last executing test programs:

13.455726194s ago: executing program 3 (id=1912):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000040000000000008dd5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x64, 0x6, 0x7, 0x7cd}]})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2044004}, 0x48800)
syz_clone(0xd62d5d80, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'rose0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')
rmdir(&(0x7f0000000080)='./file0\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xb, 0x0, &(0x7f00000007c0)="9f44948721919580684010", 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50)
syz_usb_connect(0x0, 0x57, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x280041, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)

10.921392179s ago: executing program 3 (id=1919):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f0000000080)="0000ffff", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sync_file_range(0xffffffffffffffff, 0x123, 0x9, 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)

9.577510738s ago: executing program 1 (id=1928):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x8, r0)
wait4(0x0, 0x0, 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00')
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x3, r1})
prlimit64(r0, 0x0, &(0x7f0000000140)={0x4008, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r2], 0x0, 0x4e, 0x0, 0x40000000, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x1000, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xfffffffffffffe88, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r6, &(0x7f0000000000)="fa", 0xfffffdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x131000, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f00000002c0)=0xffffffffffffffff)
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)

8.797891058s ago: executing program 4 (id=1932):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect(0x2, 0x52, &(0x7f0000000700)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405035716"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20)

8.770070569s ago: executing program 2 (id=1933):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x2f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x32e1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
fallocate(r2, 0x0, 0x0, 0x1001f0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, r2)
sendmsg$TIPC_CMD_GET_NODES(r2, 0x0, 0x4840)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000380)={[{@test_dummy_encryption}, {@init_itable}, {@minixdf}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff26)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)

8.569143531s ago: executing program 2 (id=1934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRES16, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0xffff8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000021c0)=[{{&(0x7f00000004c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000680)=""/59, 0x41}], 0x3, &(0x7f0000002480)=""/4111, 0x100f}, 0x2}, {{&(0x7f0000000880)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000001fc0)=""/203, 0x11c}], 0x1, &(0x7f0000000600)=""/11, 0xb}, 0x81}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000900)=""/100, 0x5c}, {&(0x7f0000001200)=""/266, 0x102}], 0x2, &(0x7f0000000980)=""/3, 0x3}, 0x25a6999}], 0x3, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffffb5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20)
r8 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty, 0x8}, 0x1c)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)

8.538852142s ago: executing program 1 (id=1935):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x800000, 0x1, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)

8.494161802s ago: executing program 1 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x5}, 0x4a, 0x0, 0xffffffffffffffff, 0x37, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24)
socket$packet(0x11, 0x2, 0x300)

7.463611617s ago: executing program 3 (id=1938):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(r0, 0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, r6, 0x800, 0x40eca, 0x8000000000000001, 0x10003})
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0x170, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa02e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dbd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x8081)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000ef13dab4d685ae54ecd0000000105000000000055af0d7d879eab2be8c6", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7.451052547s ago: executing program 2 (id=1939):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.413590368s ago: executing program 1 (id=1940):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.824919415s ago: executing program 4 (id=1941):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0)
fsetxattr$trusted_overlay_opaque(r3, 0x0, 0x0, 0x0, 0x2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x1e8, 0xa8, 0xfeffffff, 0x1e8, 0x140, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f0000000100))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/151, 0x97}], 0x4}, 0x10}, {{&(0x7f0000000cc0)=@qipcrtr, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/106, 0x6a}, 0x5}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/134, 0x86}, {&(0x7f0000000ec0)=""/32, 0x20}, {&(0x7f0000000f00)=""/103, 0x67}, {&(0x7f0000000f80)=""/99, 0x63}, {&(0x7f0000001000)=""/56, 0x38}], 0x5, &(0x7f00000010c0)=""/72, 0x48}, 0xffff}], 0x3, 0x2, 0x0)
unshare(0x32000600)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001200)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
userfaultfd(0x80001)

6.300853333s ago: executing program 0 (id=1943):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000300000005000000001000", @ANYRES32, @ANYBLOB="060000000010fc00000000000000d25d13000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
unshare(0x42000600)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009000000080000", @ANYRES32=0x1, @ANYBLOB="ffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2100, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)

6.300149233s ago: executing program 1 (id=1944):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x5}, 0x4a, 0x0, 0xffffffffffffffff, 0x37, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) (fail_nth: 2)
socket$packet(0x11, 0x2, 0x300)

6.155525975s ago: executing program 3 (id=1945):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x9ebb, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffff3ff3e, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xa})
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))

6.097556056s ago: executing program 3 (id=1946):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=@framed={{}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
lseek(r2, 0x9651, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

3.217024275s ago: executing program 2 (id=1947):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000040000000000008dd5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x64, 0x6, 0x7, 0x7cd}]})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2044004}, 0x48800)
syz_clone(0xd62d5d80, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'rose0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')
rmdir(&(0x7f0000000080)='./file0\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xd, 0x0, &(0x7f00000007c0)="9f44948721919580684010a405", 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50)
syz_usb_connect(0x0, 0x57, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x280041, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)

3.049503808s ago: executing program 0 (id=1948):
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0)

3.010927608s ago: executing program 4 (id=1949):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(r0, 0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, r6, 0x800, 0x40eca, 0x8000000000000001, 0x10003})
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0x170, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa02e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dbd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x8081)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000ef13dab4d685ae54ecd00000001", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008500000023000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.008474768s ago: executing program 1 (id=1950):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f0000000080)="0000ffff", &(0x7f0000000300)=""/8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sync_file_range(0xffffffffffffffff, 0x123, 0x9, 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)

3.004175049s ago: executing program 3 (id=1951):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect(0x2, 0x52, &(0x7f0000000700)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405035716"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20)

2.962981049s ago: executing program 0 (id=1952):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.949193129s ago: executing program 0 (id=1953):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(r0, 0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, r6, 0x800, 0x40eca, 0x8000000000000001, 0x10003})
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0x168, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa02e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dbd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x8081)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000ef13dab4d685ae54ecd0000000105000000000055af0d7d879eab2be8c6", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008500000023000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.327175352s ago: executing program 4 (id=1954):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

1.273561843s ago: executing program 4 (id=1955):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ustat(0x0, 0x0)

1.033844466s ago: executing program 2 (id=1956):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000140)='ext4_request_inode\x00', r5, 0x0, 0x2c0}, 0x17)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}}}, 0x32)

907.706327ms ago: executing program 0 (id=1957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

409.597515ms ago: executing program 4 (id=1958):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000182d9c103009130a4c76010203010902240001044000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="2031531184960767a1a843000000530cb8db2c2f70022440554f3f12b109b8fb269db98fbf52a32b25bdecabd015c00400a0e0bf9543931d06edd75fe14b065b436257a38f3e35043973f3463525206b193fd14c0d37120082"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0xc, 0x34, "ebb9b51b1c9677ff64e67142c8f11a3efcacf190ad7b97c437958e18596bdea02fa0aca1bba8882e50b2c5edc235742c35f53863"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x1, 0x8, 0x0, 0x2, 0x3, 0x7, 0x5b, 0x7, 0x2, 0x48b4, 0x8}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

159.445728ms ago: executing program 2 (id=1959):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x6, 0xfffffffffffffffd, &(0x7f0000000340)=[{0x2, 0x3, 0xb, 0xc}, {0x4, 0x4, 0x10, 0x3}, {0x5, 0x3, 0xe, 0x2}, {0x3, 0x4, 0x4, 0x8}, {0x0, 0x4, 0x5, 0x2}, {0x4, 0x2, 0x2, 0x9}], 0x10, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 0 (id=1960):
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01020008000a00", @ANYRESDEC=r1, @ANYBLOB='\b\x00\t'], 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
statx(r3, 0x0, 0x1000, 0x2, &(0x7f0000000540))
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)

kernel console output (not intermixed with test programs):

terface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  376.180800][ T1277] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  376.195151][ T4105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.201423][ T1277] usb 3-1: string descriptor 0 read error: -71
[  376.213847][ T1277] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  376.230257][ T1277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.241474][ T1106] usb 2-1: device descriptor read/64, error -71
[  376.252007][ T1277] usb 3-1: config 0 descriptor??
[  376.261397][ T1277] usb 3-1: can't set config #0, error -71
[  376.267864][ T1277] usb 3-1: USB disconnect, device number 35
[  376.388825][ T4113] overlayfs: missing 'workdir'
[  376.394221][ T4113] syz.4.1082[4113] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  376.394283][ T4113] syz.4.1082[4113] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  376.551304][ T1106] usb 2-1: Using ep0 maxpacket: 16
[  376.575838][ T1106] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  376.592637][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.609384][ T1106] usb 2-1: Product: syz
[  376.618034][ T1106] usb 2-1: Manufacturer: syz
[  376.628233][ T1106] usb 2-1: SerialNumber: syz
[  376.639613][ T1106] usb 2-1: config 0 descriptor??
[  376.651538][ T1106] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  376.659439][ T1106] usb 2-1: Detected FT-X
[  378.409443][   T39] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  378.546981][ T1106] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  378.554431][ T1106] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  378.571305][ T1106] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  378.571305][  T316] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  378.574940][ T4151] overlayfs: missing 'workdir'
[  378.589156][ T1106] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  378.599288][ T1106] usb 2-1: USB disconnect, device number 34
[  378.600287][ T4151] syz.0.1093[4151] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  378.605365][   T39] usb 3-1: Using ep0 maxpacket: 8
[  378.606063][ T1106] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  378.619115][ T4151] syz.0.1093[4151] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  378.622432][ T1106] ftdi_sio 2-1:0.0: device disconnected
[  378.635855][   T39] usb 3-1: config 0 has an invalid interface number: 151 but max is 1
[  378.677583][   T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.694053][   T39] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  378.707643][   T39] usb 3-1: config 0 has no interface number 0
[  378.713979][   T39] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  378.724802][   T39] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  378.735953][   T39] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  378.756651][   T39] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  378.765907][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.774389][   T39] usb 3-1: Product: syz
[  378.778677][   T39] usb 3-1: Manufacturer: syz
[  378.783656][   T39] usb 3-1: SerialNumber: syz
[  378.788545][  T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.803851][   T39] usb 3-1: config 0 descriptor??
[  378.808903][  T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.819272][  T316] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  378.828449][ T4134] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  378.828609][  T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.845877][   T39] snd-usb-audio: probe of 3-1:0.151 failed with error -2
[  378.854351][  T316] usb 5-1: config 0 descriptor??
[  378.947914][ T4160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  379.049533][ T1106] usb 3-1: USB disconnect, device number 36
[  379.264625][  T316] arvo 0003:1E7D:30D4.0005: collection stack underflow
[  379.271788][  T316] arvo 0003:1E7D:30D4.0005: item 0 0 0 12 parsing failed
[  379.279166][  T316] arvo 0003:1E7D:30D4.0005: parse failed
[  379.285163][  T316] arvo: probe of 0003:1E7D:30D4.0005 failed with error -22
[  379.877992][ T4179] overlayfs: missing 'workdir'
[  379.883505][ T4179] syz.3.1104[4179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  379.883565][ T4179] syz.3.1104[4179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  379.941323][ T1106] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  380.141318][ T1106] usb 1-1: Using ep0 maxpacket: 16
[  380.147579][ T1106] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  380.157730][ T1106] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  380.168050][ T1106] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  380.177103][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.185113][ T1106] usb 1-1: Product: syz
[  380.189273][ T1106] usb 1-1: Manufacturer: syz
[  380.193928][ T1106] usb 1-1: SerialNumber: syz
[  380.218923][  T316] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  380.231426][  T464] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  380.465221][  T316] usb 4-1: Using ep0 maxpacket: 8
[  380.472800][  T316] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  380.484927][  T316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.496438][  T316] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  380.506264][  T316] usb 4-1: config 0 has no interface number 0
[  380.513081][  T316] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  380.524544][  T316] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  380.536086][  T316] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  380.552247][  T316] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  380.561726][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.569938][  T316] usb 4-1: Product: syz
[  380.575861][  T316] usb 4-1: Manufacturer: syz
[  380.580705][  T316] usb 4-1: SerialNumber: syz
[  380.632736][  T316] usb 4-1: config 0 descriptor??
[  380.638886][ T4182] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  380.655673][  T316] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  381.016724][  T316] usb 4-1: USB disconnect, device number 33
[  381.382595][ T1277] usb 5-1: USB disconnect, device number 37
[  381.411302][  T464] usb 3-1: Using ep0 maxpacket: 16
[  381.419089][  T464] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  381.490706][  T464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.500349][  T464] usb 3-1: Product: syz
[  381.504639][  T464] usb 3-1: Manufacturer: syz
[  381.509248][  T464] usb 3-1: SerialNumber: syz
[  381.514584][  T464] usb 3-1: config 0 descriptor??
[  381.528753][  T464] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  381.548201][  T464] usb 3-1: Detected FT-X
[  382.788949][  T316] usb 1-1: USB disconnect, device number 39
[  382.841471][  T471] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  383.031305][  T471] usb 5-1: Using ep0 maxpacket: 8
[  383.038116][  T471] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  383.501099][  T471] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.512315][  T471] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  383.526270][  T471] usb 5-1: config 0 has no interface number 0
[  383.533153][  T471] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  383.545262][  T471] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  383.617286][  T464] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  383.624382][  T464] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  383.636693][  T464] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  383.751031][  T464] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  383.767193][  T464] usb 3-1: USB disconnect, device number 37
[  383.774097][  T464] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  383.786621][  T464] ftdi_sio 3-1:0.0: device disconnected
[  383.873070][  T471] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  383.898238][  T471] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  383.913143][  T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.921369][  T471] usb 5-1: Product: syz
[  383.926109][  T471] usb 5-1: Manufacturer: syz
[  383.930814][  T471] usb 5-1: SerialNumber: syz
[  384.351597][  T471] usb 5-1: config 0 descriptor??
[  384.356961][ T4210] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  384.366386][  T471] snd-usb-audio: probe of 5-1:0.151 failed with error -2
[  385.115011][ T1106] usb 5-1: USB disconnect, device number 38
[  385.421288][  T464] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  385.621266][  T464] usb 2-1: Using ep0 maxpacket: 16
[  385.627887][  T464] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  385.651293][  T464] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  385.672384][  T464] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  385.691290][  T464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.699310][  T464] usb 2-1: Product: syz
[  385.711679][  T464] usb 2-1: Manufacturer: syz
[  385.716306][  T464] usb 2-1: SerialNumber: syz
[  386.231362][  T471] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  386.421372][  T471] usb 5-1: Using ep0 maxpacket: 16
[  386.432448][  T471] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  386.501367][  T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.574271][  T471] usb 5-1: Product: syz
[  386.817344][  T471] usb 5-1: Manufacturer: syz
[  386.832231][  T471] usb 5-1: SerialNumber: syz
[  386.883892][  T471] usb 5-1: config 0 descriptor??
[  386.958000][  T471] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  386.978828][  T471] usb 5-1: Detected FT-X
[  390.282581][  T316] usb 2-1: USB disconnect, device number 35
[  390.351605][  T471] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  390.373743][  T471] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  390.396182][  T471] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  390.420913][  T471] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  390.430225][  T471] usb 5-1: USB disconnect, device number 39
[  390.438001][  T471] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  390.447670][  T471] ftdi_sio 5-1:0.0: device disconnected
[  390.740057][  T411] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  390.817796][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'.
[  390.961332][  T411] usb 1-1: Using ep0 maxpacket: 8
[  390.968189][  T411] usb 1-1: config 0 has an invalid interface number: 151 but max is 1
[  391.089702][  T411] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.177136][  T411] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  392.217769][  T411] usb 1-1: config 0 has no interface number 0
[  392.244060][  T411] usb 1-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  392.290818][  T411] usb 1-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  392.397497][  T411] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  392.423943][  T411] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  392.689456][  T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.813246][  T411] usb 1-1: Product: syz
[  392.867792][  T411] usb 1-1: Manufacturer: syz
[  392.956711][  T411] usb 1-1: SerialNumber: syz
[  393.033339][  T411] usb 1-1: config 0 descriptor??
[  393.085353][ T4300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  393.119222][  T411] snd-usb-audio: probe of 1-1:0.151 failed with error -2
[  393.318284][  T411] usb 1-1: USB disconnect, device number 40
[  394.131280][  T316] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  394.291289][  T411] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  394.311263][  T316] usb 4-1: Using ep0 maxpacket: 16
[  394.318040][  T316] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  394.329272][  T316] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  394.361460][  T316] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  394.386663][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.415129][  T316] usb 4-1: Product: syz
[  394.423475][  T316] usb 4-1: Manufacturer: syz
[  394.431652][  T316] usb 4-1: SerialNumber: syz
[  394.461293][ T1277] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  394.481436][  T411] usb 5-1: Using ep0 maxpacket: 16
[  394.488545][  T411] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[  394.530391][  T411] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[  394.571897][  T411] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.583098][  T411] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  394.593340][  T411] usb 5-1: config 0 has no interface number 0
[  394.599688][  T411] usb 5-1: config 0 interface 104 has no altsetting 1
[  394.608565][  T411] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  394.622442][  T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.635448][  T411] usb 5-1: Product: syz
[  394.641064][  T411] usb 5-1: Manufacturer: syz
[  394.646170][  T411] usb 5-1: SerialNumber: syz
[  394.651265][ T1277] usb 2-1: Using ep0 maxpacket: 16
[  394.652344][  T411] usb 5-1: config 0 descriptor??
[  394.658863][ T1277] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  394.670411][ T1277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.678546][ T1277] usb 2-1: Product: syz
[  394.682744][ T1277] usb 2-1: Manufacturer: syz
[  394.687357][ T1277] usb 2-1: SerialNumber: syz
[  394.701442][ T1277] usb 2-1: config 0 descriptor??
[  394.720636][ T1277] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  394.728425][ T1277] usb 2-1: Detected FT-X
[  394.863412][ T4344] mmap: syz.4.1155 (4344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  394.885086][  T411] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  394.896598][  T411] asix: probe of 5-1:0.104 failed with error -71
[  394.906258][  T411] usb 5-1: USB disconnect, device number 40
[  396.031650][ T4362] syz.4.1159[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  396.031757][ T4362] syz.4.1159[4362] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  397.429343][  T316] usb 4-1: USB disconnect, device number 34
[  397.470460][ T4373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  397.735572][ T1277] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  397.742950][ T1277] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  397.756502][ T1277] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  397.771562][ T1277] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  397.780508][ T1277] usb 2-1: USB disconnect, device number 36
[  397.790836][ T1277] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  397.800457][ T1277] ftdi_sio 2-1:0.0: device disconnected
[  398.091295][  T464] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  398.241334][  T464] usb 3-1: device descriptor read/64, error -71
[  398.791321][  T464] usb 3-1: device descriptor read/64, error -71
[  399.061347][  T464] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  399.221299][  T464] usb 3-1: device descriptor read/64, error -71
[  399.245512][   T28] audit: type=1400 audit(2000000118.850:363): avc:  denied  { ioctl } for  pid=4400 comm="syz.3.1171" path="socket:[34082]" dev="sockfs" ino=34082 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  399.245589][ T4401] device syzkaller0 entered promiscuous mode
[  399.301924][ T4403] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  399.491296][  T464] usb 3-1: device descriptor read/64, error -71
[  399.611497][  T464] usb usb3-port1: attempt power cycle
[  401.061284][ T1277] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  401.241288][ T1277] usb 1-1: Using ep0 maxpacket: 16
[  401.248937][ T1277] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  401.258100][ T1277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.266106][ T1277] usb 1-1: Product: syz
[  401.270304][ T1277] usb 1-1: Manufacturer: syz
[  401.328075][ T4429] syz.4.1179[4429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  401.328368][ T4429] syz.4.1179[4429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  402.883299][  T464] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  402.902168][ T1277] usb 1-1: SerialNumber: syz
[  402.908011][ T1277] usb 1-1: config 0 descriptor??
[  402.921311][ T1277] usb 1-1: can't set config #0, error -71
[  402.928310][ T1277] usb 1-1: USB disconnect, device number 41
[  404.121281][  T464] usb 3-1: device not accepting address 40, error -71
[  406.614114][ T1106] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  408.129744][  T316] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  408.145870][ T4500] syz.4.1201[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.145952][ T4500] syz.4.1201[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.160286][ T4503] syz.2.1202[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.172725][ T4503] syz.2.1202[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.361361][  T316] usb 2-1: Using ep0 maxpacket: 16
[  408.818131][  T316] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  408.996503][  T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.031267][  T316] usb 2-1: Product: syz
[  409.047037][  T316] usb 2-1: Manufacturer: syz
[  409.071673][  T316] usb 2-1: SerialNumber: syz
[  409.090292][  T316] usb 2-1: config 0 descriptor??
[  409.120909][  T316] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  409.149123][  T316] usb 2-1: Detected FT-X
[  409.357440][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  409.367698][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  409.380536][ T4527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  409.428964][  T316] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  409.436217][  T316] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  409.444928][  T316] usb 2-1: USB disconnect, device number 37
[  409.451322][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  409.460681][  T316] ftdi_sio 2-1:0.0: device disconnected
[  409.931297][  T464] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  410.121283][  T464] usb 3-1: Using ep0 maxpacket: 16
[  410.133851][  T464] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  410.149428][  T464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.158036][  T464] usb 3-1: Product: syz
[  410.162554][  T464] usb 3-1: Manufacturer: syz
[  410.167369][  T464] usb 3-1: SerialNumber: syz
[  410.175502][  T464] usb 3-1: config 0 descriptor??
[  410.186609][  T464] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  410.256623][  T464] usb 3-1: Detected FT-X
[  410.718261][  T464] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  410.732046][  T464] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  410.748349][  T464] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  410.757192][  T464] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  410.766867][  T464] usb 3-1: USB disconnect, device number 42
[  410.773761][  T464] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  410.783584][  T464] ftdi_sio 3-1:0.0: device disconnected
[  410.881284][  T411] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  411.537872][ T4567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  411.671591][ T1277] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  412.124664][ T1277] usb 2-1: Using ep0 maxpacket: 16
[  412.136719][ T1277] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  412.147573][ T1277] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  412.158617][ T1277] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  412.168264][ T1277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.454521][ T1277] usb 2-1: Product: syz
[  415.813478][ T1277] usb 2-1: Manufacturer: syz
[  415.818296][ T1277] usb 2-1: SerialNumber: syz
[  415.855711][ T1277] usb 2-1: can't set config #4, error -71
[  418.269192][ T1277] usb 2-1: USB disconnect, device number 38
[  418.431006][ T4586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.791303][ T1277] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  418.996416][ T1277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64
[  419.011807][ T1277] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  419.021933][ T1277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.030692][ T1277] usb 2-1: config 0 descriptor??
[  419.040626][ T4587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  419.811377][   T60] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  420.453246][ T1277] uclogic 0003:5543:0003.0006: No inputs registered, leaving
[  420.466985][ T1277] uclogic 0003:5543:0003.0006: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0
[  420.486791][ T1277] usb 2-1: USB disconnect, device number 39
[  420.599846][   T60] usb 5-1: Using ep0 maxpacket: 16
[  420.612406][   T60] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  420.631735][ T4621] syz.0.1237[4621] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  420.631818][ T4621] syz.0.1237[4621] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  420.651369][   T60] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  421.429567][   T60] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  421.438867][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.447492][   T60] usb 5-1: Product: syz
[  421.451839][   T60] usb 5-1: Manufacturer: syz
[  421.456520][   T60] usb 5-1: SerialNumber: syz
[  423.022051][  T316] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  423.261314][  T316] usb 4-1: Using ep0 maxpacket: 16
[  423.268362][  T316] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  423.278837][  T316] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  424.374111][   T60] usb 5-1: USB disconnect, device number 42
[  424.555363][  T316] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  424.564672][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.701278][  T316] usb 4-1: Product: syz
[  424.705541][  T316] usb 4-1: Manufacturer: syz
[  424.710158][  T316] usb 4-1: SerialNumber: syz
[  427.408886][ T1277] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  427.537224][   T60] usb 4-1: USB disconnect, device number 35
[  430.859884][ T1277] usb 5-1: Using ep0 maxpacket: 16
[  430.867420][ T1277] usb 5-1: device descriptor read/all, error -71
[  431.151542][ T4751] syz.2.1275[4751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  431.151629][ T4751] syz.2.1275[4751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  434.564104][ T4761] syz.1.1279[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  434.576549][ T4761] syz.1.1279[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.461564][ T4817] syz.2.1295[4817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.473025][ T4817] syz.2.1295[4817] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  447.781278][  T348] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  447.803528][ T4837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.991293][  T348] usb 2-1: Using ep0 maxpacket: 8
[  447.997870][  T348] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[  448.006410][  T348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.016701][  T348] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  448.025813][  T348] usb 2-1: config 0 has no interface number 0
[  448.031971][  T348] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  448.042649][  T348] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  448.053611][  T348] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  448.069711][  T348] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  448.071288][ T1277] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  448.079241][  T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.096043][  T348] usb 2-1: Product: syz
[  448.100225][  T348] usb 2-1: Manufacturer: syz
[  448.104960][  T348] usb 2-1: SerialNumber: syz
[  448.110406][  T348] usb 2-1: config 0 descriptor??
[  448.115949][ T4830] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  448.124840][  T348] snd-usb-audio: probe of 2-1:0.151 failed with error -2
[  448.261272][ T1277] usb 5-1: Using ep0 maxpacket: 16
[  448.269131][ T1277] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  448.278464][ T1277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.286703][ T1277] usb 5-1: Product: syz
[  448.290904][ T1277] usb 5-1: Manufacturer: syz
[  448.295641][ T1277] usb 5-1: SerialNumber: syz
[  448.300852][ T1277] usb 5-1: config 0 descriptor??
[  448.307419][ T1277] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  448.315330][ T1277] usb 5-1: Detected FT-X
[  448.351182][  T348] usb 2-1: USB disconnect, device number 40
[  449.360632][ T1277] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  449.368058][ T1277] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  449.381290][ T1277] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  449.401341][ T1277] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  449.421351][ T1277] usb 5-1: USB disconnect, device number 44
[  449.441455][ T1277] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  449.451415][ T1277] ftdi_sio 5-1:0.0: device disconnected
[  451.521538][ T4878] syz.1.1316[4878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  451.521624][ T4878] syz.1.1316[4878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  453.037760][ T4887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.791258][ T1277] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  454.801371][   T60] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  454.971241][ T1277] usb 2-1: Using ep0 maxpacket: 8
[  454.977428][ T1277] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[  454.986113][   T60] usb 4-1: Using ep0 maxpacket: 16
[  454.992847][ T1277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.996808][   T60] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  455.018661][ T1277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  455.029419][ T1277] usb 2-1: config 0 has no interface number 0
[  455.036239][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.044574][ T1277] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  455.055660][   T60] usb 4-1: Product: syz
[  455.060203][   T60] usb 4-1: Manufacturer: syz
[  455.065291][ T1277] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  455.078517][   T60] usb 4-1: SerialNumber: syz
[  455.084862][   T60] usb 4-1: config 0 descriptor??
[  455.090391][ T1277] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  455.112213][   T60] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  455.130736][   T60] usb 4-1: Detected FT-X
[  455.136131][ T1277] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  455.145841][ T1277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.154951][ T1277] usb 2-1: Product: syz
[  455.160060][ T1277] usb 2-1: Manufacturer: syz
[  455.165330][ T1277] usb 2-1: SerialNumber: syz
[  455.170969][ T1277] usb 2-1: config 0 descriptor??
[  455.176495][ T4914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  456.351749][ T4929] syz.0.1331[4929] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  456.351857][ T4929] syz.0.1331[4929] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  457.680673][ T1277] snd-usb-audio: probe of 2-1:0.151 failed with error -2
[  457.707537][   T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  457.714651][   T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  457.733773][ T1277] usb 2-1: USB disconnect, device number 41
[  457.742977][   T60] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  457.762075][   T60] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  458.903016][ T4943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.008249][   T60] usb 4-1: USB disconnect, device number 36
[  459.014945][   T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  459.028013][   T60] ftdi_sio 4-1:0.0: device disconnected
[  459.501276][   T60] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  463.271072][ T4991] syz.4.1349[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  463.271162][ T4991] syz.4.1349[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.951320][  T471] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  466.919446][  T471] usb 5-1: Using ep0 maxpacket: 16
[  466.933233][  T471] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  466.946876][  T471] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  467.074648][  T471] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  467.090102][  T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.108483][  T471] usb 5-1: Product: syz
[  467.113641][  T471] usb 5-1: Manufacturer: syz
[  467.122261][  T471] usb 5-1: SerialNumber: syz
[  467.123921][ T5032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  467.141322][ T4970] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  467.621339][ T4970] usb 4-1: Using ep0 maxpacket: 8
[  467.627643][ T4970] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  467.636388][ T4970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  467.646881][ T4970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  467.655902][ T4970] usb 4-1: config 0 has no interface number 0
[  467.662184][ T4970] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  467.672996][ T4970] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  467.683876][ T4970] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  467.698582][ T4970] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  467.707958][ T4970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.716461][ T4970] usb 4-1: Product: syz
[  467.720853][ T4970] usb 4-1: Manufacturer: syz
[  467.725604][ T4970] usb 4-1: SerialNumber: syz
[  467.730688][ T4970] usb 4-1: config 0 descriptor??
[  467.735973][ T5007] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  467.744946][ T4970] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  467.844233][  T471] usb 5-1: USB disconnect, device number 45
[  468.433681][  T348] usb 4-1: USB disconnect, device number 37
[  468.892728][ T5050] syz.0.1366[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.893056][ T5050] syz.0.1366[5050] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.893395][   T28] audit: type=1400 audit(2000000191.500:364): avc:  denied  { getopt } for  pid=5068 comm="syz.0.1374" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  472.046863][ T5077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  472.921268][  T348] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  473.401229][  T348] usb 1-1: Using ep0 maxpacket: 32
[  473.407888][  T348] usb 1-1: unable to get BOS descriptor or descriptor too short
[  473.418425][  T348] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  473.429003][  T348] usb 1-1: config 7 has no interface number 0
[  473.437461][  T348] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  473.451639][  T348] usb 1-1: config 7 interface 187 has no altsetting 0
[  473.463099][  T348] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.0b
[  473.477356][  T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.490518][  T348] usb 1-1: Product: syz
[  473.497827][  T348] usb 1-1: Manufacturer: syz
[  473.505658][  T348] usb 1-1: SerialNumber: syz
[  473.515138][ T5073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  473.611903][  T316] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  473.913468][ T5073] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5073 comm=syz.0.1374
[  476.172684][ T5121] syz.3.1385[5121] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  476.173002][ T5121] syz.3.1385[5121] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  477.435406][  T316] usb 2-1: device descriptor read/64, error -71
[  477.654813][  T332] usb 1-1: USB disconnect, device number 45
[  477.781255][  T316] usb 2-1: Using ep0 maxpacket: 16
[  477.789610][  T316] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  477.798851][  T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.807429][  T316] usb 2-1: Product: syz
[  477.811712][  T316] usb 2-1: Manufacturer: syz
[  477.816501][  T316] usb 2-1: SerialNumber: syz
[  477.821788][  T316] usb 2-1: config 0 descriptor??
[  477.827882][  T316] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  477.835996][  T316] usb 2-1: Detected FT-X
[  478.028987][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  478.036126][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  478.043361][  T316] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  478.050366][  T316] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  478.059039][  T316] usb 2-1: USB disconnect, device number 42
[  478.065544][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  478.074999][  T316] ftdi_sio 2-1:0.0: device disconnected
[  480.520745][ T5156] bridge1: the hash_elasticity option has been deprecated and is always 16
[  487.178774][ T5242] FAULT_INJECTION: forcing a failure.
[  487.178774][ T5242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.196790][ T5246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  487.207848][ T5242] CPU: 1 PID: 5242 Comm: syz.3.1424 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  487.217973][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  487.228229][ T5242] Call Trace:
[  487.231527][ T5242]  <TASK>
[  487.234464][ T5242]  __dump_stack+0x21/0x24
[  487.238807][ T5242]  dump_stack_lvl+0xee/0x150
[  487.243465][ T5242]  ? __cfi_dump_stack_lvl+0x8/0x8
[  487.248598][ T5242]  dump_stack+0x15/0x24
[  487.252856][ T5242]  should_fail_ex+0x3d4/0x520
[  487.257625][ T5242]  should_fail+0xb/0x10
[  487.261774][ T5242]  should_fail_usercopy+0x1a/0x20
[  487.266796][ T5242]  strncpy_from_user+0x24/0x2d0
[  487.271647][ T5242]  ? getname_flags+0xb9/0x500
[  487.276324][ T5242]  getname_flags+0xf4/0x500
[  487.280932][ T5242]  user_path_at_empty+0x30/0x1c0
[  487.285867][ T5242]  __se_sys_mount+0x2e3/0x380
[  487.290548][ T5242]  ? __x64_sys_mount+0xd0/0xd0
[  487.295310][ T5242]  ? __cfi_ksys_write+0x10/0x10
[  487.300173][ T5242]  __x64_sys_mount+0xbf/0xd0
[  487.304765][ T5242]  x64_sys_call+0x65d/0x9a0
[  487.309467][ T5242]  do_syscall_64+0x4c/0xa0
[  487.313889][ T5242]  ? clear_bhb_loop+0x15/0x70
[  487.318737][ T5242]  ? clear_bhb_loop+0x15/0x70
[  487.323408][ T5242]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  487.329399][ T5242] RIP: 0033:0x7fc81d18e969
[  487.333918][ T5242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.353885][ T5242] RSP: 002b:00007fc81e005038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  487.362488][ T5242] RAX: ffffffffffffffda RBX: 00007fc81d3b5fa0 RCX: 00007fc81d18e969
[  487.370466][ T5242] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000
[  487.378463][ T5242] RBP: 00007fc81e005090 R08: 0000000000000000 R09: 0000000000000000
[  487.386460][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.394450][ T5242] R13: 0000000000000000 R14: 00007fc81d3b5fa0 R15: 00007ffdfd4a0108
[  487.402526][ T5242]  </TASK>
[  488.133855][   T28] audit: type=1400 audit(2000000207.740:365): avc:  denied  { watch watch_reads } for  pid=5259 comm="syz.3.1431" path="/294/file0" dev="tmpfs" ino=1682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  488.600057][   T28] audit: type=1400 audit(2000000207.800:366): avc:  denied  { execute } for  pid=5259 comm="syz.3.1431" name="file0" dev="tmpfs" ino=1682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  488.630292][   T28] audit: type=1400 audit(2000000207.800:367): avc:  denied  { execute_no_trans } for  pid=5259 comm="syz.3.1431" path="/294/file0" dev="tmpfs" ino=1682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  488.686676][ T5269] kvm: emulating exchange as write
[  488.731251][  T472] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  488.799860][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.891278][  T348] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  488.941261][  T472] usb 2-1: Using ep0 maxpacket: 16
[  488.948973][  T472] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  488.961884][  T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.981667][  T472] usb 2-1: Product: syz
[  488.985877][  T472] usb 2-1: Manufacturer: syz
[  488.990489][  T472] usb 2-1: SerialNumber: syz
[  488.996093][  T472] usb 2-1: config 0 descriptor??
[  489.006037][  T472] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  489.021575][  T472] usb 2-1: Detected FT-X
[  489.081282][  T348] usb 3-1: Using ep0 maxpacket: 8
[  489.149373][  T348] usb 3-1: config 0 has an invalid interface number: 151 but max is 1
[  489.178606][  T348] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.331337][  T348] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  489.350020][  T348] usb 3-1: config 0 has no interface number 0
[  489.357388][  T348] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  489.373038][  T348] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  489.384046][  T348] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  489.404577][  T348] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  489.421275][  T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.436418][  T348] usb 3-1: Product: syz
[  489.440786][  T348] usb 3-1: Manufacturer: syz
[  489.445733][  T348] usb 3-1: SerialNumber: syz
[  489.461166][  T348] usb 3-1: config 0 descriptor??
[  489.466686][ T5263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  489.476480][  T348] snd-usb-audio: probe of 3-1:0.151 failed with error -2
[  489.607302][ T5287] overlayfs: failed to resolve './file1': -2
[  489.684417][  T348] usb 3-1: USB disconnect, device number 43
[  490.202894][ T5297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  490.229076][ T5299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  490.707781][  T472] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  490.719099][  T472] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  491.069568][  T472] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  491.391824][  T472] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  491.400731][  T472] usb 2-1: USB disconnect, device number 43
[  491.407794][  T472] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  491.417868][  T472] ftdi_sio 2-1:0.0: device disconnected
[  495.950925][ T5340] syz.0.1453[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  495.951241][ T5340] syz.0.1453[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  496.992295][ T5348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  503.067285][ T5393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  505.381247][  T472] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  505.777436][   T28] audit: type=1400 audit(2000000225.380:368): avc:  denied  { mounton } for  pid=5429 comm="syz.3.1480" path="/304/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  505.882811][   T28] audit: type=1400 audit(2000000225.490:369): avc:  denied  { read } for  pid=5432 comm="syz.3.1481" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  505.941237][  T348] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  506.131253][  T348] usb 3-1: Using ep0 maxpacket: 16
[  506.141666][  T348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  506.151901][  T348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  506.168255][  T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  506.191537][  T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  506.200204][  T348] usb 3-1: SerialNumber: syz
[  506.334938][  T348] usb 3-1: 0:2 : does not exist
[  506.644850][ T5446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  506.687029][  T348] usb 3-1: USB disconnect, device number 44
[  506.694934][ T5450] FAULT_INJECTION: forcing a failure.
[  506.694934][ T5450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  506.711378][ T5450] CPU: 1 PID: 5450 Comm: syz.3.1486 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  506.721238][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  506.731596][ T5450] Call Trace:
[  506.734918][ T5450]  <TASK>
[  506.737868][ T5450]  __dump_stack+0x21/0x24
[  506.742242][ T5450]  dump_stack_lvl+0xee/0x150
[  506.746857][ T5450]  ? __cfi_dump_stack_lvl+0x8/0x8
[  506.751940][ T5450]  ? __cfi_copy_fpstate_to_sigframe+0x10/0x10
[  506.758036][ T5450]  dump_stack+0x15/0x24
[  506.762396][ T5450]  should_fail_ex+0x3d4/0x520
[  506.767110][ T5450]  should_fail+0xb/0x10
[  506.771305][ T5450]  should_fail_usercopy+0x1a/0x20
[  506.776388][ T5450]  _copy_to_user+0x1e/0x90
[  506.781027][ T5450]  copy_siginfo_to_user+0x28/0xa0
[  506.786351][ T5450]  arch_do_signal_or_restart+0xb1b/0x1030
[  506.792352][ T5450]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  506.798641][ T5450]  exit_to_user_mode_loop+0x7a/0xb0
[  506.803861][ T5450]  exit_to_user_mode_prepare+0x5a/0xa0
[  506.809602][ T5450]  syscall_exit_to_user_mode+0x1a/0x30
[  506.815402][ T5450]  do_syscall_64+0x58/0xa0
[  506.819842][ T5450]  ? clear_bhb_loop+0x15/0x70
[  506.824542][ T5450]  ? clear_bhb_loop+0x15/0x70
[  506.829342][ T5450]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  506.835285][ T5450] RIP: 0033:0x7fc81d18e969
[  506.839732][ T5450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.859551][ T5450] RSP: 002b:00007fc81e005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  506.868085][ T5450] RAX: fffffffffffffff2 RBX: 00007fc81d3b5fa0 RCX: 00007fc81d18e969
[  506.876090][ T5450] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  506.884098][ T5450] RBP: 00007fc81e005090 R08: 0000000000000000 R09: 0000000000000000
[  506.892106][ T5450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.900106][ T5450] R13: 0000000000000000 R14: 00007fc81d3b5fa0 R15: 00007ffdfd4a0108
[  506.908208][ T5450]  </TASK>
[  507.431256][   T28] audit: type=1400 audit(2000000227.000:370): avc:  denied  { create } for  pid=5464 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  507.723597][   T28] audit: type=1400 audit(2000000227.000:371): avc:  denied  { getopt } for  pid=5464 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  508.637019][   T28] audit: type=1326 audit(2000000228.240:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.717702][   T28] audit: type=1326 audit(2000000228.240:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.763827][   T28] audit: type=1326 audit(2000000228.240:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.763889][   T28] audit: type=1326 audit(2000000228.240:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.763940][   T28] audit: type=1326 audit(2000000228.240:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.763991][   T28] audit: type=1326 audit(2000000228.240:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.2.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f915cf8e969 code=0x7ffc0000
[  508.771305][  T222] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  508.806580][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'.
[  509.074611][  T222] usb 4-1: Using ep0 maxpacket: 16
[  509.081144][  T222] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  509.091655][  T222] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  509.111851][  T222] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  509.120921][  T222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  509.139185][  T222] usb 4-1: SerialNumber: syz
[  509.324981][  T222] usb 4-1: 0:2 : does not exist
[  509.588938][ T5474] syz.3.1493[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.589360][ T5474] syz.3.1493[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.777480][ T5474] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  509.986994][ T5474] SELinux: failed to load policy
[  510.518390][  T222] usb 4-1: USB disconnect, device number 38
[  510.697357][ T5513] device bridge1 entered promiscuous mode
[  511.911230][  T222] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  512.084158][  T348] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  512.181279][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  512.181300][   T28] audit: type=1400 audit(2000000231.770:382): avc:  denied  { write } for  pid=5521 comm="syz.0.1507" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  512.463855][  T348] usb 5-1: Using ep0 maxpacket: 16
[  512.470434][  T348] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  512.480593][  T348] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  512.491264][  T348] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  512.500476][  T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.508545][  T348] usb 5-1: Product: syz
[  512.512759][  T348] usb 5-1: Manufacturer: syz
[  512.517538][  T348] usb 5-1: SerialNumber: syz
[  515.004637][  T332] usb 5-1: USB disconnect, device number 46
[  515.655975][ T5562] syz.4.1516[5562] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  515.656537][ T5562] syz.4.1516[5562] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  518.373194][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'.
[  518.422426][ T5568] bridge0: port 3(vlan0) entered blocking state
[  518.422465][ T5568] bridge0: port 3(vlan0) entered disabled state
[  518.671261][  T222] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  518.882455][  T222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  518.893664][  T222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  518.904878][  T222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  518.916102][  T222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  518.929223][  T222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  518.938719][  T222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.957829][  T222] usb 2-1: Product: syz
[  518.962567][  T222] usb 2-1: Manufacturer: syz
[  518.967394][  T222] usb 2-1: SerialNumber: syz
[  518.974643][ T5569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  518.983108][  T222] cdc_mbim 2-1:1.0: skipping garbage
[  519.011240][  T332] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  519.190845][ T5569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  519.198543][ T5569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  520.510647][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.519369][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.562073][ T5605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  520.569283][ T5605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  520.577792][  T222] cdc_mbim 2-1:1.0: setting tx_max = 40
[  520.610291][  T222] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  520.650418][  T222] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, da:ac:79:30:0f:a6
[  520.789834][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.798476][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.777404][ T5619] FAULT_INJECTION: forcing a failure.
[  521.777404][ T5619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.941858][ T5619] CPU: 1 PID: 5619 Comm: syz.3.1534 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  521.952234][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  521.962306][ T5619] Call Trace:
[  521.965595][ T5619]  <TASK>
[  521.968528][ T5619]  __dump_stack+0x21/0x24
[  521.972878][ T5619]  dump_stack_lvl+0xee/0x150
[  521.977495][ T5619]  ? __cfi_dump_stack_lvl+0x8/0x8
[  521.982533][ T5619]  dump_stack+0x15/0x24
[  521.986712][ T5619]  should_fail_ex+0x3d4/0x520
[  521.991401][ T5619]  should_fail+0xb/0x10
[  521.995571][ T5619]  should_fail_usercopy+0x1a/0x20
[  522.000617][ T5619]  _copy_to_user+0x1e/0x90
[  522.005055][ T5619]  simple_read_from_buffer+0xe9/0x160
[  522.010459][ T5619]  proc_fail_nth_read+0x19a/0x210
[  522.015505][ T5619]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  522.021074][ T5619]  ? security_file_permission+0x94/0xb0
[  522.026641][ T5619]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  522.032236][ T5619]  vfs_read+0x26e/0x8c0
[  522.036418][ T5619]  ? __cfi_vfs_read+0x10/0x10
[  522.041127][ T5619]  ? __kasan_check_write+0x14/0x20
[  522.046416][ T5619]  ? mutex_lock+0x8d/0x1a0
[  522.050852][ T5619]  ? __cfi_mutex_lock+0x10/0x10
[  522.055732][ T5619]  ? __fdget_pos+0x2cd/0x380
[  522.060350][ T5619]  ? ksys_read+0x71/0x240
[  522.064694][ T5619]  ksys_read+0x140/0x240
[  522.068971][ T5619]  ? __cfi_ksys_read+0x10/0x10
[  522.073951][ T5619]  ? preempt_schedule_notrace_thunk+0x16/0x18
[  522.080144][ T5619]  __x64_sys_read+0x7b/0x90
[  522.084773][ T5619]  x64_sys_call+0x2f/0x9a0
[  522.089230][ T5619]  do_syscall_64+0x4c/0xa0
[  522.093692][ T5619]  ? clear_bhb_loop+0x15/0x70
[  522.098385][ T5619]  ? clear_bhb_loop+0x15/0x70
[  522.103353][ T5619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.109537][ T5619] RIP: 0033:0x7fc81d18d37c
[  522.113987][ T5619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  522.133721][ T5619] RSP: 002b:00007fc81e005030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  522.142167][ T5619] RAX: ffffffffffffffda RBX: 00007fc81d3b5fa0 RCX: 00007fc81d18d37c
[  522.150254][ T5619] RDX: 000000000000000f RSI: 00007fc81e0050a0 RDI: 0000000000000005
[  522.158226][ T5619] RBP: 00007fc81e005090 R08: 0000000000000000 R09: 0000000000000000
[  522.166196][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.174422][ T5619] R13: 0000000000000000 R14: 00007fc81d3b5fa0 R15: 00007ffdfd4a0108
[  522.182402][ T5619]  </TASK>
[  522.215995][   T60] usb 2-1: USB disconnect, device number 44
[  522.222535][   T60] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  522.351102][   T28] audit: type=1400 audit(2000000241.950:383): avc:  denied  { create } for  pid=5626 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  522.351603][ T5629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5629 comm=syz.1.1537
[  522.781237][   T60] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  525.751241][   T60] usb 2-1: Using ep0 maxpacket: 16
[  526.776549][   T60] usb 2-1: device descriptor read/all, error -71
[  526.806800][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'.
[  526.821023][ T5661] bridge0: port 3(vlan2) entered blocking state
[  526.828699][ T5661] bridge0: port 3(vlan2) entered disabled state
[  527.528492][  T348] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  527.631238][ T4970] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  528.444887][ T4970] usb 4-1: Using ep0 maxpacket: 16
[  528.452542][ T4970] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  528.471242][ T4970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.479261][ T4970] usb 4-1: Product: syz
[  528.501206][ T4970] usb 4-1: Manufacturer: syz
[  528.505833][ T4970] usb 4-1: SerialNumber: syz
[  528.570362][ T4970] usb 4-1: config 0 descriptor??
[  528.583677][ T4970] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  528.603056][ T4970] usb 4-1: Detected FT-X
[  528.625018][ T5682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  528.784175][ T4970] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  528.799187][ T4970] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  528.833066][ T4970] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  528.865795][ T4970] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  528.915955][ T4970] usb 4-1: USB disconnect, device number 40
[  528.944985][ T4970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  528.987326][ T4970] ftdi_sio 4-1:0.0: device disconnected
[  532.951230][   T60] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  533.142383][   T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  533.160048][   T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  533.200443][   T60] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  533.217381][   T60] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  533.404507][   T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  533.425128][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.444541][   T60] usb 1-1: Product: syz
[  533.449186][   T60] usb 1-1: Manufacturer: syz
[  533.454792][   T60] usb 1-1: SerialNumber: syz
[  533.460777][ T5732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  533.474703][   T60] cdc_mbim 1-1:1.0: skipping garbage
[  533.672561][ T5732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  533.679832][ T5732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  533.930118][  T348] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  534.111290][  T348] usb 4-1: Using ep0 maxpacket: 8
[  534.118495][  T348] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  534.160522][  T348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.216655][  T348] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  534.268416][  T348] usb 4-1: config 0 has no interface number 0
[  534.304969][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  534.316334][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  534.337348][  T348] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  534.371497][  T348] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  534.380848][  T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.404387][  T348] usb 4-1: Product: syz
[  534.408591][  T348] usb 4-1: Manufacturer: syz
[  534.413401][  T348] usb 4-1: SerialNumber: syz
[  534.418539][  T348] usb 4-1: config 0 descriptor??
[  534.424214][ T5753] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  534.433294][  T348] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  534.511240][  T222] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  534.548707][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.557337][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.566685][ T5762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  534.573976][ T5762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  534.581300][   T60] cdc_mbim 1-1:1.0: setting tx_max = 40
[  534.587236][   T60] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  534.594335][   T60] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ee:7d:0b:82:bf:b4
[  534.638980][   T60] usb 4-1: USB disconnect, device number 41
[  534.721261][  T222] usb 3-1: Using ep0 maxpacket: 16
[  534.727624][  T222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.738675][  T222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.748532][  T222] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  534.757632][  T222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.766060][  T222] usb 3-1: config 0 descriptor??
[  534.788421][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.796918][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.140266][  T222] usbhid 3-1:0.0: can't add hid device: -71
[  535.146988][  T222] usbhid: probe of 3-1:0.0 failed with error -71
[  535.154603][  T222] usb 3-1: USB disconnect, device number 46
[  535.948086][   T60] usb 1-1: USB disconnect, device number 47
[  535.954378][   T60] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  536.977528][ T5813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  537.211256][  T222] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  539.091232][  T316] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  539.655936][ T5832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  539.931209][  T316] usb 4-1: device not accepting address 42, error -71
[  541.494612][  T222] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  541.549807][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'.
[  541.564792][ T5868] bridge0: port 3(vlan2) entered blocking state
[  541.571073][ T5868] bridge0: port 3(vlan2) entered disabled state
[  541.761242][  T222] usb 3-1: Using ep0 maxpacket: 16
[  541.768591][  T222] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  541.932715][  T222] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  542.058201][  T222] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  542.159511][  T222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.248022][  T222] usb 3-1: Product: syz
[  542.296758][  T222] usb 3-1: Manufacturer: syz
[  542.349394][  T222] usb 3-1: SerialNumber: syz
[  542.881233][  T348] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  543.071232][  T348] usb 4-1: Using ep0 maxpacket: 16
[  543.122321][  T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.156677][  T348] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  543.233025][  T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.310770][  T348] usb 4-1: config 0 descriptor??
[  543.961649][  T222] usb 3-1: USB disconnect, device number 47
[  544.005418][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'.
[  544.044137][ T5900] bridge0: port 3(vlan2) entered blocking state
[  544.068616][ T5900] bridge0: port 3(vlan2) entered disabled state
[  545.529825][  T348] hid-generic 0003:04D8:00DD.0007: collection stack underflow
[  545.537415][  T348] hid-generic 0003:04D8:00DD.0007: item 0 2 0 12 parsing failed
[  545.546073][  T348] hid-generic: probe of 0003:04D8:00DD.0007 failed with error -22
[  545.555516][  T348] usb 4-1: USB disconnect, device number 44
[  545.994125][   T60] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=60 comm=kworker/0:2
[  549.773990][ T5946] FAULT_INJECTION: forcing a failure.
[  549.773990][ T5946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.789011][ T5947] netlink: 'syz.3.1629': attribute type 32 has an invalid length.
[  549.831292][ T5946] CPU: 0 PID: 5946 Comm: syz.1.1628 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  549.841136][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  549.851198][ T5946] Call Trace:
[  549.854503][ T5946]  <TASK>
[  549.857440][ T5946]  __dump_stack+0x21/0x24
[  549.861790][ T5946]  dump_stack_lvl+0xee/0x150
[  549.866392][ T5946]  ? __cfi_dump_stack_lvl+0x8/0x8
[  549.871432][ T5946]  dump_stack+0x15/0x24
[  549.875603][ T5946]  should_fail_ex+0x3d4/0x520
[  549.880290][ T5946]  should_fail+0xb/0x10
[  549.884450][ T5946]  should_fail_usercopy+0x1a/0x20
[  549.889487][ T5946]  _copy_from_user+0x1e/0xc0
[  549.894082][ T5946]  iovec_from_user+0x1aa/0x2e0
[  549.898856][ T5946]  ? _parse_integer+0x2a/0x40
[  549.903660][ T5946]  __import_iovec+0x71/0x470
[  549.908263][ T5946]  import_iovec+0x7c/0xb0
[  549.912608][ T5946]  ___sys_sendmsg+0x1e4/0x290
[  549.917308][ T5946]  ? __sys_sendmsg+0x270/0x270
[  549.922086][ T5946]  ? __kasan_check_write+0x14/0x20
[  549.927296][ T5946]  ? proc_fail_nth_write+0x17a/0x1f0
[  549.932772][ T5946]  ? vfs_write+0x9d6/0xca0
[  549.937214][ T5946]  ? __fdget+0x19c/0x220
[  549.941472][ T5946]  __x64_sys_sendmsg+0x1f0/0x2c0
[  549.946426][ T5946]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  549.951929][ T5946]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  549.958008][ T5946]  x64_sys_call+0x171/0x9a0
[  549.962525][ T5946]  do_syscall_64+0x4c/0xa0
[  549.966954][ T5946]  ? clear_bhb_loop+0x15/0x70
[  549.971636][ T5946]  ? clear_bhb_loop+0x15/0x70
[  549.976328][ T5946]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.982257][ T5946] RIP: 0033:0x7fc80c18e969
[  549.986703][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.006342][ T5946] RSP: 002b:00007fc80d09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  550.014974][ T5946] RAX: ffffffffffffffda RBX: 00007fc80c3b5fa0 RCX: 00007fc80c18e969
[  550.023052][ T5946] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  550.031052][ T5946] RBP: 00007fc80d09f090 R08: 0000000000000000 R09: 0000000000000000
[  550.039038][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.047032][ T5946] R13: 0000000000000000 R14: 00007fc80c3b5fa0 R15: 00007ffff6928678
[  550.055037][ T5946]  </TASK>
[  550.192806][ T5953] netlink: 'syz.4.1634': attribute type 6 has an invalid length.
[  554.444749][ T5992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  556.156209][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'.
[  556.204896][ T6013] bridge0: port 3(vlan2) entered blocking state
[  556.218120][ T6013] bridge0: port 3(vlan2) entered disabled state
[  557.811213][  T411] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  558.011212][  T411] usb 4-1: Using ep0 maxpacket: 8
[  558.017522][  T411] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  558.049354][  T411] usb 4-1: config 0 has an invalid interface number: 150 but max is 64
[  558.059354][  T411] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.091214][  T411] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[  558.100276][  T411] usb 4-1: config 0 has no interface number 0
[  558.131219][  T411] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  558.151194][  T411] usb 4-1: config 0 interface 150 has no altsetting 0
[  558.158009][  T411] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  558.168627][  T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.188323][  T411] usb 4-1: config 0 descriptor??
[  558.471238][  T348] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  558.507103][   T28] audit: type=1400 audit(2000000278.110:384): avc:  denied  { listen } for  pid=6034 comm="syz.3.1657" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  558.551030][  T411] usb 4-1: USB disconnect, device number 45
[  558.611213][ T4970] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  558.611213][  T316] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  558.791214][  T316] usb 5-1: Using ep0 maxpacket: 16
[  558.798686][  T316] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  558.807760][  T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.815797][  T316] usb 5-1: Product: syz
[  558.819978][  T316] usb 5-1: Manufacturer: syz
[  558.821212][ T4970] usb 2-1: Using ep0 maxpacket: 16
[  558.824626][  T316] usb 5-1: SerialNumber: syz
[  558.832660][ T4970] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  558.835176][  T316] usb 5-1: config 0 descriptor??
[  558.843689][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.849369][  T316] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  558.856625][ T4970] usb 2-1: Product: syz
[  558.864183][  T316] usb 5-1: Detected FT-X
[  558.868307][ T4970] usb 2-1: Manufacturer: syz
[  558.876922][ T4970] usb 2-1: SerialNumber: syz
[  558.882188][ T4970] usb 2-1: config 0 descriptor??
[  558.887984][ T4970] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  558.895775][ T4970] usb 2-1: Detected FT-X
[  559.551516][ T6066] syz.0.1674[6066] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  559.551599][ T6066] syz.0.1674[6066] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  560.986877][ T4970] ftdi_sio ttyUSB1: Unable to read latency timer: -71
[  561.021907][ T4970] ftdi_sio ttyUSB1: Unable to write latency timer: -71
[  561.029570][ T4970] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  561.045250][ T4970] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1
[  561.067489][ T4970] usb 2-1: USB disconnect, device number 48
[  561.090258][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  561.099257][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  561.106565][ T4970] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[  561.106902][  T316] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  561.126837][  T316] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  561.132748][ T4970] ftdi_sio 2-1:0.0: device disconnected
[  561.145723][  T316] usb 5-1: USB disconnect, device number 49
[  561.193428][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  561.242863][  T316] ftdi_sio 5-1:0.0: device disconnected
[  561.741226][ T4970] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  561.931216][ T4970] usb 2-1: Using ep0 maxpacket: 16
[  561.937638][ T4970] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  561.965405][ T4970] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  561.991335][ T4970] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  562.011768][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.037321][ T4970] usb 2-1: Product: syz
[  562.048779][ T4970] usb 2-1: Manufacturer: syz
[  562.061675][ T4970] usb 2-1: SerialNumber: syz
[  562.162615][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'.
[  562.183472][ T6093] bridge0: port 3(vlan2) entered blocking state
[  562.189754][ T6093] bridge0: port 3(vlan2) entered disabled state
[  564.535350][ T6107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6107 comm=syz.3.1679
[  564.548122][ T6107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6107 comm=syz.3.1679
[  564.901213][  T348] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  565.021228][  T471] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  565.211201][  T471] usb 4-1: Using ep0 maxpacket: 16
[  565.218574][  T471] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  565.227670][  T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.235679][  T471] usb 4-1: Product: syz
[  565.239851][  T471] usb 4-1: Manufacturer: syz
[  565.244457][  T471] usb 4-1: SerialNumber: syz
[  565.249417][  T471] usb 4-1: config 0 descriptor??
[  565.255134][  T471] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  565.262857][  T471] usb 4-1: Detected FT-X
[  565.341256][   T60] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  565.679690][  T316] usb 2-1: USB disconnect, device number 49
[  565.741215][   T60] usb 3-1: Using ep0 maxpacket: 8
[  565.747555][   T60] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  565.756563][   T60] usb 3-1: config 0 has an invalid interface number: 150 but max is 64
[  565.796328][   T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.806641][   T60] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[  565.815773][   T60] usb 3-1: config 0 has no interface number 0
[  565.821950][   T60] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  565.834938][   T60] usb 3-1: config 0 interface 150 has no altsetting 0
[  565.841865][   T60] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  565.850914][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.859591][   T60] usb 3-1: config 0 descriptor??
[  566.331770][   T60] usb 3-1: USB disconnect, device number 49
[  567.624038][  T471] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  567.638764][  T471] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  567.651400][  T471] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  567.668237][  T471] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  567.699028][  T471] usb 4-1: USB disconnect, device number 46
[  567.772574][  T471] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  567.796029][  T471] ftdi_sio 4-1:0.0: device disconnected
[  568.951231][  T348] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  569.089315][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'.
[  569.181245][  T348] usb 5-1: Using ep0 maxpacket: 8
[  569.188236][  T348] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  569.262223][ T6170] bridge0: port 3(vlan2) entered blocking state
[  569.284116][  T348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.409291][  T348] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  569.794275][  T348] usb 5-1: config 0 has no interface number 0
[  569.800621][  T348] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  569.828862][  T348] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  569.841284][ T6170] bridge0: port 3(vlan2) entered disabled state
[  569.870161][  T348] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  569.990883][  T348] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  570.011975][  T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.021346][  T348] usb 5-1: Product: syz
[  570.025550][  T348] usb 5-1: Manufacturer: syz
[  570.030155][  T348] usb 5-1: SerialNumber: syz
[  570.055951][  T348] usb 5-1: config 0 descriptor??
[  570.061919][ T6159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  570.082007][  T348] snd-usb-audio: probe of 5-1:0.151 failed with error -2
[  570.276464][  T348] usb 5-1: USB disconnect, device number 51
[  570.291248][ T4970] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  570.492282][ T4970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.512987][ T4970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.541140][ T4970] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  570.566529][ T4970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.571195][  T316] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  570.594077][ T4970] usb 2-1: config 0 descriptor??
[  571.992020][  T316] usb 3-1: Using ep0 maxpacket: 16
[  572.496796][  T316] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  572.511234][  T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.519520][  T316] usb 3-1: Product: syz
[  572.524116][  T316] usb 3-1: Manufacturer: syz
[  572.528727][  T316] usb 3-1: SerialNumber: syz
[  572.534080][  T316] usb 3-1: config 0 descriptor??
[  572.550175][  T316] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  572.567028][  T316] usb 3-1: Detected FT-X
[  572.839695][ T4970] pyra 0003:1E7D:2CF6.0008: unknown global tag 0xe
[  572.846315][ T4970] pyra 0003:1E7D:2CF6.0008: item 0 4 1 14 parsing failed
[  572.853576][ T4970] pyra 0003:1E7D:2CF6.0008: parse failed
[  572.859236][ T4970] pyra: probe of 0003:1E7D:2CF6.0008 failed with error -22
[  574.106277][  T411] usb 2-1: USB disconnect, device number 50
[  574.112401][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  574.126501][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  574.138420][  T316] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  574.193582][  T316] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  574.239554][  T316] usb 3-1: USB disconnect, device number 50
[  574.260404][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  574.283591][  T316] ftdi_sio 3-1:0.0: device disconnected
[  576.071328][  T316] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  576.977311][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'.
[  576.988398][ T6246] bridge0: port 3(vlan3) entered blocking state
[  576.994938][ T6246] bridge0: port 3(vlan3) entered disabled state
[  577.011210][  T316] usb 5-1: Using ep0 maxpacket: 8
[  577.017382][  T316] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  577.058550][  T316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.069884][  T316] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  577.079244][  T316] usb 5-1: config 0 has no interface number 0
[  577.086606][  T316] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  577.097719][  T316] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  577.131226][  T316] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  577.241770][  T316] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  577.250857][  T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.298817][  T316] usb 5-1: Product: syz
[  577.303189][  T316] usb 5-1: Manufacturer: syz
[  577.307865][  T316] usb 5-1: SerialNumber: syz
[  577.314190][  T316] usb 5-1: config 0 descriptor??
[  577.320006][ T6233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  577.506261][  T316] snd-usb-audio: probe of 5-1:0.151 failed with error -2
[  577.784355][  T348] usb 5-1: USB disconnect, device number 52
[  577.921294][  T316] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  578.401195][   T60] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  578.437899][   T28] audit: type=1400 audit(2000000298.040:385): avc:  denied  { setopt } for  pid=6274 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  578.521208][  T316] usb 4-1: Using ep0 maxpacket: 16
[  578.529719][  T316] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  578.546812][  T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.561183][  T316] usb 4-1: Product: syz
[  578.570224][  T316] usb 4-1: Manufacturer: syz
[  578.579921][  T316] usb 4-1: SerialNumber: syz
[  578.593504][  T316] usb 4-1: config 0 descriptor??
[  578.616795][  T316] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  578.643987][  T316] usb 4-1: Detected FT-X
[  578.771195][  T348] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  579.008215][  T348] usb 5-1: Using ep0 maxpacket: 8
[  579.015680][  T348] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  579.029801][  T348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.040027][  T348] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  579.049056][  T348] usb 5-1: config 0 has no interface number 0
[  579.055269][  T348] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  579.066037][  T348] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  579.112474][  T348] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  581.914707][  T348] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  581.969190][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  581.991270][  T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.060706][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  582.068037][  T348] usb 5-1: Product: syz
[  582.072752][  T348] usb 5-1: Manufacturer: syz
[  582.077431][  T316] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  582.734329][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'.
[  582.949560][ T6311] bridge0: port 3(vlan2) entered blocking state
[  582.949760][ T6311] bridge0: port 3(vlan2) entered disabled state
[  582.971901][  T348] usb 5-1: SerialNumber: syz
[  583.053831][  T348] usb 5-1: config 0 descriptor??
[  583.054729][  T348] usb 5-1: can't set config #0, error -71
[  583.055655][  T316] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  583.055940][  T348] usb 5-1: USB disconnect, device number 53
[  583.057300][  T316] usb 4-1: USB disconnect, device number 47
[  583.057924][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  583.058054][  T316] ftdi_sio 4-1:0.0: device disconnected
[  583.817486][ T6308] tty tty29: ldisc open failed (-12), clearing slot 28
[  583.827737][ T6327] device wireguard0 entered promiscuous mode
[  583.840849][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'.
[  583.852766][ T6330] bridge0: port 3(vlan2) entered blocking state
[  583.859101][ T6330] bridge0: port 3(vlan2) entered disabled state
[  583.861243][  T411] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  584.001625][ T6338] overlayfs: missing 'lowerdir'
[  584.007116][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1747'.
[  584.783578][   T60] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  585.471203][   T60] usb 4-1: Using ep0 maxpacket: 16
[  585.483769][   T60] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  585.494983][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.508248][   T60] usb 4-1: Product: syz
[  585.515533][   T60] usb 4-1: Manufacturer: syz
[  585.523232][   T60] usb 4-1: SerialNumber: syz
[  585.551550][   T60] usb 4-1: config 0 descriptor??
[  585.557489][   T60] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  585.569498][   T60] usb 4-1: Detected FT-X
[  585.763678][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1755'.
[  585.781762][ T6369] bridge0: port 3(vlan2) entered blocking state
[  585.788202][ T6369] bridge0: port 3(vlan2) entered disabled state
[  585.870993][   T28] audit: type=1400 audit(2000000305.470:386): avc:  denied  { shutdown } for  pid=6373 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  585.891001][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1756'.
[  585.901583][ T6375] device vlan0 entered promiscuous mode
[  586.387272][   T28] audit: type=1400 audit(2000000305.990:387): avc:  denied  { mount } for  pid=6384 comm="syz.2.1760" name="/" dev="ramfs" ino=40504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  587.654872][   T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  587.671560][   T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  587.678696][   T60] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  587.689460][   T60] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  587.707295][   T60] usb 4-1: USB disconnect, device number 48
[  587.722968][   T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  587.732539][   T60] ftdi_sio 4-1:0.0: device disconnected
[  588.761214][  T348] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  588.972618][  T348] usb 1-1: unable to get BOS descriptor or descriptor too short
[  588.982705][  T348] usb 1-1: not running at top speed; connect to a high speed hub
[  589.012997][  T348] usb 1-1: config 17 has an invalid interface number: 8 but max is 1
[  589.032127][  T348] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2
[  589.048558][  T348] usb 1-1: config 17 has no interface number 0
[  589.055017][  T348] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  589.066200][  T348] usb 1-1: config 17 interface 8 has no altsetting 0
[  589.074527][  T348] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  589.091459][  T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.116207][  T348] usb 1-1: Product: syz
[  589.124736][  T348] usb 1-1: Manufacturer: syz
[  589.134912][  T348] usb 1-1: SerialNumber: syz
[  589.171191][  T471] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  589.371798][  T471] usb 5-1: Using ep0 maxpacket: 16
[  589.383921][  T471] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  589.402299][  T471] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  589.418037][   T28] audit: type=1400 audit(2000000309.020:388): avc:  denied  { append } for  pid=6421 comm="syz.2.1773" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  589.419033][ T6422] 9pnet_fd: Insufficient options for proto=fd
[  589.459197][  T471] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  589.483513][  T471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.491999][  T471] usb 5-1: Product: syz
[  589.496650][  T471] usb 5-1: Manufacturer: syz
[  589.501678][  T471] usb 5-1: SerialNumber: syz
[  590.254192][ T6434] syz.3.1776[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  590.254589][ T6434] syz.3.1776[6434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  591.059253][  T348] usb 1-1: selecting invalid altsetting 0
[  591.238790][  T348] usb 1-1: USB disconnect, device number 48
[  592.127229][  T348] usb 5-1: USB disconnect, device number 54
[  592.206599][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'.
[  592.293869][ T6454] bridge0: port 3(vlan2) entered blocking state
[  592.307501][ T6454] bridge0: port 3(vlan2) entered disabled state
[  593.244150][ T6478] syz.3.1791 (6478): /proc/6476/oom_adj is deprecated, please use /proc/6476/oom_score_adj instead.
[  593.832150][  T471] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  594.511519][  T471] usb 4-1: Using ep0 maxpacket: 16
[  594.520205][  T471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.827796][  T471] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  594.882819][  T471] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  594.901308][  T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.920289][  T471] usb 4-1: config 0 descriptor??
[  594.925814][  T471] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  595.311195][  T348] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  595.395502][ T6512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.531210][  T348] usb 2-1: Using ep0 maxpacket: 16
[  595.541005][  T348] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  595.603348][  T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.612573][  T348] usb 2-1: Product: syz
[  595.617063][  T348] usb 2-1: Manufacturer: syz
[  595.622512][  T348] usb 2-1: SerialNumber: syz
[  595.878771][  T348] usb 2-1: config 0 descriptor??
[  595.915192][  T348] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  595.959392][  T348] usb 2-1: Detected FT-X
[  596.196833][  T471] usb 4-1: USB disconnect, device number 49
[  596.217218][ T6524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  596.856429][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'.
[  596.868776][ T6543] bridge0: port 3(vlan2) entered blocking state
[  596.875564][ T6543] bridge0: port 3(vlan2) entered disabled state
[  597.206181][   T28] audit: type=1400 audit(2000000316.810:389): avc:  denied  { name_bind } for  pid=6554 comm="syz.4.1816" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  598.390078][ T6563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  598.417486][  T348] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  598.427360][  T348] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  598.475211][  T348] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  598.616094][  T348] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  598.671296][  T348] usb 2-1: USB disconnect, device number 51
[  598.694053][  T348] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  598.733920][  T348] ftdi_sio 2-1:0.0: device disconnected
[  599.348222][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'.
[  599.359406][ T6584] bridge0: port 3(vlan0) entered blocking state
[  599.371639][ T6584] bridge0: port 3(vlan0) entered disabled state
[  600.771240][  T348] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  600.884587][ T6600] FAULT_INJECTION: forcing a failure.
[  600.884587][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.897674][ T6600] CPU: 0 PID: 6600 Comm: syz.4.1830 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  600.907501][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  600.917603][ T6600] Call Trace:
[  600.920897][ T6600]  <TASK>
[  600.923838][ T6600]  __dump_stack+0x21/0x24
[  600.928189][ T6600]  dump_stack_lvl+0xee/0x150
[  600.932793][ T6600]  ? __cfi_dump_stack_lvl+0x8/0x8
[  600.937836][ T6600]  dump_stack+0x15/0x24
[  600.942003][ T6600]  should_fail_ex+0x3d4/0x520
[  600.946692][ T6600]  should_fail+0xb/0x10
[  600.950855][ T6600]  should_fail_usercopy+0x1a/0x20
[  600.955892][ T6600]  _copy_to_user+0x1e/0x90
[  600.960318][ T6600]  simple_read_from_buffer+0xe9/0x160
[  600.965710][ T6600]  proc_fail_nth_read+0x19a/0x210
[  600.970751][ T6600]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  600.976395][ T6600]  ? security_file_permission+0x94/0xb0
[  600.981964][ T6600]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  600.987535][ T6600]  vfs_read+0x26e/0x8c0
[  600.991724][ T6600]  ? __cfi_vfs_read+0x10/0x10
[  600.996420][ T6600]  ? __kasan_check_write+0x14/0x20
[  601.001560][ T6600]  ? mutex_lock+0x8d/0x1a0
[  601.005999][ T6600]  ? __cfi_mutex_lock+0x10/0x10
[  601.010866][ T6600]  ? __fdget_pos+0x2cd/0x380
[  601.015480][ T6600]  ? ksys_read+0x71/0x240
[  601.019826][ T6600]  ksys_read+0x140/0x240
[  601.024081][ T6600]  ? __cfi_ksys_read+0x10/0x10
[  601.028858][ T6600]  ? debug_smp_processor_id+0x17/0x20
[  601.034239][ T6600]  __x64_sys_read+0x7b/0x90
[  601.038766][ T6600]  x64_sys_call+0x2f/0x9a0
[  601.043197][ T6600]  do_syscall_64+0x4c/0xa0
[  601.047624][ T6600]  ? clear_bhb_loop+0x15/0x70
[  601.052382][ T6600]  ? clear_bhb_loop+0x15/0x70
[  601.057070][ T6600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  601.062976][ T6600] RIP: 0033:0x7fc67298d37c
[  601.067400][ T6600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  601.087097][ T6600] RSP: 002b:00007fc6737bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  601.095537][ T6600] RAX: ffffffffffffffda RBX: 00007fc672bb6080 RCX: 00007fc67298d37c
[  601.103604][ T6600] RDX: 000000000000000f RSI: 00007fc6737bb0a0 RDI: 000000000000000a
[  601.111587][ T6600] RBP: 00007fc6737bb090 R08: 0000000000000000 R09: 0000000000000000
[  601.119589][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.127570][ T6600] R13: 0000000000000000 R14: 00007fc672bb6080 R15: 00007ffc6200db18
[  601.135558][ T6600]  </TASK>
[  601.201198][ T1106] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  601.361185][  T348] usb 2-1: Using ep0 maxpacket: 8
[  601.367205][  T348] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[  601.391188][ T1106] usb 3-1: Using ep0 maxpacket: 16
[  601.391188][  T348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.391212][  T348] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  601.397508][ T1106] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  601.421186][  T348] usb 2-1: config 0 has no interface number 0
[  601.445668][ T1106] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  601.451272][  T348] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  601.462536][ T1106] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  601.473335][  T348] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  601.484620][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.485611][  T348] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  601.511271][ T1106] usb 3-1: Product: syz
[  601.518955][ T1106] usb 3-1: Manufacturer: syz
[  601.525252][  T348] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  601.529035][ T1106] usb 3-1: SerialNumber: syz
[  601.536311][  T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.557257][  T348] usb 2-1: Product: syz
[  601.565699][  T348] usb 2-1: Manufacturer: syz
[  601.570428][  T348] usb 2-1: SerialNumber: syz
[  601.638336][  T348] usb 2-1: config 0 descriptor??
[  601.648408][ T6567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  601.661444][  T348] snd-usb-audio: probe of 2-1:0.151 failed with error -2
[  601.744863][  T348] usb 2-1: USB disconnect, device number 52
[  601.794176][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  601.808678][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  602.121225][   T60] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  602.651224][   T60] usb 4-1: Using ep0 maxpacket: 16
[  602.659163][   T60] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  602.668770][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.677048][   T60] usb 4-1: Product: syz
[  602.681534][   T60] usb 4-1: Manufacturer: syz
[  602.686211][   T60] usb 4-1: SerialNumber: syz
[  602.692207][   T60] usb 4-1: config 0 descriptor??
[  602.701555][   T60] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  602.709323][   T60] usb 4-1: Detected FT-X
[  604.554577][  T411] usb 3-1: USB disconnect, device number 53
[  604.732704][ T6652] FAULT_INJECTION: forcing a failure.
[  604.732704][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.774231][ T6652] CPU: 1 PID: 6652 Comm: syz.3.1846 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  604.784170][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  604.794243][ T6652] Call Trace:
[  604.797538][ T6652]  <TASK>
[  604.800490][ T6652]  __dump_stack+0x21/0x24
[  604.804839][ T6652]  dump_stack_lvl+0xee/0x150
[  604.809442][ T6652]  ? __cfi_dump_stack_lvl+0x8/0x8
[  604.814491][ T6652]  ? vfs_write+0x9d6/0xca0
[  604.818941][ T6652]  dump_stack+0x15/0x24
[  604.823129][ T6652]  should_fail_ex+0x3d4/0x520
[  604.827844][ T6652]  should_fail+0xb/0x10
[  604.832026][ T6652]  should_fail_usercopy+0x1a/0x20
[  604.837065][ T6652]  strncpy_from_user+0x24/0x2d0
[  604.841934][ T6652]  ? getname_flags+0xb9/0x500
[  604.846634][ T6652]  getname_flags+0xf4/0x500
[  604.851179][ T6652]  ? __kasan_check_read+0x11/0x20
[  604.856241][ T6652]  user_path_at_empty+0x30/0x1c0
[  604.861195][ T6652]  ? __x64_sys_umount+0xcc/0x160
[  604.866172][ T6652]  __x64_sys_umount+0xf1/0x160
[  604.870948][ T6652]  ? __cfi___x64_sys_umount+0x10/0x10
[  604.876373][ T6652]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  604.882457][ T6652]  x64_sys_call+0x86a/0x9a0
[  604.886974][ T6652]  do_syscall_64+0x4c/0xa0
[  604.891409][ T6652]  ? clear_bhb_loop+0x15/0x70
[  604.896097][ T6652]  ? clear_bhb_loop+0x15/0x70
[  604.900867][ T6652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  604.906778][ T6652] RIP: 0033:0x7fc81d18e969
[  604.911210][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.930917][ T6652] RSP: 002b:00007fc81e005038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  604.939438][ T6652] RAX: ffffffffffffffda RBX: 00007fc81d3b5fa0 RCX: 00007fc81d18e969
[  604.947422][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  604.955417][ T6652] RBP: 00007fc81e005090 R08: 0000000000000000 R09: 0000000000000000
[  604.963418][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.971407][ T6652] R13: 0000000000000000 R14: 00007fc81d3b5fa0 R15: 00007ffdfd4a0108
[  604.978434][   T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  604.979395][ T6652]  </TASK>
[  604.990224][   T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  604.997592][   T60] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  605.018401][ T6646] overlayfs: failed to resolve './file2': -2
[  605.027912][   T60] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  605.036830][   T60] usb 4-1: USB disconnect, device number 50
[  605.043526][   T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  605.056338][   T60] ftdi_sio 4-1:0.0: device disconnected
[  605.065921][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'.
[  605.083102][ T6662] bridge0: port 3(vlan2) entered blocking state
[  605.089446][ T6662] bridge0: port 3(vlan2) entered disabled state
[  605.974857][ T6682] FAULT_INJECTION: forcing a failure.
[  605.974857][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.145494][ T6682] CPU: 1 PID: 6682 Comm: syz.1.1854 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  606.155354][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  606.165521][ T6682] Call Trace:
[  606.168819][ T6682]  <TASK>
[  606.171757][ T6682]  __dump_stack+0x21/0x24
[  606.176110][ T6682]  dump_stack_lvl+0xee/0x150
[  606.180712][ T6682]  ? __cfi_dump_stack_lvl+0x8/0x8
[  606.185757][ T6682]  dump_stack+0x15/0x24
[  606.189931][ T6682]  should_fail_ex+0x3d4/0x520
[  606.194625][ T6682]  should_fail+0xb/0x10
[  606.198791][ T6682]  should_fail_usercopy+0x1a/0x20
[  606.203823][ T6682]  _copy_to_user+0x1e/0x90
[  606.208247][ T6682]  simple_read_from_buffer+0xe9/0x160
[  606.213656][ T6682]  proc_fail_nth_read+0x19a/0x210
[  606.218718][ T6682]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  606.224297][ T6682]  ? security_file_permission+0x94/0xb0
[  606.229872][ T6682]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  606.235466][ T6682]  vfs_read+0x26e/0x8c0
[  606.239664][ T6682]  ? __cfi_vfs_read+0x10/0x10
[  606.244364][ T6682]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[  606.250463][ T6682]  ? irqentry_exit+0x37/0x40
[  606.255085][ T6682]  ? sysvec_reschedule_ipi+0x78/0x80
[  606.260443][ T6682]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  606.266102][ T6682]  ? ksys_read+0x89/0x240
[  606.270460][ T6682]  ksys_read+0x140/0x240
[  606.274719][ T6682]  ? __cfi_ksys_read+0x10/0x10
[  606.279513][ T6682]  ? fpregs_restore_userregs+0x128/0x260
[  606.285155][ T6682]  __x64_sys_read+0x7b/0x90
[  606.289672][ T6682]  x64_sys_call+0x2f/0x9a0
[  606.294117][ T6682]  do_syscall_64+0x4c/0xa0
[  606.298645][ T6682]  ? clear_bhb_loop+0x15/0x70
[  606.303419][ T6682]  ? clear_bhb_loop+0x15/0x70
[  606.308113][ T6682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  606.314024][ T6682] RIP: 0033:0x7fc80c18d37c
[  606.318460][ T6682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  606.338083][ T6682] RSP: 002b:00007fc80d09f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  606.346519][ T6682] RAX: ffffffffffffffda RBX: 00007fc80c3b5fa0 RCX: 00007fc80c18d37c
[  606.354515][ T6682] RDX: 000000000000000f RSI: 00007fc80d09f0a0 RDI: 0000000000000003
[  606.362502][ T6682] RBP: 00007fc80d09f090 R08: 0000000000000000 R09: 0000000000000000
[  606.370509][ T6682] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  606.378496][ T6682] R13: 0000000000000001 R14: 00007fc80c3b5fa0 R15: 00007ffff6928678
[  606.386492][ T6682]  </TASK>
[  606.549334][   T28] audit: type=1400 audit(2000000326.150:390): avc:  denied  { read } for  pid=6687 comm="syz.3.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  607.481249][  T348] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  607.741249][  T348] usb 4-1: Using ep0 maxpacket: 8
[  607.747431][  T348] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  607.782097][  T348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.829095][  T348] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  607.871308][  T348] usb 4-1: config 0 has no interface number 0
[  607.893828][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  607.967544][  T332] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  608.005505][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  608.100332][  T348] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  608.267036][  T348] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  608.370291][  T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.460776][  T348] usb 4-1: Product: syz
[  608.508304][  T348] usb 4-1: Manufacturer: syz
[  608.561566][  T348] usb 4-1: SerialNumber: syz
[  609.047320][  T348] usb 4-1: config 0 descriptor??
[  609.071460][ T6713] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  609.080761][  T348] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  609.308715][   T39] usb 4-1: USB disconnect, device number 51
[  610.419964][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1868'.
[  610.573527][ T6734] bridge0: port 3(vlan3) entered blocking state
[  610.821614][ T6734] bridge0: port 3(vlan3) entered disabled state
[  611.570169][   T28] audit: type=1400 audit(2000000331.170:391): avc:  granted  { setsecparam } for  pid=6744 comm="syz.0.1870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  611.651659][   T28] audit: type=1400 audit(2000000331.260:392): avc:  granted  { setsecparam } for  pid=6744 comm="syz.0.1870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  611.760368][  T332] usb 2-1: device not accepting address 53, error -71
[  613.002232][   T39] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  613.201246][   T39] usb 1-1: Using ep0 maxpacket: 16
[  613.210398][   T39] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  613.353061][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.361502][   T39] usb 1-1: Product: syz
[  613.366045][   T39] usb 1-1: Manufacturer: syz
[  613.370715][   T39] usb 1-1: SerialNumber: syz
[  613.380105][   T39] usb 1-1: config 0 descriptor??
[  613.389105][   T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  613.397157][   T39] usb 1-1: Detected FT-X
[  614.122048][  T348] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  614.335282][ T6793] syz.4.1885 uses obsolete (PF_INET,SOCK_PACKET)
[  614.361199][  T348] usb 4-1: Using ep0 maxpacket: 8
[  614.367604][  T348] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  614.376145][  T348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.391099][  T348] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  614.609543][  T348] usb 4-1: config 0 has no interface number 0
[  614.615971][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  614.626865][  T348] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  614.637715][  T348] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  614.672671][  T348] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  614.684872][  T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.699016][  T348] usb 4-1: Product: syz
[  614.703958][  T348] usb 4-1: Manufacturer: syz
[  614.708607][  T348] usb 4-1: SerialNumber: syz
[  614.713826][  T348] usb 4-1: config 0 descriptor??
[  614.719017][ T6776] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  614.727489][  T348] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  614.932761][  T348] usb 4-1: USB disconnect, device number 52
[  615.450077][   T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  615.479270][   T28] audit: type=1400 audit(2000000335.075:393): avc:  denied  { search } for  pid=6806 comm="syz.0.1888" name="/" dev="configfs" ino=14575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  615.506806][   T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  615.530618][   T39] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  615.531571][   T28] audit: type=1400 audit(2000000335.075:394): avc:  denied  { mounton } for  pid=6806 comm="syz.0.1888" path="/" dev="configfs" ino=14575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  615.550814][   T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  615.597794][   T39] usb 1-1: USB disconnect, device number 49
[  615.601389][   T28] audit: type=1400 audit(2000000335.135:395): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  615.611488][   T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  615.691796][   T39] ftdi_sio 1-1:0.0: device disconnected
[  616.730864][ T6835] syz.1.1897[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  616.731206][ T6835] syz.1.1897[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  617.021356][  T316] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  617.291281][  T316] usb 1-1: Using ep0 maxpacket: 16
[  617.299552][  T316] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  617.344964][  T316] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  617.391277][    T6] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  617.392297][  T316] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  617.415688][  T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.424010][  T316] usb 1-1: Product: syz
[  617.428291][  T316] usb 1-1: Manufacturer: syz
[  617.432994][  T316] usb 1-1: SerialNumber: syz
[  617.441242][   T39] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  617.621293][   T39] usb 3-1: Using ep0 maxpacket: 16
[  617.629730][   T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  617.694288][   T39] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  617.732289][   T39] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  617.765753][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.796622][   T39] usb 3-1: Product: syz
[  617.812889][   T39] usb 3-1: Manufacturer: syz
[  617.817689][   T39] usb 3-1: SerialNumber: syz
[  617.825584][   T39] usb 3-1: config 0 descriptor??
[  617.911176][    T6] usb 4-1: Using ep0 maxpacket: 8
[  617.917421][    T6] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  617.925872][    T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  617.936163][    T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  617.945273][    T6] usb 4-1: config 0 has no interface number 0
[  617.951509][    T6] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  617.962361][    T6] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  617.973318][    T6] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  617.992959][    T6] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  618.001174][  T316] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  618.002070][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.017934][    T6] usb 4-1: Product: syz
[  618.022253][    T6] usb 4-1: Manufacturer: syz
[  618.026886][    T6] usb 4-1: SerialNumber: syz
[  618.032299][    T6] usb 4-1: config 0 descriptor??
[  618.037651][ T6809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  618.046985][   T39] usb 3-1: USB disconnect, device number 54
[  618.055408][    T6] snd-usb-audio: probe of 4-1:0.151 failed with error -2
[  618.181217][  T316] usb 5-1: Using ep0 maxpacket: 16
[  618.188811][  T316] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  618.198005][  T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.206073][  T316] usb 5-1: Product: syz
[  618.210274][  T316] usb 5-1: Manufacturer: syz
[  618.214987][  T316] usb 5-1: SerialNumber: syz
[  618.220038][  T316] usb 5-1: config 0 descriptor??
[  618.225772][  T316] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  618.233446][  T316] usb 5-1: Detected FT-X
[  618.268337][    T6] usb 4-1: USB disconnect, device number 53
[  618.841191][  T348] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  619.032367][  T348] usb 3-1: config index 0 descriptor too short (expected 42770, got 18)
[  619.041040][  T348] usb 3-1: config 0 has no interfaces?
[  619.048644][  T348] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  619.058030][  T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.066161][  T348] usb 3-1: Product: syz
[  619.070602][  T348] usb 3-1: Manufacturer: syz
[  619.075345][  T348] usb 3-1: SerialNumber: syz
[  619.081389][  T348] usb 3-1: config 0 descriptor??
[  619.288816][   T60] usb 3-1: USB disconnect, device number 55
[  619.550542][  T348] usb 1-1: USB disconnect, device number 50
[  620.013558][  T316] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  620.022736][  T316] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  620.029978][  T316] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  620.044749][  T316] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  620.070180][  T316] usb 5-1: USB disconnect, device number 55
[  620.081435][ T6868] syz.4.1908[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  620.081514][ T6868] syz.4.1908[6868] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  620.094118][  T316] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  620.115309][  T316] ftdi_sio 5-1:0.0: device disconnected
[  621.325222][ T6881] device xfrm0 entered promiscuous mode
[  621.391867][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'.
[  621.416339][ T6883] bridge0: port 3(vlan3) entered blocking state
[  621.851525][ T6883] bridge0: port 3(vlan3) entered disabled state
[  622.009769][ T6893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.070815][ T6894] syz.2.1916[6894] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  622.071105][ T6894] syz.2.1916[6894] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  623.221251][   T28] audit: type=1400 audit(2000000342.755:396): avc:  denied  { append } for  pid=6887 comm="syz.0.1915" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  623.700354][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'.
[  623.721185][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'.
[  623.961201][  T348] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  624.151225][  T348] usb 4-1: Using ep0 maxpacket: 16
[  624.159973][  T348] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  624.180401][  T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.196766][  T348] usb 4-1: Product: syz
[  624.204071][  T348] usb 4-1: Manufacturer: syz
[  624.214132][  T348] usb 4-1: SerialNumber: syz
[  624.224105][  T348] usb 4-1: config 0 descriptor??
[  624.234564][  T348] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  624.251019][  T348] usb 4-1: Detected FT-X
[  624.390461][   T28] audit: type=1400 audit(2000000343.985:397): avc:  denied  { read } for  pid=6930 comm="syz.1.1928" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  624.433025][   T28] audit: type=1400 audit(2000000343.985:398): avc:  denied  { open } for  pid=6930 comm="syz.1.1928" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  624.476451][   T28] audit: type=1400 audit(2000000344.015:399): avc:  denied  { ioctl } for  pid=6930 comm="syz.1.1928" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  625.151257][  T316] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  625.187213][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  625.196907][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'.
[  625.287971][ T6953] overlayfs: failed to resolve './file0': -2
[  625.294228][   T28] audit: type=1400 audit(2000000344.885:400): avc:  denied  { name_bind } for  pid=6945 comm="syz.2.1934" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  625.534730][  T316] usb 5-1: unable to get BOS descriptor or descriptor too short
[  625.580176][  T316] usb 5-1: not running at top speed; connect to a high speed hub
[  625.628373][  T316] usb 5-1: config 17 has an invalid interface number: 8 but max is 1
[  625.678262][  T316] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2
[  625.713276][  T316] usb 5-1: config 17 has no interface number 0
[  625.719933][  T316] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  625.732752][  T316] usb 5-1: config 17 interface 8 has no altsetting 0
[  625.748260][  T316] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  625.758145][  T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.789203][  T316] usb 5-1: Product: syz
[  625.808450][  T316] usb 5-1: Manufacturer: syz
[  625.832692][  T316] usb 5-1: SerialNumber: syz
[  626.127626][  T348] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  626.151683][  T348] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  626.164756][  T316] usb 5-1: selecting invalid altsetting 0
[  626.192503][  T316] usb 5-1: USB disconnect, device number 56
[  626.201514][  T348] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  626.231306][  T348] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  626.260201][  T348] usb 4-1: USB disconnect, device number 54
[  626.287205][  T348] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  626.381328][  T348] ftdi_sio 4-1:0.0: device disconnected
[  627.643041][ T6985] syz.0.1943[6985] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  627.643368][ T6985] syz.0.1943[6985] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  628.624593][ T6987] FAULT_INJECTION: forcing a failure.
[  628.624593][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.649002][ T6987] CPU: 0 PID: 6987 Comm: syz.1.1944 Not tainted 6.1.138-syzkaller-00049-g5b87067cdd87 #0
[  628.658820][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  628.668881][ T6987] Call Trace:
[  628.672196][ T6987]  <TASK>
[  628.675135][ T6987]  __dump_stack+0x21/0x24
[  628.679497][ T6987]  dump_stack_lvl+0xee/0x150
[  628.684190][ T6987]  ? __cfi_dump_stack_lvl+0x8/0x8
[  628.689227][ T6987]  ? memcpy+0x56/0x70
[  628.693222][ T6987]  dump_stack+0x15/0x24
[  628.697390][ T6987]  should_fail_ex+0x3d4/0x520
[  628.702080][ T6987]  should_fail+0xb/0x10
[  628.706245][ T6987]  should_fail_usercopy+0x1a/0x20
[  628.711283][ T6987]  strncpy_from_user+0x24/0x2d0
[  628.716152][ T6987]  bpf_prog_load+0x1bb/0x15a0
[  628.720840][ T6987]  ? map_freeze+0x390/0x390
[  628.725365][ T6987]  ? selinux_bpf+0xc7/0xf0
[  628.729803][ T6987]  ? security_bpf+0x93/0xb0
[  628.734352][ T6987]  __sys_bpf+0x504/0x780
[  628.738720][ T6987]  ? bpf_link_show_fdinfo+0x320/0x320
[  628.744124][ T6987]  ? __cfi_ksys_write+0x10/0x10
[  628.749001][ T6987]  ? debug_smp_processor_id+0x17/0x20
[  628.754392][ T6987]  __x64_sys_bpf+0x7c/0x90
[  628.758827][ T6987]  x64_sys_call+0x488/0x9a0
[  628.763352][ T6987]  do_syscall_64+0x4c/0xa0
[  628.767783][ T6987]  ? clear_bhb_loop+0x15/0x70
[  628.772471][ T6987]  ? clear_bhb_loop+0x15/0x70
[  628.777243][ T6987]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.783152][ T6987] RIP: 0033:0x7fc80c18e969
[  628.787591][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  628.807207][ T6987] RSP: 002b:00007fc80d05d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  628.815631][ T6987] RAX: ffffffffffffffda RBX: 00007fc80c3b6160 RCX: 00007fc80c18e969
[  628.823625][ T6987] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 0000000000000005
[  628.831621][ T6987] RBP: 00007fc80d05d090 R08: 0000000000000000 R09: 0000000000000000
[  628.839610][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.847614][ T6987] R13: 0000000000000000 R14: 00007fc80c3b6160 R15: 00007ffff6928678
[  628.855598][ T6987]  </TASK>
[  632.801204][ T7008] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  633.071316][ T7008] usb 2-1: Using ep0 maxpacket: 16
[  633.081979][ T7008] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  633.091698][ T7008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.099850][ T7008] usb 2-1: Product: syz
[  633.105905][ T7008] usb 2-1: Manufacturer: syz
[  633.110672][ T7008] usb 2-1: SerialNumber: syz
[  633.119702][ T7008] usb 2-1: config 0 descriptor??
[  633.129263][ T7008] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  633.139086][ T7008] usb 2-1: Detected FT-X
[  633.161287][    T6] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  633.342541][    T6] usb 4-1: unable to get BOS descriptor or descriptor too short
[  633.350604][    T6] usb 4-1: not running at top speed; connect to a high speed hub
[  633.359108][    T6] usb 4-1: config 17 has an invalid interface number: 8 but max is 1
[  633.367315][    T6] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2
[  633.376340][    T6] usb 4-1: config 17 has no interface number 0
[  633.382583][    T6] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  633.393590][    T6] usb 4-1: config 17 interface 8 has no altsetting 0
[  633.402006][    T6] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  633.411078][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.419133][    T6] usb 4-1: Product: syz
[  633.423372][    T6] usb 4-1: Manufacturer: syz
[  633.427985][    T6] usb 4-1: SerialNumber: syz
[  633.541196][  T332] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  633.568355][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1959'.
[  633.582550][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'.
[  633.648250][    T6] usb 4-1: selecting invalid altsetting 0
[  633.693937][    T6] usb 4-1: USB disconnect, device number 55
[  633.721198][  T332] usb 5-1: Using ep0 maxpacket: 16
[  633.728811][  T332] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  633.739224][  T332] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  633.762089][  T332] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.4c
[  633.803777][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  858.781067][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 225s!
[  858.789994][    C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 224s!
[  858.798904][    C0] Showing busy workqueues and worker pools:
[  858.804816][    C0] workqueue events: flags=0x0
[  858.809491][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  858.809533][    C0]     pending: kfree_rcu_monitor, key_garbage_collector
[  858.809583][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  858.809618][    C0]     pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker
[  858.809686][    C0] workqueue events_long: flags=0x0
[  858.846576][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  858.846626][    C0]     pending: br_fdb_cleanup, br_fdb_cleanup
[  858.846665][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  858.846699][    C0]     pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup
[  858.846753][    C0] workqueue events_unbound: flags=0x2
[  858.881595][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  858.881633][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  858.881673][    C0] workqueue events_power_efficient: flags=0x80
[  858.902686][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8
[  858.902728][    C0]     pending: neigh_managed_work, neigh_managed_work, wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, reg_check_chans_work, gc_worker
[  858.902939][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  858.902974][    C0]     pending: check_lifetime
[  858.902997][    C0] workqueue rcu_gp: flags=0x8
[  858.943284][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  858.943332][    C0]     pending: srcu_invoke_callbacks
[  858.943363][    C0] workqueue mm_percpu_wq: flags=0x8
[  858.961480][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  858.961526][    C0]     pending: vmstat_update
[  858.961553][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  858.961587][    C0]     pending: vmstat_update
[  858.961615][    C0] workqueue writeback: flags=0x4a
[  858.991200][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  858.991248][    C0]     pending: wb_workfn
[  858.991276][    C0] workqueue usb_hub_wq: flags=0x4
[  859.007839][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  859.007891][    C0]     in-flight: 7008:hub_event hub_event
[  859.007948][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  859.007983][    C0]     in-flight: 332:hub_event hub_event, 6:hub_event hub_event
[  859.008190][    C0] workqueue dm_bufio_cache: flags=0x8
[  859.042354][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.042404][    C0]     pending: work_fn
[  859.042441][    C0] workqueue ipv6_addrconf: flags=0x40008
[  859.059888][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5
[  859.059938][    C0]     pending: addrconf_verify_work
[  859.059969][    C0]     inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
[  859.060027][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3
[  859.060064][    C0]     pending: addrconf_verify_work
[  859.060087][    C0]     inactive: addrconf_verify_work
[  859.060118][    C0] workqueue wg-kex-wg0: flags=0x6
[  859.104956][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  859.104993][    C0]     pending: wg_packet_handshake_send_worker
[  859.105029][    C0] workqueue wg-crypt-wg0: flags=0x28
[  859.123705][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.123755][    C0]     pending: wg_packet_encrypt_worker
[  859.123795][    C0] workqueue wg-kex-wg1: flags=0x6
[  859.142415][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  859.142469][    C0]     pending: wg_packet_handshake_send_worker
[  859.142506][    C0] workqueue wg-crypt-wg1: flags=0x28
[  859.161160][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.161205][    C0]     pending: wg_packet_encrypt_worker
[  859.161240][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.161274][    C0]     pending: wg_packet_encrypt_worker
[  859.161305][    C0] workqueue wg-kex-wg2: flags=0x6
[  859.193020][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  859.193059][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.193123][    C0] workqueue wg-kex-wg0: flags=0x6
[  859.214428][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  859.214488][    C0]     pending: wg_packet_handshake_send_worker
[  859.214527][    C0] workqueue wg-crypt-wg0: flags=0x28
[  859.233316][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.233368][    C0]     pending: wg_packet_encrypt_worker
[  859.233406][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.233439][    C0]     pending: wg_packet_encrypt_worker
[  859.233471][    C0] workqueue wg-crypt-wg1: flags=0x28
[  859.265153][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.265203][    C0]     pending: wg_packet_encrypt_worker
[  859.265239][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.265273][    C0]     pending: wg_packet_encrypt_worker
[  859.265305][    C0] workqueue wg-crypt-wg2: flags=0x28
[  859.296922][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.296963][    C0]     pending: wg_packet_encrypt_worker
[  859.296996][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.297029][    C0]     pending: wg_packet_encrypt_worker
[  859.297060][    C0] workqueue wg-kex-wg0: flags=0x6
[  859.328796][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5
[  859.328833][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.328895][    C0] workqueue wg-kex-wg0: flags=0x6
[  859.353110][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  859.353154][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.353208][    C0] workqueue wg-crypt-wg0: flags=0x28
[  859.375254][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.375307][    C0]     pending: wg_packet_encrypt_worker
[  859.375347][    C0] workqueue wg-kex-wg1: flags=0x6
[  859.393606][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  859.393651][    C0]     pending: wg_packet_handshake_send_worker
[  859.393689][    C0] workqueue wg-crypt-wg1: flags=0x28
[  859.412429][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.412470][    C0]     pending: wg_packet_encrypt_worker
[  859.412505][    C0] workqueue wg-kex-wg1: flags=0x6
[  859.430710][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  859.430747][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.430820][    C0] workqueue wg-kex-wg0: flags=0x6
[  859.452345][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  859.452383][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.452437][    C0] workqueue wg-crypt-wg0: flags=0x28
[  859.474104][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.474154][    C0]     pending: wg_packet_encrypt_worker
[  859.474195][    C0] workqueue wg-kex-wg1: flags=0x6
[  859.492417][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  859.492456][    C0]     pending: wg_packet_handshake_send_worker
[  859.492488][    C0] workqueue wg-crypt-wg1: flags=0x28
[  859.511135][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  859.511176][    C0]     pending: wg_packet_encrypt_worker
[  859.511209][    C0] workqueue wg-kex-wg2: flags=0x6
[  859.529543][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  859.529579][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  859.529637][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=225s workers=5 idle: 60 1106 4970
[  859.529693][    C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=225s workers=9 idle: 316 24 348 222 411 39 1161 471