failed
[  381.958544][  T320] nintendo 0003:057E:2009.003B: HID parse failed
[  381.969684][  T320] nintendo 0003:057E:2009.003B: probe - fail = -22
[  381.976366][  T320] nintendo: probe of 0003:057E:2009.003B failed with error -22
[  382.136523][  T351] usb 4-1: USB disconnect, device number 68
[  382.684167][ T8516] device pim6reg1 entered promiscuous mode
[  382.859027][ T8514] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  382.866885][ T8514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  382.877342][ T8514] F2FS-fs (loop1): Found nat_bits in checkpoint
[  382.900717][ T8514] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  382.907598][ T8514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  382.929983][ T8514] overlayfs: invalid origin (00000079004e200000000000000000000000000000000000000001000000000000000000000000000000000000000000)
[  382.948283][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.948292][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.955921][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.963353][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.970904][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.978166][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  382.985628][ T8438] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  383.178656][ T8534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  383.250172][ T8541] FAULT_INJECTION: forcing a failure.
[  383.250172][ T8541] name failslab, interval 1, probability 0, space 0, times 0
[  383.262746][ T8541] CPU: 1 PID: 8541 Comm: syz.4.1926 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  383.272385][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  383.282278][ T8541] Call Trace:
[  383.285410][ T8541]  dump_stack_lvl+0x1e2/0x24b
[  383.289917][ T8541]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  383.295213][ T8541]  dump_stack+0x15/0x17
[  383.299204][ T8541]  should_fail+0x3c6/0x510
[  383.303465][ T8541]  ? __d_alloc+0x2d/0x6c0
[  383.307627][ T8541]  __should_failslab+0xa4/0xe0
[  383.312222][ T8541]  should_failslab+0x9/0x20
[  383.316563][ T8541]  kmem_cache_alloc+0x3d/0x2e0
[  383.321166][ T8541]  __d_alloc+0x2d/0x6c0
[  383.325166][ T8541]  d_alloc_parallel+0xec/0x1370
[  383.329931][ T8541]  ? preempt_schedule+0xd9/0xe0
[  383.334659][ T8541]  ? preempt_schedule_common+0xbe/0xf0
[  383.334876][ T8534] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff)
[  383.339914][ T8541]  ? preempt_schedule+0xd9/0xe0
[  383.339924][ T8541]  ? schedule_preempt_disabled+0x20/0x20
[  383.339933][ T8541]  ? sysvec_reschedule_ipi+0x83/0x160
[  383.339944][ T8541]  ? d_hash_and_lookup+0x1e0/0x1e0
[  383.339952][ T8541]  ? __d_lookup+0x4b6/0x520
[  383.339970][ T8541]  ? __kasan_check_write+0x14/0x20
[  383.359020][ T8534] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  383.359628][ T8541]  ? down_write+0xd7/0x150
[  383.365022][ T8534] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.1924: mark_inode_dirty error
[  383.369863][ T8541]  ? down_read_killable+0x220/0x220
[  383.369877][ T8541]  path_openat+0x9d4/0x3000
[  383.369892][ T8541]  ? do_filp_open+0x460/0x460
[  383.369901][ T8541]  ? release_firmware_map_entry+0x18d/0x18d
[  383.369909][ T8541]  ? preempt_schedule_irq+0xe7/0x140
[  383.369928][ T8541]  do_filp_open+0x21c/0x460
[  383.374450][ T8534] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27
[  383.379145][ T8541]  ? vfs_tmpfile+0x2b0/0x2b0
[  383.379161][ T8541]  ? get_unused_fd_flags+0x94/0xa0
[  383.379178][ T8541]  do_sys_openat2+0x13f/0x710
[  383.387392][ T8534] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1924: mark_inode_dirty error
[  383.391465][ T8541]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  383.391476][ T8541]  ? __balance_callback+0x75/0xe0
[  383.391492][ T8541]  ? do_sys_open+0x220/0x220
[  383.479653][ T8541]  ? __schedule+0xcc9/0x1330
[  383.484081][ T8541]  __x64_sys_openat+0x243/0x290
[  383.488752][ T8541]  ? __ia32_sys_open+0x270/0x270
[  383.493528][ T8541]  ? __kasan_check_read+0x11/0x20
[  383.498387][ T8541]  do_syscall_64+0x34/0x70
[  383.502644][ T8541]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  383.508365][ T8541] RIP: 0033:0x7fec1aa10e79
[  383.512622][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.532061][ T8541] RSP: 002b:00007fec1964c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  383.540303][ T8541] RAX: ffffffffffffffda RBX: 00007fec1abad130 RCX: 00007fec1aa10e79
[  383.548117][ T8541] RDX: 0000000000000042 RSI: 0000000020000080 RDI: ffffffffffffff9c
[  383.555937][ T8541] RBP: 00007fec1964c090 R08: 0000000000000000 R09: 0000000000000000
[  383.563823][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.571649][ T8541] R13: 0000000000000000 R14: 00007fec1abad130 R15: 00007ffe374561b8
[  383.683531][ T8551] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  383.690844][ T8551] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  383.690844][ T8551] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  383.690844][ T8551] 
[  383.737299][ T8554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8554 comm=syz.3.1930
[  383.757444][ T8551] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  383.780881][ T8555] futex_wake_op: syz.1.1924 tries to shift op by 144; fix this program
[  383.852081][ T8551] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[  383.944738][ T8556] FAT-fs (loop3): Unrecognized mount option "uni_xlate10" or missing value
[  383.975662][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  383.996366][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  384.017447][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  384.038867][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  384.059319][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  384.079909][ T8438] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /3/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  384.120577][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.129085][ T8554] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #3: comm syz.3.1930: mark_inode_dirty error
[  384.140881][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.149182][ T8554] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.1930: mark_inode_dirty error
[  384.160867][ T8554] Quota error (device loop3): write_blk: dquota write failed
[  384.168221][ T8554] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota
[  384.177935][ T8554] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.1930: Failed to acquire dquot type 0
[  384.189520][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.198283][ T8554] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #16: comm syz.3.1930: mark_inode_dirty error
[  384.209693][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.217890][ T8554] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.1930: mark_inode_dirty error
[  384.229006][   T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  384.236508][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.244879][ T8554] EXT4-fs error (device loop3) in ext4_orphan_del:3246: error 27
[  384.252788][ T8554] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27
[  384.261011][ T8554] EXT4-fs error (device loop3): ext4_truncate:4361: inode #16: comm syz.3.1930: mark_inode_dirty error
[  384.272054][ T8554] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27
[  384.289041][ T8554] EXT4-fs (loop3): 1 truncate cleaned up
[  384.294504][ T8554] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  384.308622][  T355] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  384.318847][ T8554] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff)
[  384.361609][ T8564] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1933'.
[  384.729536][  T355] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  384.740151][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.766777][  T355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  384.779455][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  384.830519][   T25] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  384.839803][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.849978][   T25] usb 1-1: config 0 descriptor??
[  384.908676][  T355] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  384.917614][  T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  384.925816][  T355] usb 5-1: SerialNumber: syz
[  385.179327][  T355] usb 5-1: 0:2 : does not exist
[  385.247315][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.254279][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.261545][ T8571] device bridge_slave_0 entered promiscuous mode
[  385.268768][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.275597][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.282941][ T8571] device bridge_slave_1 entered promiscuous mode
[  385.328462][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.335361][ T8571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.342458][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.349228][ T8571] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.383877][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  385.391456][ T1857] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.399703][ T1857] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.412577][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  385.420593][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  385.426408][   T25] usbhid: probe of 1-1:0.0 failed with error -71
[  385.433139][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.439995][  T355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.448205][   T25] usb 1-1: USB disconnect, device number 69
[  385.469444][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  385.477934][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  385.486429][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.493297][  T355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.501416][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  385.509275][  T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  385.525745][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  385.535985][ T8586] udc-core: couldn't find an available UDC or it's busy
[  385.538890][ T8571] device veth0_vlan entered promiscuous mode
[  385.543768][ T8586] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  385.549229][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  385.564277][ T1857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  385.578678][ T8571] device veth1_macvtap entered promiscuous mode
[  385.585595][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  385.596998][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  385.608484][  T320] usb 5-1: USB disconnect, device number 71
[  385.609209][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.819404][   T49] device bridge_slave_1 left promiscuous mode
[  385.825408][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.832716][   T49] device bridge_slave_0 left promiscuous mode
[  385.839043][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.848759][  T355] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  385.856660][   T49] device veth1_macvtap left promiscuous mode
[  385.856749][ T8593] syz.0.1940[8593] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  385.862671][   T49] device veth0_vlan left promiscuous mode
[  385.862681][ T8593] syz.0.1940[8593] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  386.161289][  T355] usb 3-1: device descriptor read/64, error -71
[  386.341887][ T8601] FAULT_INJECTION: forcing a failure.
[  386.341887][ T8601] name failslab, interval 1, probability 0, space 0, times 0
[  386.354355][ T8601] CPU: 1 PID: 8601 Comm: syz.4.1941 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  386.364072][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  386.373909][ T8601] Call Trace:
[  386.377043][ T8601]  dump_stack_lvl+0x1e2/0x24b
[  386.381551][ T8601]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  386.386851][ T8601]  ? preempt_schedule_irq+0xe7/0x140
[  386.391962][ T8601]  ? preempt_schedule_notrace+0x140/0x140
[  386.397603][ T8601]  ? __balance_callback+0x75/0xe0
[  386.402467][ T8601]  dump_stack+0x15/0x17
[  386.406454][ T8601]  should_fail+0x3c6/0x510
[  386.410710][ T8601]  ? shmem_alloc_inode+0x1a/0x30
[  386.415575][ T8601]  __should_failslab+0xa4/0xe0
[  386.420269][ T8601]  should_failslab+0x9/0x20
[  386.424603][ T8601]  kmem_cache_alloc+0x3d/0x2e0
[  386.429192][ T8601]  ? shmem_get_inode+0x2fd/0x9e0
[  386.433969][ T8601]  ? shmem_match+0x180/0x180
[  386.438396][ T8601]  shmem_alloc_inode+0x1a/0x30
[  386.443002][ T8601]  new_inode_pseudo+0x64/0x220
[  386.447591][ T8601]  new_inode+0x28/0x1c0
[  386.451592][ T8601]  shmem_get_inode+0x328/0x9e0
[  386.456185][ T8601]  shmem_mknod+0x5c/0x1c0
[  386.460350][ T8601]  ? path_openat+0x135e/0x3000
[  386.464953][ T8601]  shmem_create+0x2b/0x40
[  386.469115][ T8601]  ? shmem_fallocate+0xe90/0xe90
[  386.473904][ T8601]  path_openat+0x1377/0x3000
[  386.478329][ T8601]  ? do_filp_open+0x460/0x460
[  386.482840][ T8601]  ? preempt_schedule_irq+0xe7/0x140
[  386.487948][ T8601]  ? preempt_schedule_notrace+0x140/0x140
[  386.493510][ T8601]  do_filp_open+0x21c/0x460
[  386.497844][ T8601]  ? vfs_tmpfile+0x2b0/0x2b0
[  386.502284][ T8601]  ? get_unused_fd_flags+0x94/0xa0
[  386.507218][ T8601]  do_sys_openat2+0x13f/0x710
[  386.511745][ T8601]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  386.517387][ T8601]  ? __balance_callback+0x75/0xe0
[  386.522532][ T8601]  ? do_sys_open+0x220/0x220
[  386.526943][ T8601]  ? __schedule+0xcc9/0x1330
[  386.531369][ T8601]  __x64_sys_openat+0x243/0x290
[  386.536051][ T8601]  ? __ia32_sys_open+0x270/0x270
[  386.540837][ T8601]  ? __kasan_check_read+0x11/0x20
[  386.545687][ T8601]  do_syscall_64+0x34/0x70
[  386.549936][ T8601]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  386.555660][ T8601] RIP: 0033:0x7fec1aa10e79
[  386.559913][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.579356][ T8601] RSP: 002b:00007fec1964c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  386.587689][ T8601] RAX: ffffffffffffffda RBX: 00007fec1abad130 RCX: 00007fec1aa10e79
[  386.595506][ T8601] RDX: 0000000000000042 RSI: 0000000020000080 RDI: ffffffffffffff9c
[  386.603320][ T8601] RBP: 00007fec1964c090 R08: 0000000000000000 R09: 0000000000000000
[  386.611124][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.618927][ T8601] R13: 0000000000000000 R14: 00007fec1abad130 R15: 00007ffe374561b8
[  386.681787][ T8605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  386.695730][ T8605] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  386.740214][ T8605] input: syz0 as /devices/virtual/input/input53
[  386.850828][ T8614] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  386.891026][ T8614] exFAT-fs (loop0): unable to read boot sector
[  386.908623][ T8614] exFAT-fs (loop0): failed to read boot sector
[  386.924884][ T8614] exFAT-fs (loop0): failed to recognize exfat type
[  386.938624][  T355] usb 3-1: device descriptor read/64, error -71
[  387.226806][  T355] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  387.238800][   T25] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  387.388629][   T24] audit: type=1400 audit(1724177860.689:2052): avc:  denied  { mount } for  pid=8617 comm="syz.4.1946" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  387.416437][   T24] audit: type=1400 audit(1724177860.689:2053): avc:  denied  { remount } for  pid=8617 comm="syz.4.1946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  387.538743][  T355] usb 3-1: device descriptor read/64, error -71
[  387.628680][  T351] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  387.658720][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.669477][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.679165][   T25] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  387.687998][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.697538][   T25] usb 2-1: config 0 descriptor??
[  387.898620][  T351] usb 5-1: Using ep0 maxpacket: 8
[  387.938694][  T355] usb 3-1: device descriptor read/64, error -71
[  388.018719][  T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.029667][  T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024
[  388.040608][  T351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  388.053226][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  388.058967][  T355] usb usb3-port1: attempt power cycle
[  388.064206][   T25] usbhid: probe of 2-1:0.0 failed with error -71
[  388.070300][  T351] usb 5-1: New USB device found, idVendor=0458, idProduct=7110, bcdDevice= 0.00
[  388.079871][   T25] usb 2-1: USB disconnect, device number 74
[  388.086445][  T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.096532][  T351] usb 5-1: config 0 descriptor??
[  388.128679][ T8620] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  388.488635][  T355] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  388.628664][  T355] usb 3-1: device descriptor read/8, error -71
[  388.748736][ T1845] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  388.848776][  T355] usb 3-1: device descriptor read/8, error -71
[  389.138717][ T1845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  389.149626][ T1845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  389.159420][ T1845] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  389.168756][ T1845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.018113][   T24] audit: type=1400 audit(1724177863.359:2054): avc:  denied  { unmount } for  pid=7305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  390.088702][  T351] usbhid 5-1:0.0: can't add hid device: -71
[  390.094527][  T351] usbhid: probe of 5-1:0.0 failed with error -71
[  390.101716][  T351] usb 5-1: USB disconnect, device number 72
[  390.508646][  T351] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  390.738729][ T1845] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  390.746208][ T1845] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input54
[  390.755559][ T1845] input: failed to attach handler kbd to device input54, error: -5
[  390.763550][  T351] usb 5-1: Using ep0 maxpacket: 16
[  390.888881][  T351] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  390.897022][  T351] usb 5-1: config 0 has no interface number 0
[  390.903095][  T351] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  390.913575][  T351] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  391.068706][  T351] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  391.077622][  T351] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  391.085518][  T351] usb 5-1: Product: syz
[  391.089528][  T351] usb 5-1: SerialNumber: syz
[  391.094517][  T351] usb 5-1: config 0 descriptor??
[  391.228892][  T303] usb 2-1: USB disconnect, device number 75
[  391.286989][ T8658] FAT-fs (loop1): Directory bread(block 64) failed
[  391.293463][ T8658] FAT-fs (loop1): Directory bread(block 65) failed
[  391.300021][ T8658] FAT-fs (loop1): Directory bread(block 66) failed
[  391.306415][ T8658] FAT-fs (loop1): Directory bread(block 67) failed
[  391.312802][ T8658] FAT-fs (loop1): Directory bread(block 68) failed
[  391.319271][ T8658] FAT-fs (loop1): Directory bread(block 69) failed
[  391.325759][ T8658] FAT-fs (loop1): Directory bread(block 70) failed
[  391.332403][ T8658] FAT-fs (loop1): Directory bread(block 71) failed
[  391.338931][ T8658] FAT-fs (loop1): Directory bread(block 72) failed
[  391.345180][ T8658] FAT-fs (loop1): Directory bread(block 73) failed
[  391.467466][  T351] snd-usb-audio: probe of 5-1:0.2 failed with error -12
[  391.481869][  T351] usb 5-1: USB disconnect, device number 73
[  391.512142][ T8662] FAULT_INJECTION: forcing a failure.
[  391.512142][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.525068][ T8662] CPU: 1 PID: 8662 Comm: syz.1.1956 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  391.534775][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  391.544677][ T8662] Call Trace:
[  391.547833][ T8662]  dump_stack_lvl+0x1e2/0x24b
[  391.552310][ T8662]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  391.557697][ T8662]  ? push_rt_tasks+0x7c5/0x8a0
[  391.562579][ T8662]  dump_stack+0x15/0x17
[  391.566552][ T8662]  should_fail+0x3c6/0x510
[  391.570806][ T8662]  should_fail_usercopy+0x1a/0x20
[  391.575663][ T8662]  strncpy_from_user+0x24/0x2d0
[  391.580351][ T8662]  ? htab_map_hash+0x356/0x7e0
[  391.584949][ T8662]  strncpy_from_user_nofault+0x73/0x150
[  391.590331][ T8662]  bpf_probe_read_user_str+0x2a/0x70
[  391.595455][ T8662]  bpf_prog_1f2a558f99cc9b3e+0x35/0x8a0
[  391.600919][ T8662]  bpf_trace_run3+0x121/0x2c0
[  391.605434][ T8662]  ? bpf_trace_run2+0x280/0x280
[  391.610117][ T8662]  ? __this_cpu_preempt_check+0x13/0x20
[  391.615501][ T8662]  ? tracing_record_taskinfo_sched_switch+0x84/0x390
[  391.622011][ T8662]  ? __bpf_trace_sched_wakeup_template+0x10/0x10
[  391.628170][ T8662]  __bpf_trace_sched_switch+0xb/0x10
[  391.633381][ T8662]  __traceiter_sched_switch+0x85/0xc0
[  391.638585][ T8662]  __schedule+0x10be/0x1330
[  391.642927][ T8662]  ? release_firmware_map_entry+0x18d/0x18d
[  391.648652][ T8662]  ? 0xffffffffa0010000
[  391.652647][ T8662]  preempt_schedule_irq+0xc7/0x140
[  391.657591][ T8662]  ? preempt_schedule_notrace+0x140/0x140
[  391.663151][ T8662]  ? unwind_get_return_address+0x4d/0x90
[  391.668623][ T8662]  irqentry_exit+0x4f/0x60
[  391.672867][ T8662]  sysvec_reschedule_ipi+0x83/0x160
[  391.677901][ T8662]  asm_sysvec_reschedule_ipi+0x12/0x20
[  391.683196][ T8662] RIP: 0010:__stack_depot_save+0x1cd/0x4d0
[  391.688838][ T8662] Code: 18 45 29 d4 eb 03 48 89 fb 48 8b 05 55 9a a0 04 44 89 e6 81 e6 ff 0f 00 00 48 89 45 a8 48 89 75 b0 4c 8b 3c f0 45 89 ee eb 03 <4d> 8b 3f 4d 85 ff 74 2a 45 39 67 08 75 f2 45 39 6f 0c 75 ec 31 c0
[  391.708381][ T8662] RSP: 0018:ffffc900015c7968 EFLAGS: 00000206
[  391.714268][ T8662] RAX: ffff88823fec0000 RBX: ffffc900015c79d0 RCX: 0000000000000001
[  391.722079][ T8662] RDX: 0000000000000cc0 RSI: 0000000000000a87 RDI: ffffc900015c79d0
[  391.729887][ T8662] RBP: ffffc900015c79c0 R08: 0000000000000003 R09: ffffc900015c7a0c
[  391.737700][ T8662] R10: 000000006b834abb R11: 00000000e258cd64 R12: 0000000030609a87
[  391.745773][ T8662] R13: 0000000000000009 R14: 0000000000000009 R15: ffff88810b1069a0
[  391.753598][ T8662]  __kasan_slab_alloc+0xc3/0xe0
[  391.758278][ T8662]  ? __kasan_slab_alloc+0xb1/0xe0
[  391.763150][ T8662]  ? slab_post_alloc_hook+0x61/0x2f0
[  391.768272][ T8662]  ? kmem_cache_alloc+0x168/0x2e0
[  391.773202][ T8662]  ? getname_flags+0xba/0x520
[  391.777710][ T8662]  ? getname+0x19/0x20
[  391.781621][ T8662]  ? do_sys_openat2+0xd7/0x710
[  391.786215][ T8662]  ? __x64_sys_openat+0x243/0x290
[  391.791080][ T8662]  ? do_syscall_64+0x34/0x70
[  391.795507][ T8662]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  391.801420][ T8662]  slab_post_alloc_hook+0x61/0x2f0
[  391.806356][ T8662]  ? getname_flags+0xba/0x520
[  391.810866][ T8662]  kmem_cache_alloc+0x168/0x2e0
[  391.815552][ T8662]  ? getname_flags+0xba/0x520
[  391.820068][ T8662]  getname_flags+0xba/0x520
[  391.824404][ T8662]  getname+0x19/0x20
[  391.828138][ T8662]  do_sys_openat2+0xd7/0x710
[  391.832563][ T8662]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  391.838304][ T8662]  ? __balance_callback+0x75/0xe0
[  391.843157][ T8662]  ? do_sys_open+0x220/0x220
[  391.847578][ T8662]  ? __schedule+0xcc9/0x1330
[  391.852005][ T8662]  __x64_sys_openat+0x243/0x290
[  391.856868][ T8662]  ? __ia32_sys_open+0x270/0x270
[  391.861639][ T8662]  ? __kasan_check_read+0x11/0x20
[  391.866499][ T8662]  do_syscall_64+0x34/0x70
[  391.870754][ T8662]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  391.876568][ T8662] RIP: 0033:0x7f4249f04e79
[  391.880819][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.900381][ T8662] RSP: 002b:00007f4248b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  391.908608][ T8662] RAX: ffffffffffffffda RBX: 00007f424a0a1130 RCX: 00007f4249f04e79
[  391.916505][ T8662] RDX: 0000000000000042 RSI: 0000000020000080 RDI: ffffffffffffff9c
[  391.924320][ T8662] RBP: 00007f4248b40090 R08: 0000000000000000 R09: 0000000000000000
[  391.932132][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.940128][ T8662] R13: 0000000000000000 R14: 00007f424a0a1130 R15: 00007ffdfc776ab8
[  391.950527][ T8662] fuse: Unknown parameter '0x000000000000000a00000000000000000000'
[  392.235801][ T8671] 9pnet: Insufficient options for proto=fd
[  392.287781][ T8674] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  392.299041][ T8674] exFAT-fs (loop0): unable to read boot sector
[  392.305035][ T8674] exFAT-fs (loop0): failed to read boot sector
[  392.311146][ T8674] exFAT-fs (loop0): failed to recognize exfat type
[  392.708726][ T1858] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  392.754309][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[  392.948652][ T1858] usb 3-1: Using ep0 maxpacket: 8
[  393.068705][ T1858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.084888][ T1858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.096451][ T8696] syz.1.1966[8696] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  393.096498][ T8696] syz.1.1966[8696] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  393.104947][ T1858] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  393.107976][ T8697] syz.1.1966[8697] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  393.128612][ T1858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.140183][ T8697] syz.1.1966[8697] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  393.164532][ T1858] usb 3-1: config 0 descriptor??
[  393.228794][ T8702] bridge: RTM_NEWNEIGH with invalid ether address
[  393.550735][ T8694] F2FS-fs (loop0): Test dummy encryption mode enabled
[  393.558864][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  393.564385][ T8694] F2FS-fs (loop0): invalid crc value
[  393.604336][ T8694] F2FS-fs (loop0): Found nat_bits in checkpoint
[  393.656918][ T8694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  393.679539][ T1858] kone 0003:1E7D:2CED.003C: collection stack underflow
[  393.688673][ T1858] kone 0003:1E7D:2CED.003C: item 0 1 0 12 parsing failed
[  393.695856][ T1858] kone 0003:1E7D:2CED.003C: parse failed
[  393.701907][ T1858] kone: probe of 0003:1E7D:2CED.003C failed with error -22
[  393.764567][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.771533][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.779264][ T8714] device bridge_slave_0 entered promiscuous mode
[  393.786254][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.793224][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.800770][ T8714] device bridge_slave_1 entered promiscuous mode
[  393.849873][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.856733][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.863849][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.870631][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.908706][  T351] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.921347][  T355] usb 3-1: USB disconnect, device number 88
[  393.927268][  T351] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.939244][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  393.946455][  T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  393.965110][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  393.973198][ T1845] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.980313][ T1845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.998790][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  394.006824][ T1845] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.013682][ T1845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.021139][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  394.028986][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  394.038879][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  394.069162][ T8714] device veth0_vlan entered promiscuous mode
[  394.083332][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  394.094150][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  394.102124][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  394.159347][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  394.181984][ T8714] device veth1_macvtap entered promiscuous mode
[  394.229403][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  394.238359][  T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  394.634754][   T24] audit: type=1326 audit(1724177867.979:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.2.1973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5633468e79 code=0x0
[  394.698708][  T320] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  394.749827][ T8739] EXT4-fs (loop0): Test dummy encryption mode enabled
[  394.757526][ T8739] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[  394.769149][  T355] Bluetooth: hci0: command 0x1003 tx timeout
[  394.775504][  T966] Bluetooth: hci0: sending frame failed (-49)
[  394.783765][ T8739] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038 (0x7fffffff)
[  395.328730][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.339773][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.349489][  T320] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  395.358264][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.366790][  T320] usb 4-1: config 0 descriptor??
[  395.528493][ T1857] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  395.871051][ T8752] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  395.879965][ T8752] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff)
[  395.910542][ T8726] erofs: (device loop3): mounted with root inode @ nid 36.
[  395.988646][  T320] usbhid 4-1:0.0: can't add hid device: -71
[  395.994501][  T320] usbhid: probe of 4-1:0.0 failed with error -71
[  396.005808][  T320] usb 4-1: USB disconnect, device number 69
[  396.031940][ T1845] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  396.078669][ T1857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.089479][ T1857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  396.099427][ T1857] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  396.108352][ T1857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.120099][ T1857] usb 2-1: config 0 descriptor??
[  396.298646][ T1845] usb 3-1: Using ep0 maxpacket: 16
[  396.439146][ T1845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.449124][ T1845] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.583989][ T8767] EXT4-fs (loop0): Test dummy encryption mode enabled
[  396.595471][ T8767] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue
[  396.607532][ T1857] holtek 0003:1241:5015.003D: collection stack underflow
[  396.615179][ T1857] holtek 0003:1241:5015.003D: item 0 1 0 12 parsing failed
[  396.622694][ T1857] holtek 0003:1241:5015.003D: parse failed
[  396.628152][ T8767] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038 (0x7fffffff)
[  396.631144][ T1857] holtek: probe of 0003:1241:5015.003D failed with error -22
[  396.685503][ T1845] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  396.694567][ T1845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.702801][ T1845] usb 3-1: Product: syz
[  396.706997][ T1845] usb 3-1: Manufacturer: syz
[  396.711427][ T1845] usb 3-1: SerialNumber: syz
[  396.719994][ T1845] usb 3-1: config 0 descriptor??
[  396.984361][ T8754] udc-core: couldn't find an available UDC or it's busy
[  396.991163][ T8754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  397.004853][  T355] Bluetooth: hci0: command 0x1001 tx timeout
[  397.014897][  T966] Bluetooth: hci0: sending frame failed (-49)
[  397.091403][ T1845] usb 2-1: USB disconnect, device number 76
[  397.648723][  T355] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  397.878691][ T1857] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  398.068740][  T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.079526][  T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.089185][  T355] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  398.098058][  T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.106544][  T355] usb 4-1: config 0 descriptor??
[  398.148647][ T1857] usb 2-1: device descriptor read/64, error -71
[  398.559039][  T351] usb 3-1: USB disconnect, device number 89
[  398.570232][   T24] audit: type=1400 audit(1724177871.919:2056): avc:  denied  { read } for  pid=8791 comm="syz.2.1986" path="socket:[51990]" dev="sockfs" ino=51990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  398.883322][ T1857] usb 2-1: device descriptor read/64, error -71
[  398.998837][  T351] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[  399.078641][ T1845] Bluetooth: hci0: command 0x1009 tx timeout
[  399.158613][ T1857] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  399.248892][  T351] usb 3-1: Invalid ep0 maxpacket: 32
[  399.408685][  T351] usb 3-1: new low-speed USB device number 91 using dummy_hcd
[  399.428632][ T1857] usb 2-1: device descriptor read/64, error -71
[  399.678643][  T351] usb 3-1: Invalid ep0 maxpacket: 32
[  399.684041][  T351] usb usb3-port1: attempt power cycle
[  399.818646][ T1857] usb 2-1: device descriptor read/64, error -71
[  399.834059][ T8804] FAT-fs (loop0): Directory bread(block 64) failed
[  399.840563][ T8804] FAT-fs (loop0): Directory bread(block 65) failed
[  399.847443][ T8804] FAT-fs (loop0): Directory bread(block 66) failed
[  399.853790][ T8804] FAT-fs (loop0): Directory bread(block 67) failed
[  399.860154][ T8804] FAT-fs (loop0): Directory bread(block 68) failed
[  399.866502][ T8804] FAT-fs (loop0): Directory bread(block 69) failed
[  399.872900][ T8804] FAT-fs (loop0): Directory bread(block 70) failed
[  399.879306][ T8804] FAT-fs (loop0): Directory bread(block 71) failed
[  399.885656][ T8804] FAT-fs (loop0): Directory bread(block 72) failed
[  399.891983][ T8804] FAT-fs (loop0): Directory bread(block 73) failed
[  399.938780][ T1857] usb usb2-port1: attempt power cycle
[  400.049561][ T8807] fuse: Unknown parameter '0x000000000000000b00000000000000000000'
[  400.138689][  T351] usb 3-1: new low-speed USB device number 92 using dummy_hcd
[  400.248759][  T351] usb 3-1: Invalid ep0 maxpacket: 32
[  400.398739][  T351] usb 3-1: new low-speed USB device number 93 using dummy_hcd
[  400.439419][ T8810] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22
[  400.448643][ T1857] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  400.498735][  T351] usb 3-1: Invalid ep0 maxpacket: 32
[  400.503987][  T351] usb usb3-port1: unable to enumerate USB device
[  400.528674][  T355] usbhid 4-1:0.0: can't add hid device: -71
[  400.534517][  T355] usbhid: probe of 4-1:0.0 failed with error -71
[  400.541503][  T355] usb 4-1: USB disconnect, device number 70
[  400.622855][ T1857] usb 2-1: device descriptor read/8, error -71
[  400.622899][ T8812] xt_hashlimit: size too large, truncated to 1048576
[  400.838726][ T1857] usb 2-1: device descriptor read/8, error -71
[  400.910839][  T355] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  401.178619][  T355] usb 4-1: Using ep0 maxpacket: 16
[  401.298678][  T355] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.309413][  T355] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.318957][  T355] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  401.328464][  T355] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  401.338289][  T355] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  401.347739][  T355] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  401.518725][  T355] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  401.527637][  T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.535421][  T355] usb 4-1: Product: syz
[  401.539393][  T355] usb 4-1: Manufacturer: syz
[  401.543891][  T355] usb 4-1: SerialNumber: syz
[  401.692599][ T8830] EXT4-fs (loop1): 1 orphan inode deleted
[  401.699491][ T8830] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,nodiscard,noquota,init_itable,nogrpid,resgid=0x0000000000000000,sysvgroups,nojournal_checksum,usrquota,,errors=continue
[  401.718277][ T8830] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff)
[  401.781939][ T8835] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  401.800668][ T8835] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  401.815549][ T8835] EXT4-fs (loop0): 1 truncate cleaned up
[  401.821066][ T8835] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  402.148606][ T1845] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  402.198603][ T1857] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  402.408729][ T1857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  402.419660][ T1857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57486, setting to 1024
[  402.430670][ T1857] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  402.439598][ T1857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.448003][   T24] audit: type=1326 audit(1724177875.789:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.451475][ T1857] usb 2-1: config 0 descriptor??
[  402.476202][   T24] audit: type=1326 audit(1724177875.819:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.499430][   T24] audit: type=1326 audit(1724177875.819:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.499486][  T355] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[  402.524806][   T24] audit: type=1326 audit(1724177875.819:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.551315][   T24] audit: type=1326 audit(1724177875.819:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.575153][  T355] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed
[  402.575221][   T24] audit: type=1326 audit(1724177875.819:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.603994][   T24] audit: type=1326 audit(1724177875.819:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.627402][  T355] cdc_ncm 4-1:1.0: bind() failure
[  402.627593][   T24] audit: type=1326 audit(1724177875.819:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8809 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10ee1ee79 code=0x7ffc0000
[  402.633165][  T355] cdc_ncm 4-1:1.1: bind() failure
[  402.660527][ T1845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.670559][ T1845] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  402.688723][  T355] usb 4-1: USB disconnect, device number 71
[  402.695285][ T1845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.704401][ T1845] usb 3-1: config 0 descriptor??
[  402.867864][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.874915][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.882433][ T8851] device bridge_slave_0 entered promiscuous mode
[  402.889885][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.896787][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.904368][ T8851] device bridge_slave_1 entered promiscuous mode
[  402.945190][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.952066][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.959161][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.965923][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.974792][ T8826] device bridge_slave_1 left promiscuous mode
[  402.981174][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.991238][ T8826] device bridge_slave_0 left promiscuous mode
[  402.997598][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.158771][    C0] ==================================================================
[  403.166787][    C0] BUG: KASAN: use-after-free in br_multicast_port_group_expired+0x56/0x870
[  403.175189][    C0] Read of size 8 at addr ffff888110546000 by task syz.0.2001/8859
[  403.182818][    C0] 
[  403.184996][    C0] CPU: 0 PID: 8859 Comm: syz.0.2001 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0
[  403.194810][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  403.204706][    C0] Call Trace:
[  403.207824][    C0]  <IRQ>
[  403.210522][    C0]  dump_stack_lvl+0x1e2/0x24b
[  403.215025][    C0]  ? bfq_pos_tree_add_move+0x43b/0x43b
[  403.220320][    C0]  ? panic+0x812/0x812
[  403.224228][    C0]  print_address_description+0x81/0x3b0
[  403.229605][    C0]  kasan_report+0x179/0x1c0
[  403.233947][    C0]  ? br_multicast_port_group_expired+0x56/0x870
[  403.240023][    C0]  ? br_multicast_port_group_expired+0x56/0x870
[  403.246099][    C0]  __asan_report_load8_noabort+0x14/0x20
[  403.251566][    C0]  br_multicast_port_group_expired+0x56/0x870
[  403.257469][    C0]  ? __kasan_check_write+0x14/0x20
[  403.262420][    C0]  ? _raw_spin_lock_irq+0xa5/0x1b0
[  403.267362][    C0]  ? _raw_spin_lock_irqsave+0x210/0x210
[  403.272746][    C0]  ? br_multicast_destroy_port_group+0xc0/0xc0
[  403.278736][    C0]  call_timer_fn+0x3b/0x2d0
[  403.283073][    C0]  ? br_multicast_destroy_port_group+0xc0/0xc0
[  403.289059][    C0]  __run_timers+0x72a/0xa10
[  403.293400][    C0]  ? calc_index+0x270/0x270
[  403.297738][    C0]  ? sched_clock_cpu+0x1b/0x3b0
[  403.302426][    C0]  run_timer_softirq+0x69/0xf0
[  403.307024][    C0]  __do_softirq+0x268/0x5bb
[  403.311366][    C0]  asm_call_irq_on_stack+0xf/0x20
[  403.316218][    C0]  </IRQ>
[  403.319002][    C0]  do_softirq_own_stack+0x60/0x80
[  403.323866][    C0]  __irq_exit_rcu+0x128/0x150
[  403.328375][    C0]  irq_exit_rcu+0x9/0x10
[  403.332454][    C0]  sysvec_apic_timer_interrupt+0xbf/0xe0
[  403.337921][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  403.343872][    C0] RIP: 0010:__skb_datagram_iter+0x6/0x780
[  403.349379][    C0] Code: f9 41 b8 01 00 00 00 49 c7 c1 c0 4b 52 82 41 56 e8 0f 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 68 4c 89 4d 90 44 89 45 a4 41 89 cd
[  403.368819][    C0] RSP: 0018:ffffc900015e7700 EFLAGS: 00000246
[  403.374720][    C0] RAX: ffffffff83c19a39 RBX: ffff88813d1e48c0 RCX: 0000000000000000
[  403.382531][    C0] RDX: ffffc900015e7d70 RSI: 0000000000000000 RDI: ffff88813d1e48c0
[  403.390343][    C0] RBP: ffffc900015e7708 R08: 0000000000000000 R09: ffffffff83c19b90
[  403.398152][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  403.405964][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900015e7d70
[  403.413788][    C0]  ? skb_copy_datagram_iter+0x180/0x180
[  403.419159][    C0]  ? skb_copy_datagram_iter+0x29/0x180
[  403.424457][    C0]  skb_copy_datagram_iter+0x46/0x180
[  403.429575][    C0]  unix_dgram_recvmsg+0x7d1/0x1240
[  403.434524][    C0]  ? unix_dgram_sendmsg+0x1f90/0x1f90
[  403.439730][    C0]  ? irq_exit_rcu+0x9/0x10
[  403.443982][    C0]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[  403.449972][    C0]  ? ___sys_recvmsg+0x210/0x690
[  403.454658][    C0]  ? ___sys_recvmsg+0x210/0x690
[  403.459345][    C0]  ? unix_dgram_sendmsg+0x1f90/0x1f90
[  403.464550][    C0]  ____sys_recvmsg+0x286/0x530
[  403.469155][    C0]  ? __sys_recvmsg_sock+0x50/0x50
[  403.474014][    C0]  ? import_iovec+0xe5/0x120
[  403.478447][    C0]  ___sys_recvmsg+0x1ec/0x690
[  403.482953][    C0]  ? __sys_recvmsg+0x270/0x270
[  403.487554][    C0]  ? asm_sysvec_call_function_single+0x12/0x20
[  403.493541][    C0]  ? bpf_ringbuf_query+0x4f/0x130
[  403.498401][    C0]  ? do_recvmmsg+0x412/0x920
[  403.502827][    C0]  do_recvmmsg+0x407/0x920
[  403.507079][    C0]  ? __sys_recvmmsg+0x270/0x270
[  403.511771][    C0]  ? __se_sys_futex+0x355/0x470
[  403.516454][    C0]  __x64_sys_recvmmsg+0x195/0x240
[  403.521314][    C0]  ? do_recvmmsg+0x920/0x920
[  403.525740][    C0]  ? __kasan_check_read+0x11/0x20
[  403.530601][    C0]  do_syscall_64+0x34/0x70
[  403.534879][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  403.540588][    C0] RIP: 0033:0x7fe38d960e79
[  403.544841][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.564284][    C0] RSP: 002b:00007fe38c5bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  403.572519][    C0] RAX: ffffffffffffffda RBX: 00007fe38dafd058 RCX: 00007fe38d960e79
[  403.580329][    C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 000000000000000a
[  403.588136][    C0] RBP: 00007fe38d9ce916 R08: 0000000000000000 R09: 0000000000000000
[  403.595950][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  403.603759][    C0] R13: 0000000000000000 R14: 00007fe38dafd058 R15: 00007fff93814368
[  403.611578][    C0] 
[  403.613740][    C0] Allocated by task 3112:
[  403.617926][    C0]  ____kasan_kmalloc+0xdb/0x110
[  403.622596][    C0]  __kasan_kmalloc+0x9/0x10
[  403.626935][    C0]  kmem_cache_alloc_trace+0x18a/0x2e0
[  403.632145][    C0]  new_nbp+0x211/0x5c0
[  403.636049][    C0]  br_add_if+0x29c/0x1080
[  403.640215][    C0]  br_add_slave+0x2c/0x40
[  403.644381][    C0]  do_setlink+0xe14/0x3c30
[  403.648633][    C0]  rtnl_newlink+0x15f0/0x2000
[  403.653156][    C0]  rtnetlink_rcv_msg+0x955/0xc50
[  403.657985][    C0]  netlink_rcv_skb+0x1cf/0x410
[  403.662537][    C0]  rtnetlink_rcv+0x1c/0x20
[  403.666861][    C0]  netlink_unicast+0x8df/0xac0
[  403.671546][    C0]  netlink_sendmsg+0xa46/0xd00
[  403.676146][    C0]  __sys_sendto+0x545/0x700
[  403.680576][    C0]  __x64_sys_sendto+0xe5/0x100
[  403.685176][    C0]  do_syscall_64+0x34/0x70
[  403.689602][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  403.695324][    C0] 
[  403.697494][    C0] Freed by task 8857:
[  403.701317][    C0]  kasan_set_track+0x4b/0x70
[  403.705742][    C0]  kasan_set_free_info+0x23/0x40
[  403.710516][    C0]  ____kasan_slab_free+0x121/0x160
[  403.715473][    C0]  __kasan_slab_free+0x11/0x20
[  403.720066][    C0]  slab_free_freelist_hook+0xc0/0x190
[  403.725272][    C0]  kfree+0xc3/0x270
[  403.728917][    C0]  release_nbp+0x1c/0x20
[  403.733023][    C0]  kobject_put+0x178/0x260
[  403.737249][    C0]  destroy_nbp_rcu+0x93/0xa0
[  403.741688][    C0]  rcu_do_batch+0x597/0xc40
[  403.746015][    C0]  rcu_core+0x5ad/0xe40
[  403.750007][    C0]  rcu_core_si+0x9/0x10
[  403.754001][    C0]  __do_softirq+0x268/0x5bb
[  403.758421][    C0] 
[  403.760592][    C0] Last potentially related work creation:
[  403.766152][    C0]  kasan_save_stack+0x3b/0x60
[  403.770668][    C0]  __kasan_record_aux_stack+0xd3/0x100
[  403.776045][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  403.781695][    C0]  call_rcu+0x135/0x11f0
[  403.785765][    C0]  del_nbp+0xbfb/0xd80
[  403.789844][    C0]  br_dev_delete+0x72/0x110
[  403.794185][    C0]  rtnl_dellink+0x4bd/0x7c0
[  403.798522][    C0]  rtnetlink_rcv_msg+0x955/0xc50
[  403.803300][    C0]  netlink_rcv_skb+0x1cf/0x410
[  403.807895][    C0]  rtnetlink_rcv+0x1c/0x20
[  403.812162][    C0]  netlink_unicast+0x8df/0xac0
[  403.816749][    C0]  netlink_sendmsg+0xa46/0xd00
[  403.821352][    C0]  ____sys_sendmsg+0x59e/0x8f0
[  403.825949][    C0]  ___sys_sendmsg+0x252/0x2e0
[  403.830463][    C0]  __se_sys_sendmsg+0x1b1/0x280
[  403.835150][    C0]  __x64_sys_sendmsg+0x7b/0x90
[  403.839751][    C0]  do_syscall_64+0x34/0x70
[  403.844008][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  403.849812][    C0] 
[  403.851986][    C0] The buggy address belongs to the object at ffff888110546000
[  403.851986][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  403.865875][    C0] The buggy address is located 0 bytes inside of
[  403.865875][    C0]  1024-byte region [ffff888110546000, ffff888110546400)
[  403.878890][    C0] The buggy address belongs to the page:
[  403.884366][    C0] page:ffffea0004415000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110540
[  403.894427][    C0] head:ffffea0004415000 order:3 compound_mapcount:0 compound_pincount:0
[  403.902692][    C0] flags: 0x4000000000010200(slab|head)
[  403.907980][    C0] raw: 4000000000010200 0000000000000000 0000000800000001 ffff888100042f00
[  403.916662][    C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  403.925161][    C0] page dumped because: kasan: bad access detected
[  403.931432][    C0] page_owner tracks the page as allocated
[  403.937074][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 99, ts 3942503274, free_ts 0
[  403.954861][    C0]  prep_new_page+0x166/0x180
[  403.959307][    C0]  get_page_from_freelist+0x2d8c/0x2f30
[  403.964662][    C0]  __alloc_pages_nodemask+0x435/0xaf0
[  403.969876][    C0]  new_slab+0x80/0x400
[  403.973775][    C0]  ___slab_alloc+0x302/0x4b0
[  403.978198][    C0]  __slab_alloc+0x63/0xa0
[  403.982452][    C0]  __kmalloc_track_caller+0x1f8/0x320
[  403.987677][    C0]  __alloc_skb+0xbc/0x510
[  403.991825][    C0]  netlink_sendmsg+0x7a4/0xd00
[  403.996426][    C0]  ____sys_sendmsg+0x59e/0x8f0
[  404.001025][    C0]  ___sys_sendmsg+0x252/0x2e0
[  404.005536][    C0]  __se_sys_sendmsg+0x1b1/0x280
[  404.010233][    C0]  __x64_sys_sendmsg+0x7b/0x90
[  404.014827][    C0]  do_syscall_64+0x34/0x70
[  404.019082][    C0]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  404.024889][    C0] page_owner free stack trace missing
[  404.030098][    C0] 
[  404.032265][    C0] Memory state around the buggy address:
[  404.037740][    C0]  ffff888110545f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  404.045641][    C0]  ffff888110545f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  404.053534][    C0] >ffff888110546000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  404.061431][    C0]                    ^
[  404.065337][    C0]  ffff888110546080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.073233][    C0]  ffff888110546100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  404.081614][    C0] ==================================================================
[  404.089464][    C0] Disabling lock debugging due to kernel taint
[  404.398206][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.405753][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.438934][ T1857] usbhid 2-1:0.0: can't add hid device: -71
[  404.444754][ T1857] usbhid: probe of 2-1:0.0 failed with error -71
[  404.459684][ T1857] usb 2-1: USB disconnect, device number 80
[  404.536053][ T1845] usb 3-1: USB disconnect, device number 94
[  405.119213][ T2456] device bridge_slave_1 left promiscuous mode
[  405.125158][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.132576][ T2456] device bridge_slave_0 left promiscuous mode
[  405.138491][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.146094][ T2456] device veth1_macvtap left promiscuous mode
[  405.151955][ T2456] device veth0_vlan left promiscuous mode
[  406.529760][ T2456] device bridge_slave_1 left promiscuous mode
[  406.535726][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.543062][ T2456] device bridge_slave_0 left promiscuous mode
[  406.549052][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.556427][ T2456] device bridge_slave_1 left promiscuous mode
[  406.562503][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.569703][ T2456] device bridge_slave_0 left promiscuous mode
[  406.575599][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.583363][ T2456] device veth1_macvtap left promiscuous mode
[  406.589361][ T2456] device veth1_macvtap left promiscuous mode
[  406.595166][ T2456] device veth0_vlan left promiscuous mode