last executing test programs:

8m41.749439479s ago: executing program 32 (id=1046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="5001000000000000feffffffffffffff0300000000000000000000000000000001040000000000000000000000000000c05dba3a0400000002000000000000000000000000000000fb0400000000000004000000000000000000000000000000040000000000000000000000040000000000000000a0000004000002", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000000fbffffffffffffff04000000800000002e2e"], 0x0, 0x0, 0x0})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2058)
chown(&(0x7f0000002180)='./file0\x00', r5, r6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="9db6dcfce1577fb2928e233280e26a0de4cd53ec96824d93d05cb0637238369daf15b77869", 0x25}, {&(0x7f00000003c0)="04b41479b7c1d16e13bc694b4f090866d479b20cc6d7a4d59ef74718c0e8afd4738e6388fd882f70c3356deda373d422ed808c15c3b73b48bb827650f0ec93f335b3574158b3254d520922feab508863c7f16d2d197273ece2be1bd55c2ef961dda109c0f37695bf18a90f", 0x6b}, {&(0x7f0000000580)="cfe954874d33978f8a83994524cf12a1036289e16850eb838a8a3ae1dafd7a0e076eae9d789493484c0da85ddf059239fd6d97d8571f3e6196b802be6477cefba6b3839c50bf4c1c4536705495e501e5d9e13394b989689761ed1a53d0fe5bf3f97cdf38937f45e2b575f084105c7df0afd1b24eedcb13a8d5323eba8afde8a877c80c15c345cfcd10d6c9eabe9db102b03714996f113282c1945859dc64fc8b4679d9220855fe92a71ff3", 0xab}, {&(0x7f0000000500)="62c4596ef795565a6e95e12bc8be9709214c8e1494d0cd763043d3ff9c9d9f036e3b4f4ecb", 0x25}, {&(0x7f0000000640)="c08ff3b24e365421fedd2276f79ec599e34c2ca552a7efc05da71676d57e0d7926202e9f276e55f04a262a9a53e5b2986731091dd12c68c1587d7ba1e30913cdf50f4080a73a95f58b77696bc0061fbfcc8db13b9a314be9401e82776e891509e629ff627b2f4294a0dcec3a97f2229c79ef286931d8acb425a989a5896c4e33b4753f87e7b185ecef82268139bec8eb5f", 0x91}, {&(0x7f0000000700)="67250bbd", 0x4}], 0x6, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000b00)="57a8fb52b3d9a0633a2a188cf0b9ea0b4eadcf24e1149c417fae0fa4cd23b4ccd7f980c229204a864f5c45b95d53058e9018b00b8c9585c9597ae2cbc7c187a326f0433d95a575067935bdc8e8da8cf6c4f04c8ce9367a1a562b0d138ed915208ed1f2fef0c41d1d07896b2115b216762dbd4126d859e3fc8006136ceb13ff35d5fc9e901fb92839a7e39b6b0bc432cda5371518fb1b55ad4df756df2de246ef9258d3e754c536f6b8ddadb955dc9986eb177fcba93d0f85cc0bf9ad3b1bf2a36d7a9759272a1ff5293f5c89146ad0c080b7b497f024cff89fce8a0e7100", 0xde}, {&(0x7f0000000980)="04046ad1534b35bfe0854babef1e1ac0815ff9bd4a8652d4eb3abb7e1164e82800f5d4b6d4f8b3a133fa92b541625207c434ae012387ae544ef5a02acae085bcf39a96847756b0f5e29fca1aacf357203c1067b62135a8a258473fa74aa89722cbb1276416c96ba52ad4924e3b6adb", 0x6f}, {&(0x7f00000010c0)="d7072c823a1ec9d1fe135c7ee659910204e519bf8578d25b1045802666d1337d50756274b64988d2b516f3f13880ed123d25b3c18241b8fb203d6b67f88a1e104003b1977ade36409699aa343d6cc2f0a0bc592c63a621bcc0c8792017c23794d112ef80b29f7747a991d472b7306b866600c5933205e75a50b3e759a76c41c1de2f39f4144540cdf2cf5d2efacc8dca044e6162e68b0672a95982b722a12ee50badc7c1f6ad96dd079e41882535d2cb8a3f8c3e5e40bf1aae86f0f653180d46b4f5dcdb20e222f3916239f3ea25d0b3e557f5cadb1616f0ae05286b7cd2111f5912d09f6314b2dfb24288e262d650079246975a35b3b673a3186ea441fd01e613073acf4a809608b933f81ac283365f50b0a890bd653656c1b7fe67cd9329b5e418815a3e3388772833fa4dfd5f52f5a770bfe9c3138f412f091c81815030f99fd3aa7c1bfd2384c3e2c50f8ee8ce5ca6e579b811b09bfe287125a1f82eb94ed9d63674828fb3354b99dd9aafe8b5368595300d873c0a995d5ba84aa07571915fbfe4c1133818544563b31d2fa40ad1e19757729cf8e1abd9b6022ad432e1a6c520a40eb0dee2e5a08ba072497a75163ad1e4be79d45a5032e337c8743cb49d75c84f110a693a6d55c9789364ceb0676ede15d205603eac08fb33f973a1da67a40a26ee69a9a02561af9f85db80d77cf0ad5d065f449afe8ba261a2a3e4364ac4dccdea2e20ed71f2b47d56cc42f3d69de800ed717e7a29bdfb964b2186b8e561733756e40b5ad6808c978323c02dbf395b6e325021d35291d527516e396fbaacc9a6688b1c5acee879b1b4a44c02585eb59c162246d2b6d2ff4ca14a9a85a564d268b3d6da81991185ef0cfb8931bd34f395bced55eac37bcbc0436be26606abe80ae7570f0ec0af504ce0cb8d87aeb712816603cc343992b1cbaca74eb44bd5922fd250d238784583ea4096962282621e4c07b4d19ba2ad19acb835810f46292952965df01c03e20755eff8dfc31b9d3a5b8117f2c48a213c231f00a58f8e96a7d22918452d317b652a2ec5016bdeb6056c0d796f1c4a7ee466c1270a66e329b76e54b3f621a19ccd2b86d775afc18a511b2b2aee3a9bf8e2abd16fda88a7cb79c320cf94720b8cf6ee8171f23a9e3c563d136dfbfb08dca8f8145635e087d20afbd2460301869519b78a27be4101004323db1c418ffee7561ef3b1a532155f9885e796b84e8be9ca190e2580f9d5560c6226180c31435110edbc9f243f15d6b64ed4f076cd12f77519bea3bed80e776bd1cefae6513ec9cbd1cd31fb872681618f9d642750f71b57c1599575ab5a314e4a4182ecd061e96b25e36f4fe5fc589993cf976807e63c8bb35ca0eab794dc5937dad267897a5f8a52f565697022da81fc6fba2f460aeed55953c40b777126ed196f21faf106e87e8ffe61a7a731fe5a141ceb5b55bcd61f56b03c9c20a0b40e76e8290d475385d4959fc28c132489d9622695655b8f657075109f1f41f685e04cc8800d407a07bff061234b5adea86345a7bc0e205db87b2ed3952db1d0352f105b16e1018c29f6bc5b6f5e0905ddcd2d52fb09b381b365adea36a47bd0fe6085f76511e20b8780163b95dd665a498e63473273e3b2cfe894117dcde4797044e89ef5c4c95ee71ec787f7127885d71dd35cea55b439b77b7f761a3454e6dc1e78b1e336dd22f668f80bf41a1b0f2c9a02201c0385e2e6d977206da00d19f0ee558125812b82b2fccf1f3e07f1637ce6408eeae12739caab6b1d83ed1827355ce8ff3bee69d8bcb98101a278574c0355bf6a415a73368ad3be269583290a504b62c9ee87fe02d683d78c314be249ca07a4d3d84611295adbc48e7f85a7b15fe45b791859ef7ccc899076b62fadd79e580a650eae3fbcdf31eeb5628f2a10e31470be17d8589f411e3d56ddfb10db88a484c35137829d59547d94d11e1f9357f9f9584036a5ab635f361cc5be4b464ac280558cd71c6e017501872dcf7ba2b187a1d0422d7bbf5bc8fdea465d55b6836c172fa1f74a5f789fa9ee45391479c8fbf9f09d7a539c90d66f311b4d4ab37e62060f6a31c2c7ed0f771d8beef0711b8ec01b2d4d47d6f3d3961744adb5e3cf3ec245f7f29422f8cbbb72de171568ce4db43b753b1ff1049c799d190b149a89c4f94d268ce684307d1316764dd3889b4e97425612bb5ca1b0b62e767a8082a4e31bf931f56e3b8e89df7877e9dfbea301e1773a61c070b3add129f8f0a882335c5315a95f64dd5126dd55812da0d3c5b7c72c5fffb5273a6f304f5d0ac0286bf7315c1a6c952fbe98cf79f2fe9bc5e9fe8cadd1988b0872eff44020e443a86cb91f8ebe9cc50b1cd96fd63b07b5d127968a0163cc52242df2d724d287ad2306f62e5dde638b343b899b9218f72e8ae693c72d10a283745534fb184d4f3ef247f64df5fa51fc06013dc1a5d5971d4813045a6b204d3c4a47034b0cfbf24839ff7ed6f28e10ff17bf87e513e529262627b8dcb809c1517c41bf53b285579ced86a2aa9f902a75d76d841293d16df1f0b90276dc8403afdced28880730915c00229e6fb346dcf5a23619d024ce83947071fa65417a5d7821385da91e80684c5ca5e490cc59629a8a1c1fca55171017ddde1c5b8f0312372097d2277fcdd87aa42985210986d23540faf995c6d286151074cdc11fe3196f6bb2962401c4d54865cd8ed164f3e3c2e6e3377d73c6c795a38cc73338e8ad189295ac4f2505e9df532931fc98b0a28831561ca83ab3fc98913876b545363702cc5378df798d29d3b62e6a5719659340ddc9d3c9cc376ce295eb404f8e2b9ffc6065375a866421dd670a9459e6433dbb3ec0488b78db7694fac0a04e18200ad05adfbc722b713adfa9923ee77daf5420ca1cebae99ec99d065e97f92481ae3c605addcb52ee11b207053bf11e10e47ca9dec644614f52103788fe3ba9c008db3e976cc3015d1846663af333f5d330f8070ecf3d0873596d01aaa5a1f050778539f2796bce3602baba1a2d869821ce997679eaae99ecda16116f3c0c7781c412fd6f0b1270b415309b9f48fc6f2145154fdf5920e9beaa494eb67ae060cc6b3547693b46076636e4ac8ffe0dcdd974c8b6ab87201d152a6bca50bf15d5b9766cac3a0876b05457325038969d2d0b2cc66c16422f1d27828eebcb5ba1729b2f09bb2cdbd13e9b07b144e4f0bce0d2af1ab183ad50e958e1af305fe9596bdb29562e930976c5e00899a9af1effe2d7cab3e0be47b4f8b239fc4c53d596cf72033c976ff1703fbe82a8b175c36758c9916eac7436e828bc5fe633474ad2b322e4b9112a1377041063e5b02f765d649ad00a572715be0153ef7aa8e1c8bec491e858bc1303fa656ded18356bd54faaf2f7d50c024392a8e50521c64a319b5ee86cbc6849027b11a302aa183b462740e5412e365efc0d5f68fd5c47ab359d0414f8c728d5b9fb08e03370039cff77b5f6e613e70955e0977867b4c29e45b70e0f0cf6d223de0f2cfaacd4be62a2dfbe42ecda6c4bc364d3e8b5a849ad04a88b6ea213719578823b5a7c08ebb4b871e0b0c74d67ee94b31d9b1461ea1168343b7bb438340c58afa137e6e6e1c36fa2e475f3bc7b805d8d2205a981ad311a73534647e789184c3f4dcb4f656f32f9573d18a60119249c8e33b68cac07758abc5a02c957750ff9df5e7ada3656ec9ce936e70ea8a515a2cb04cb89b391ba2467df6537e5a842fe38651501ea13ccc03099c9e3e4fa7addfd992efaf366cd64f9c1493f682fd9dda670baa71c36f23b5fbc4355069b3e9d73ca73b33a330676fff749c07fc5a3220d6a67af53973aef3b70450cffd5f802c27e524d352aa94effd82d7c200650752416aa3321dee014edd8dca88370ccd267ec0710be33ea7f2a517265ea39775e4428f919414782a973c9d083f1f2dac66240e593cacf56a5193e5bf60ea6a334ac19548fb0e1e82f361da0347ad3cb2c75b4dba3b13790e9456c6ad29fe683f70de1893809ba43ce478e700cb40dcb475966d05a2b30bae47be25c12513de505db193b67c19108226b9f092d7adb1250d338402a0a86403608b4604d2d3bbe9c78ab0d553362b0ba073f9a292893eff7e6eaaf115e3de9639fa2acf67b44ebeb1dbc1bd7bc792a34bdc352b7ebec66c20652c090da6371d4ee72a0fc7630aeb591942e596359a953db8ad75417a6db51236149d248355ff9a3dd58adc912e9f268206b7a82a0fff8e9e2cff2782249f31e192bdbf96c008b73c6359910dc7337f40aeea128f98a11b01fa2a0ac493584adad164560ec8d2fad88c297bcc7acd5cf527455a767cece5b00246fed180c83dc248119425f379f3d451aa7169eb1ca597061a06223da70978859354eebb9f8dae6a72171a6ceec59a620838e59865d82b3e2d935efe93cc52cb9998a4fd29823663d9d51e2f94c5de75341617733b2021b2f270bddf5e31a7eb81cc8ad994bce7e548f02648d240d5d7781a240e02f45a23a047081374090a858ae1fafe16a2ec448b7df21f3e69ec08cba2cebd63620713cf6f7c7006b0bd58149a19bd369ba6d1de1fb2d8e013340c2bcfc6a9513b6386333f6150580836db14d9843e0e78b872b5ee15005e9ca23222822520fe063c8b03802eba76037b72b4c244f69f6f267be28d43f607a1909d012664f6b32ef154c69dc9bcbb89ff295c27db4ca7f44219fb97050a6be96888c44763d8d20aa8657a2e83264156809edae17d36119b650811fd45c9304c219fe337eb63a0e11c40fe879044032b62a2a1276691fe89e7857ada88c94f26b2122c8302d747eb187f5fe8f4a022f5a0e1bce152ca3a976ddced05e9cb74b4f754148034ca4972d47b66e495622c4b27d6a3b9f7d883986160c55353b65b332fcbab9ebf4b5bc835a3c0a48e7446f8597ee07853f4cb96e70ab477d47fd091f7c22ae8550285c14b7b24154abd79530dd69eb50ec628c0e6559b171ef88953320643c92743efea3976ed7c80b84b3ad1cdb0e048924164334698aab84b085e2d8a3917cc304fb8b20c121828d934bf4e05de7b931908e9438f794af3c857f95f8906ed557a7329faf9c225a605980a1668b0476b030ab39c652510ef8bdd7ebad930e7a9b0b5524a501ba095e6e531474ba9a7ca43ae7ab380960d4f633fdbb88b1d6ea233eef3b12ce0f05775afff29f810fe04cb150a33291384db6d93f7474a5326cd6f6fd19d88e20f4390d4ec398ba9023cd457f8dc479381508427c6ad300f88515db1afd78ff32452e683aeffc8644f9be9cd922b0f79dfd4223a246d8d94f8ec8f15ed48d97a725732b0777d798fb5c1e9bf6da6946c4b5d1dfe4f2b86f1c3c310ba83e3869ca42b920293d9bde73ec73ee5dc2ec5f3df9bbf2238439c707f9eacf5497803b6151abefcc6b6422452d502cbf58a912bc5f008ec68cb79d5a525e5556c7076ceda9a4cd18ed573638a2c64f32c9bafe7d72605a13b3c39ebd5686a0a463ea0e653ca658f59f06e9b75dd4820dcce2cde5e979d8876cf48720d9d7e72a0cf791e5fca0bec3f0514b3f9ba4927300dacc4e5fbc25f1787ed3f74d7d7d5bd70ad5897aa1dc41496212bd15dde0bd5daae8627d974ddf68c1dc29566dcb57438dbce24c653af8a694f58761950e6983451697beea10d36c02b4c6727e3d4e5118af76d7ff718da062a6fe7c2262683ca36df643dcbe7a8cc91fac47f0a5c93e80c7801ad89682525cf3fe89c47a91ce3a9daef5b86c5315f845ba78923061a7fef698254e1", 0x1000}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x40, 0x4}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000021c0)="c70470952d4c195e2464fdba9f2f2c0ee7ce89f8661c2920642c6da943767b61e2a591adc7516b7bc279ddb2cc235d56b7a80f221028e5049c495d06d361f18f389b6952f06c8090c75f0711bde023de63fa2dadfb5ac36fb8abcb333a39c5d2f13f033a584bbbd664c8c57565e3fb623cd68e5b4a85472195bff7f4c498bb2f6e343a34cc8c0449aaa21252dd5a161a25574cd6891f7edb8332325466823f435814c84f87a457e969c73a7b35c31a5a3c8f614e3656161ee8a0368159f003b32799230885367ba03b1c9adaa5c7bc1059273435ca9229", 0xd7}, {&(0x7f00000022c0)="d9b8d7189c285acacd236bb4e638f8ec1723b8d4d91afb45c45a0715edf0b36b3b02c5fc2f539bffbecc666b346ebd06ef3d5cb4abf14e52698e596ac295050aecab69b7db9ed890de8018dd308b9049fe1acf020e7d2e4ee659be77daa6400392656bdde7df86ea5fa72de7894baa4da1d45d06373fbf3e4ed2c87cdb23f92de315af6b7a5b6ac2fad964098c1240dc59cb6427049bb8cb81420625ff8aeba9407fc1a2b6c180d02bd58e9b5dac22735b58a60132e84e28c4563f091f5c33a15e7750788e6b64a591c874712c9adc0624320102e0529c64e7b0", 0xda}, {&(0x7f00000023c0)="7af4e614a315ac97166225e8dbba339a4fe632e664a123259da15d0a1f2747b628fdadfe86805ffb560460d82ee2bb4abcc07d6c34faf3783cd38767d0e89dbc7997992b39dc5b05011aed9aaea24a314550048c9653cf1fcec8a70606d53e030e0ecdf3940d1d6d8a2d9e237b6219346180e053efc7e32fb612dfe36ab7ed38abf2619dd807f44ee877697ef2e6a20b53269c9da06b36534fad106baa8a4c16b8bd51a05519f6defe4430d37c1fe2daff88f7e78345db79612af4bb61f68e29f03fae859d42df89e6404978499371a1c203c85c0ca31ff86d698ff23cfe73a0faf680792eb998916a83b8", 0xeb}, {&(0x7f00000024c0)="bf99e7bc3ab31b577356f16691528c2337e1e446a7395f6bc7d4d1919f9e3ffc23c85042b95c7a86110ed3ecf181326101542f0ede27aafd5d5394d2dc92d6ab2b9061cb1000dce0977921ae5136614e6197cdeff3d1d3b63936d0509cd7ee7440862641d11461fdf6b642907b3bd104b8691ae58686e58656824668ecaf8b3c50df3f2aa8a7985cc92ec7b161d4ee0d8c21f53b59982a08640c8a80df034f1e9d253197098456ade10f4a2e3cc38608d492bfbf619f629d9b8aef4f6cddd215bebad4", 0xc3}, {&(0x7f00000025c0)="fc0ac4e82d50aebe2ce6e277e00974a2503a217a52f10874d33e271aba3a3dc855a0515db83527a337c06d18e2c6962dc7e98aff7f58c837202388bf4b479855d734f1d751a9d28a43319fe39315a0506287d1cfc1b4616bb795af4a21c0a0739d876f628c9d13e1a465fcaeb3fa83391d1c3dd28fa318c60fcdbeae77a36a36ceac3045a2bc9733d1dfcb88c403", 0x8e}, {&(0x7f0000002680)="546e03ddc63f1aabd37afb74d31425d3d5978cd235374d40e05fba7a0c56752a0e940c18687856f5049f084f4dcceb2809acf424a4720bd7d3f278dced292e28f7572033278990b7aa5749e272a88e93", 0x50}, {&(0x7f0000002700)="df12e8afebecdb17bdcbc34360b2b2e22937c8ea65d03a19e3c34cf7f232bc6a53965672b21119cdc8a1b2419c1a774e15cb742920461b43f8c05c646a346ad78d32d4722cc077d20c1bd816d049ef39d521b4198ad9cbc13f7f633699fd3ddaad8fc373c16c3a407d9ce7ed6ece13ef1c817c4eaa250c9e6b8afd23963e0032f9b570c26145bfa089cf453db57d1056a3d6165c741606beb27b5690dc3d15aa", 0xa0}, {&(0x7f00000027c0)="54c5836eb8a4f81d98f0663e9ac95a374cf79179b244feb645dec4aa60696e19cc3de3b45e421c0d73919aa9691e72d3774964a8b0fd3468d0fc3c1d68f909e9abb8f759cf162e7577e8855d40c7013649b702645444ecee050fc07179ce845eebde18422538d5437b45cd5451f07bead6242c7301598fe024415768f573a47299ef1e3955ff6a4a327e49b503d33f46e2ae03f059f7", 0x96}, {&(0x7f0000002880)="9e65483f0077a06336ad68107f5259866cce40f4586d352490c9e6a86a16a02fc3b158396811e43a225e6b8a81a01ec6d434882d2a196c968980270e002a2be3f833b64040ca3fa9358c", 0x4a}], 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="20e97ea883074040afda000000000000000100000001000000f67cb4e9", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x8040}}], 0x3, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r12, @ANYRESOCT=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000940)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r13}, 0x10)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0xf)

8m32.947242487s ago: executing program 33 (id=1095):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x12)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
epoll_create(0x6)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m50.938408978s ago: executing program 1 (id=2182):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000006140)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r3], 0x1, 0x14ee, &(0x7f0000001540)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f0000000600)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, 'debug'}}, {@euid_gt={'euid>', r2}}, {@euid_lt={'euid<', r2}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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")

4m50.938072428s ago: executing program 1 (id=2183):
r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[], 0x15)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
dup(r2)
io_setup(0x3, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
eventfd2(0x4, 0x100800)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r10 = dup(r9)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
write$FUSE_INIT(r10, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10])
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x38ba00, 0x144)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r11, r12, 0xd}, 0x14)
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r13, &(0x7f0000000040)=0x140, 0x12)

4m50.876664873s ago: executing program 1 (id=2187):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
inotify_init1(0x0)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07008d000100000005000000", @ANYBLOB="747ea66aa8446208c09448a20afa0451f99300cf95ab140117d7be64ff77379df47463a08d97af442665756c318533ca68499f21c8e147", @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="ec566a179eb99ddcb2dde0e869f8f077e598649b31a9c65af1fc5f69571afe3aa85e78eedb27886c467ec5c0b798480be05bd654daeaa4c56b2da62473c1c6a093a682f5cff36a25fa1ef51d70cc88fb5e79c9c6c58bc5dda37e84d02866cfc56129d485190a99167102fc41eacf6275ab318c26062392e9bd871732dd3b0351b4280678451345dff7aaa3377f208f17d5b5df"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@private, @rand_addr, <r9=>0x0}, &(0x7f0000000880)=0xc)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./bus\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c80)={r0, r9, 0x25, 0xc, @val=@iter={&(0x7f0000001c40)=@map_fd=r10, 0x10}}, 0x20)

4m49.831477667s ago: executing program 1 (id=2193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0)

4m49.78361543s ago: executing program 1 (id=2195):
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000000180c2f5000086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010003000000000000c9100000000000000000ff"], 0x0)

4m49.724341275s ago: executing program 1 (id=2196):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18)
io_uring_setup(0x1fbb, &(0x7f0000000280)={0x0, 0x8f2b, 0x8, 0x0, 0x308})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = dup(r6)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_AIE_ON(r10, 0x7001) (async)
ioctl$RTC_AIE_ON(r10, 0x7001)
dup(r9) (async)
r11 = dup(r9)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11])
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

4m39.400158965s ago: executing program 34 (id=2251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000e8010000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10)
listen(r2, 0x0)
r5 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r5, 0x82, 0x5, &(0x7f0000002340)='hello')
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000340))
read$eventfd(r10, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

4m34.389231678s ago: executing program 35 (id=2196):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18)
io_uring_setup(0x1fbb, &(0x7f0000000280)={0x0, 0x8f2b, 0x8, 0x0, 0x308})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = dup(r6)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_AIE_ON(r10, 0x7001) (async)
ioctl$RTC_AIE_ON(r10, 0x7001)
dup(r9) (async)
r11 = dup(r9)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11])
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}})

4m33.543784716s ago: executing program 7 (id=2252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$getflags(r5, 0x401)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff0000000000000007020000f8ffffffb703000008000000b70400000000000085000000b4c5aede"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x4000000000000000, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0)

4m32.652460838s ago: executing program 7 (id=2275):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631198000000000005000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9e}]}}]}, 0x48}}, 0x0)

4m31.543572247s ago: executing program 7 (id=2276):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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")
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x2, 0x33, 0x10001)

4m30.738337292s ago: executing program 7 (id=2280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xef2903544803276e)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0xc00, 0x0)
r1 = open(&(0x7f0000000040)='./file0/file0\x00', 0x141942, 0xca8e958124a69961)
fstat(r1, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x80000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
statx(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', <r4=>0x0, 0x29, 0x6, 0x8, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x4f80a26700a7b6af, 0x711, 0x7fff, 0x7ff}})
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0/file0\x00', 0x0, 0x18}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xb, &(0x7f0000000380)=@raw=[@ldst={0x0, 0x2, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x56e90000, 0x0, 0x0, 0x0, 0x80, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x80, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, r3, r0, r6, r0, r7], &(0x7f0000000680)=[{0x0, 0x1, 0xb, 0x4}, {0x5, 0x5, 0x4, 0x9}, {0x0, 0x4, 0xa, 0xa}], 0x10, 0x1000000}, 0x94)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
pause()

4m26.677505358s ago: executing program 7 (id=2288):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80400)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x630c, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)

4m11.48175594s ago: executing program 36 (id=2288):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80400)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x630c, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)

2m42.43032671s ago: executing program 9 (id=2795):
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r1 = epoll_create(0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
syncfs(r2)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450)
epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000000340)=""/4096)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m39.899230274s ago: executing program 9 (id=2805):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x26, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
close_range(r7, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff})
r9 = gettid()
ptrace$ARCH_GET_GS(0x1e, r9, &(0x7f0000000000), 0x1004)
connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
sendmmsg$inet(r10, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

2m39.781341783s ago: executing program 9 (id=2809):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07008d000100000005000000", @ANYBLOB="747ea66aa8446208c09448a20afa0451f99300cf95ab140117d7be64ff77379df47463a08d97af442665756c318533ca68499f21c8e147", @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="ec566a179eb99ddcb2dde0e869f8f077e598649b31a9c65af1fc5f69571afe3aa85e78eedb27886c467ec5c0b798480be05bd654daeaa4c56b2da62473c1c6a093a682f5cff36a25fa1ef51d70cc88fb5e79c9c6c58bc5dda37e84d02866cfc56129d485190a99167102fc41eacf6275ab318c26062392e9bd871732dd3b0351b4280678451345dff7aaa3377f208f17d5b5df"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r9, r6, 0x4, r6}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@private, @rand_addr, <r10=>0x0}, &(0x7f0000000880)=0xc)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./bus\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c80)={0xffffffffffffffff, r10, 0x25, 0xc, @val=@iter={&(0x7f0000001c40)=@map_fd=r11, 0x10}}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2m38.293298133s ago: executing program 9 (id=2812):
r0 = gettid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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")
r1 = open(0x0, 0x86442, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r4], &(0x7f00000001c0)='GPL\x00', 0x7, 0x93, &(0x7f0000000b00)=""/147}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='afs_cm_no_server_u\x00', r6}, 0x18)
sync()
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="66eac09d46f7224b481fcadeaca4a2feccf1ed471df4b2cbca45df6c76232f52793d4714", @ANYRES16=<r8=>r7, @ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0xc004005)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000f6ffffffffffffff000000000062a7c5655d176c6e7ce1297b8adeace1b27fcafd31d5f7906c97c0a2"], 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x10)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

2m38.132680756s ago: executing program 9 (id=2814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$getflags(r5, 0x401)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff0000000000000007020000f8ffffffb703000008000000b70400000000000085000000b4c5aede"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x4000000000000000, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0)

2m37.982544068s ago: executing program 9 (id=2817):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r3, 0x3, 0x0, @val=@iter={0x0}}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3)
sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc6010011}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3f}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x41)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x4, 0x6, 0x9, 0x10, 0x8})
tgkill(0xffffffffffffffff, 0x0, 0xd)
listen(r5, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200fe90780004"], 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000014c0)={0xffffffd1, 0x2, 0x2, 0x811a, 0x0, "030000000000000000049dd0ffd76d7fcb0b0e", 0x9, 0x201})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff)

2m37.871381237s ago: executing program 37 (id=2817):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r3, 0x3, 0x0, @val=@iter={0x0}}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3)
sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc6010011}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3f}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x41)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x4, 0x6, 0x9, 0x10, 0x8})
tgkill(0xffffffffffffffff, 0x0, 0xd)
listen(r5, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200fe90780004"], 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000014c0)={0xffffffd1, 0x2, 0x2, 0x811a, 0x0, "030000000000000000049dd0ffd76d7fcb0b0e", 0x9, 0x201})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff)

2m30.969850652s ago: executing program 2 (id=2833):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000440)='+.!)+#\x00', 0xfffffffffffffffe)

2m30.969150112s ago: executing program 2 (id=2834):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB, @ANYRES16=0x0], 0x1, 0x223, &(0x7f0000000340)="$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")
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x90201, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000580)={0x8, 'netdevsim0\x00', {'ip6erspan0\x00'}, 0xff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r5, 0x1ff}, 0xc)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, &(0x7f0000000140))
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0xffffffffffffffff)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000040)=0x3)

2m28.954948654s ago: executing program 2 (id=2841):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setparam(r0, &(0x7f0000000300)=0xffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000040)=r0, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001d0021"], 0x34}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

2m28.555460416s ago: executing program 2 (id=2845):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080), 0x100000, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
io_setup(0x3, &(0x7f0000000340))

2m26.542003328s ago: executing program 2 (id=2851):
set_robust_list(&(0x7f0000000000)={0x0, 0x10008}, 0x18)

2m24.201373316s ago: executing program 2 (id=2859):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, 0x0, &(0x7f0000000240)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000014)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)

2m24.062681657s ago: executing program 38 (id=2859):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, 0x0, &(0x7f0000000240)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000014)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)

1m40.100217892s ago: executing program 0 (id=3086):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

1m40.099816222s ago: executing program 0 (id=3087):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x31)

1m40.087399513s ago: executing program 0 (id=3088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b00000000000007e0ac45f1b04f881008d15c937040795e9ec68ba239b8f"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, 0x0, 0x200400d1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xab, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000004b7fe85000000860000009500", @ANYRESDEC=r7], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2804458, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x502, &(0x7f0000000240)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_mtu(r10, 0x29, 0x17, 0x0, &(0x7f0000000100))

1m38.481616382s ago: executing program 0 (id=3095):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x2, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf})
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) (async)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x2, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x7) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x1}}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf}) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async)

1m38.38024334s ago: executing program 0 (id=3097):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07008d000100000005000000", @ANYBLOB="747ea66aa8446208c09448a20afa0451f99300cf95ab140117d7be64ff77379df47463a08d97af442665756c318533ca68499f21c8e147", @ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="ec566a179eb99ddcb2dde0e869f8f077e598649b31a9c65af1fc5f69571afe3aa85e78eedb27886c467ec5c0b798480be05bd654daeaa4c56b2da62473c1c6a093a682f5cff36a25fa1ef51d70cc88fb5e79c9c6c58bc5dda37e84d02866cfc56129d485190a99167102fc41eacf6275ab318c26062392e9bd871732dd3b0351b4280678451345dff7aaa3377f208f17d5b5df"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r9, 0x1, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r10, r7, 0x4, r7}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@private, @rand_addr, <r11=>0x0}, &(0x7f0000000880)=0xc)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./bus\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c80)={r0, r11, 0x25, 0xc, @val=@iter={&(0x7f0000001c40)=@map_fd=r12, 0x10}}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1m38.330183794s ago: executing program 0 (id=3098):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

1m38.176674247s ago: executing program 39 (id=3098):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

9.376372506s ago: executing program 8 (id=3532):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x2, 0x2, @remote, @loopback, 0x1, 0x10, 0x5, 0x8}})
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000040)={{0x100}, 'syz1\x00', 0x22})
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xe)
syz_usb_connect(0x1, 0x5a3, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x79, 0x38, 0x7f, 0x40, 0x1199, 0x9061, 0xcaf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x591, 0x1, 0x80, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x3, 0xb, 0xde, 0xac, 0x85, 0x67, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xb}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x4f, 0x1, "d9f0eb6b"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x6, 0x4, 0xa, 0xa, 0x7], 0xed}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x6, "3fa4"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x6, 0x6, 0x0, [@generic={0x27, 0x7, "a6ccae71f6d39f8ee7676c2d6e3462bf6f088e19e19e07b4f02f3de596129889c174b66a03"}, @generic={0x6a, 0x10, "08945d2e2fa5c86faef43831f6387b4043a467948fbad7c7f67bad943d97dcd71d22660069aacef55ccc606f0413370b73f3af63883f7af4ec230d69df3315f128668a15fa945d011c5c6bda7f4a389bd864e710d83a426b42109beed1a70763cf91d9f1c3cda1de"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0xe, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0x5, 0x5, [@generic={0x15, 0x9, "49437bc3b8b5b63ec75e3506f389cce12114e4"}, @generic={0xdb, 0xf, "c439cb565876618e6c8a9860b3fdbf47a8e1bb0e5b106d385aa76a6e861b25c619ad254b15319ab00215f17eebcb59afc9240f9792cbd7b4780768d10a76fd375644c39201a2e15323b2ad5e90e3a331d71ecb36b50957012e6e4cd8ac22c7fc247249b6d86d27c7ddb0b00126a79fd64841f4c11ae1c0d091c7b1d01d76faec767aa85ccda072ee50316bc768d8bb8bb2ee112bb09e32d1ceae3db257262588138cfd0a141eaf50aca2f9e8549270e17c4becd1f4a32142fd0c9750c74e6d1713fe56ba5cf1a4a972564d0230fb1b3e72e5b5d30895689032"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0xf9, 0x0, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}, @generic={0xbf, 0x23, "dd2766857b1c436cc872b5c060241906ca958f347b434b881d1ba39dc1620bcce49c396ce1d124077117fb44600b8cf3141e4bacc9fb6cd8ae70d573e2709a703c56f2ecd1b23ddbb2955a84388fe50a0787de4c6290401f0420ef38881198cde4f34d53b30ad7143c24f08286de1d9a7d3e976893d50d0bab0063caa8faa26f997ca2ff5a5c91ff0e0369d1840b751cf69cc0b0fab45f93474b3f5a5667a280c2e66ea890a265ccb7f49299cff6774627508e26eb6f48ff9eb1ec3b9f"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0xa, 0xf0, 0x1, [@generic={0x28, 0x7, "ba60d73c6d6f56c2128ef1f0dc89edac37897d30cb1edb6bd85e591a639c06fe65166b986015"}, @generic={0xea, 0x5, "a140ce748e9ef4e9430fab72f38346863f1468a71c777f84a2831f1e285704c413f26f15adf4cc4488dccf45a9cb5c130bff025f627b51f688c6f588252c2cbc9b827676a709edd0e5c6fb70a2683adc0ba93821da137b00a6c16b3f3753796879792485398739211d37e0338bfb2a63c2429f321b42932ea15d73aad86b8619fd92b2d5c2a0040cb2d72f27c9542da3542c8c7d5f7e0148b2579511cd9b9291708cc7d7166eccffc096d327f6297736c5c2b789f360cccdfb6f04dd50998a7e4ec8fcf233637a5ab58abcca015ecc8f9defc3fb7705216a016fc119ea411e69d5c00f465de2518b"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0xb, 0xe, 0x3, [@generic={0x34, 0x23, "415ae0b3b42a61a78a52d34106db237009a5c787bd04b493002bee63750ce09ca998cddec6ef0802963e936cd39cc59103fb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x9, 0xf9, 0x6, [@generic={0xcd, 0xe, "7eb03d62b28d4fdb71bf5a3a9d81959d35cb992ca92af552d7a7f35e2f1b4da2f0b6759e3ccdaf00ca5757cb3a6e656b1d243c9b98e237afa8a18f33944c919e4fb68a5a4a247a041bef469b48a003fb06f053ddde3150668e920a0bd3ce6289572a75c89ede9e59f398e4dadfc70af69d34ff662aa7b367c20fc644fc820a47b75f77d1a3f084ff58eaae0b3b8dc73aef7b208196ed9605160031dd41cec7356189c4e155bd3151fefebd3882a91810276992be53947987656c785267478d24f530457ebd80d0cd1ed4a8"}, @generic={0x8f, 0x22, "c33d7c5465e8698956cf565bf6ba26de0116f1c5ed00619802610c128a8cf2870f48d599b8f6ca53e8a7537ddede470d5da071bf484bb8dcca88ff4ecebc0252c082d0b6a6e035d34daab32f89697a5375fbefd4c1aeeab3f2618e7ec9f4e73f3b94c4f3db2c86f2da42b1166e59ed0a029608849fe984ac396cb627a4194f5c4bc5895bcd7e8468bfbfcdda8a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x1a, 0x80}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x81, 0xad, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x0, 0x4, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="260120795dc5ffcce09cf887675d5e6a4d83a2aa89e61f6a4ae1bd0624465f79ba4606847b8ea4596f18692c03b891b0a8a61735df8fbb4501"], 0x2, [{0x99, &(0x7f0000000740)=@string={0x99, 0x3, "54b7b5b46494f384518468f9a8da5b922408a0ea48816038d8d0e5f221a7d037457fb9cd0119a92599f9406218323fd25a5cf3e2b9da0ed885a3dbd60eaa265acc1be8a5237352865999c2f854195277f72312848c0164c0572c4c3e6b7ab08be849c42d8658e71a3907ea1faa76f2be31d5a6c4d5c3fc9994e5f5dbe075bd6b7ed97ec8f81b2edc35a52747882e33df0bbbb99c4ce66c"}}, {0x3, &(0x7f0000000800)=@string={0x3, 0x3, "d5"}}]})

6.358184609s ago: executing program 4 (id=3546):
r0 = socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KDGKBSENT(r6, 0x4b48, 0x0)
sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="eb5ae49f9d875b84265ee881e8cba3689fc6546544295ef9fbf10b5cc7ee78fdba4f9fec2be1a45dfab5fe94", 0x2c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, &(0x7f0000005580)=[@ip_pktinfo={{0x14, 0x0, 0x34, {0x0, @local, @empty}}}], 0x20}}], 0x2, 0x4800)

6.357734039s ago: executing program 8 (id=3547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f00000002c0)='GPL\x00', 0x14, 0xad, &(0x7f00000003c0)=""/173}, 0x94)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3008}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x2, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

5.936386113s ago: executing program 6 (id=3551):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$getflags(r5, 0x401)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff0000000000000007020000f8ffffffb703000008000000b70400000000000085000000b4c5aede"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x4000000000000000, 0x0)
lstat(0x0, &(0x7f00000003c0))
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0)

5.446096353s ago: executing program 4 (id=3555):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x3e, 0x1, 0x2000000)
prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x57a, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x3, &(0x7f0000000180)={0x5, 0x1000})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003f00)=ANY=[@ANYBLOB="0200008004000000080000000100000080000000e639c2b8089b377e83c80209ced2777be3f675b847ebd7aa89249c0d400d4e20f9fc29331b891db88b3668bfba3cf62401a16073513c00af4faddd18dc0cbd53707109311639fac0a531a0915517030e45eccc5787a1c3a5bfecf9d6dd3c38853dbc188d6422a3216428b32c870d72e7ca9b69a140fbe5281fd97748de127c8be651d5", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
pipe2(&(0x7f00000001c0), 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
getsockopt$inet6_tcp_int(r5, 0x6, 0x15, 0x0, &(0x7f0000000140))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000700)=""/4096, 0x4f4a2e11a0af20d1}], 0x3, &(0x7f0000000380), 0xf}, 0x6cf}, {{&(0x7f0000000440)=@ax25={{0x3, @default}, [@default, @default, @rose, @default, @default, @default, @netrom, @null]}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000001740)=""/156, 0x9c}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/243, 0xf3}, {&(0x7f0000004000)=""/4110, 0x1000}, {&(0x7f0000003900)=""/255, 0xff}], 0x6, &(0x7f0000003e00)=""/55, 0x37}, 0xffffffff}, {{&(0x7f0000003ac0)=@nfc_llcp, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b40)=""/254, 0xfe}, {&(0x7f0000003c40)=""/190, 0xbe}, {&(0x7f0000003d00)=""/148, 0x94}], 0x3, &(0x7f0000003e00)}, 0x4}], 0x3, 0x2, 0x0)

5.059335124s ago: executing program 3 (id=3558):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0xfffffffb, 0x16}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)

4.271569327s ago: executing program 6 (id=3559):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0xfffffffb, 0x16}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)

3.882818418s ago: executing program 4 (id=3560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0x38}}, 0x4040804)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x3c, 0x64, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xffe0}, {0xd, 0xc}, {0xf, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.690374884s ago: executing program 3 (id=3561):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

3.633551548s ago: executing program 3 (id=3563):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6405ec8500000005000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r4}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

3.632015868s ago: executing program 4 (id=3564):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)

3.61265918s ago: executing program 5 (id=3565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1a91c2, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400010467352600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

3.033423467s ago: executing program 6 (id=3566):
r0 = socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KDGKBSENT(r6, 0x4b48, 0x0)
sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="eb5ae49f9d875b84265ee881e8cba3689fc6546544295ef9fbf10b5cc7ee78fdba4f9fec2be1a45dfab5fe94", 0x2c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, &(0x7f0000005580)=[@ip_pktinfo={{0x14, 0x0, 0x34, {0x0, @local, @empty}}}], 0x20}}], 0x2, 0x4800)

2.597010102s ago: executing program 3 (id=3567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
syz_clone(0x8082000, &(0x7f00000004c0)="b222aad0b918f5eff681d58ede30cff013e0c707f28e885bf7597e0f4f2480075aec9a708c904ba67ecf1fc4ed37eb9c1441a7529cd2b938db457a1ba607cd695af2c08a50b744eee162e1dbbdc58e57bad36fe368e864fbdd7d208246f98fc303c560961679b36e64931c68e283d87c438b7944969acc0737251027747d6a049903d41e96ff39d269d9e54f1e8c9ee7bdf4e3351125f46d3c81ce8a00b239d2c3aab926b2cfad0477574277102e", 0xae, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="0387ce778c985af5a8cda26021695dcb695f623604ecf746ada40ad1b82570602f521b400439b644a1c9017ffcecf67b1e1351ef2e2740928b6081209011c801789c4de74b1e0e3aaf9f134644c8078631b2b7263c90dbe4bbec27f621c4e36a7720a98fae8b5267837f70dabc7188f78bae1be5df6b0f1be437cf44bdd7786e7dbb3e3777c6042f5a68117475e1e02e409a6a8a3da1")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.535736846s ago: executing program 3 (id=3568):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540))

2.530871327s ago: executing program 5 (id=3569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000540))

2.499385429s ago: executing program 3 (id=3570):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a24010000020201020c240201060201400a000c050904010000010200000904010101010200000724010000020009050109758b06200107250100060d00090402000001020000090402010101020000112402010604080300000002000000000007240116050110090582090002"], 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
keyctl$set_reqkey_keyring(0xe, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

2.48871178s ago: executing program 5 (id=3571):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
timer_create(0x0, 0x0, 0xfffffffffffffffd)
ftruncate(r1, 0x8800000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendfile(r4, r1, 0x0, 0x578410eb)
write$UHID_CREATE(r1, &(0x7f0000000600)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/249, 0xf9, 0x8, 0x1, 0x0, 0xf1400000, 0x6}}, 0x120)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='workqueue_activate_work\x00', r0, 0x0, 0x1}, 0x18)
fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402)

2.099601091s ago: executing program 8 (id=3572):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0xfffffffb, 0x16}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)

1.584240993s ago: executing program 5 (id=3573):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='ns\x00')
statx(r0, &(0x7f0000000680)='.\x00', 0x0, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x60848, &(0x7f0000001640)=ANY=[], 0x1, 0x152c, &(0x7f0000001f80)="$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")
clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x58c, 0xf4b, 0x8})
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7d280000000000)
bind$tipc(r3, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x1}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r5, 0x0)
dup3(r4, r3, 0x0)

1.550261015s ago: executing program 6 (id=3574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10)
madvise(&(0x7f0000308000/0x1000)=nil, 0x1000, 0xd)

1.518753248s ago: executing program 6 (id=3575):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200000})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

1.472448572s ago: executing program 5 (id=3576):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000040), &(0x7f0000000380)='%pS    \x00'}, 0x37)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)=0x9, 0x4)
pivot_root(0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, &(0x7f00000001c0), &(0x7f0000000300)={0x77359400}, 0x8)

1.468658312s ago: executing program 6 (id=3577):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a24010000020201020c240201060201400a000c050904010000010200000904010101010200000724010000020009050109758b06200107250100060d00090402000001020000090402010101020000112402010604080300000002000000000007240116050110090582090002"], 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
keyctl$set_reqkey_keyring(0xe, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

1.37739603s ago: executing program 4 (id=3578):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
inotify_init1(0x0)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07008d000100000005000000", @ANYBLOB="747ea66aa8446208c09448a20afa0451f99300cf95ab140117d7be64ff77379df47463a08d97af442665756c318533ca68499f21c8e147", @ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="ec566a179eb99ddcb2dde0e869f8f077e598649b31a9c65af1fc5f69571afe3aa85e78eedb27886c467ec5c0b798480be05bd654daeaa4c56b2da62473c1c6a093a682f5cff36a25fa1ef51d70cc88fb5e79c9c6c58bc5dda37e84d02866cfc56129d485190a99167102fc41eacf6275ab318c26062392e9bd871732dd3b0351b4280678451345dff7aaa3377f208f17d5b5df"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r9, 0x1, 0x0, @void}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@private, @rand_addr, <r10=>0x0}, &(0x7f0000000880)=0xc)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./bus\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c80)={r0, r10, 0x25, 0xc, @val=@iter={&(0x7f0000001c40)=@map_fd=r11, 0x10}}, 0x20)

978.785762ms ago: executing program 8 (id=3579):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

964.277213ms ago: executing program 8 (id=3580):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$update(0x2, 0x0, &(0x7f0000000280)="21ee", 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair(0x2c, 0x800, 0x60, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_proto_private(r1, 0x1, &(0x7f0000000600)="ab68a978d02878f17fe2adeac1490f6b7587a0c34a151cb953f58c5e75bbe5e0be927cd5a903c324e3c6c50b8eae5550")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000300), 0x5, 0x440000)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0)
write$vga_arbiter(r4, &(0x7f0000000240)=@unlock_all, 0xb)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
bpf$MAP_CREATE(0x300000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000004f1ffff400000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000fcff360f00"/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="024000000400"/28], 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

88.489583ms ago: executing program 5 (id=3581):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x26)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
mount$9p_xen(0x0, 0x0, 0x0, 0x1828cc, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000040))
close(0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendfile(r1, r0, 0x0, 0x3ffff)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

32.149658ms ago: executing program 8 (id=3582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1a91c2, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="000000000000bf78022d890751130000b70300000000000085000000054f2df387ee9e000000bca900000000000035090200000310006e000d0000000000bf97fffffb00000056080000000000008500000007000000b70000000000000095000000000000007cf0331c5d1d0138e9ecf991c842e50bd21199325bf6862e07556f547b7981d0a4bdf7303a8dd6eea1f5713da548a4e24ec8d52e2bbb2539340baf36709a6de70a9960be67587168334353ed560d4165563987f230b775e51794386efacb110aaa4536f1d39d1c38c2e10000001379d53636c2aea02d4c06697902a23b4a1e7be1e8ce2478aad9061eb1f12dd7ce06557c4848faa020afff3bfba09cd09af60a4b8b080884061ead9815b0db55150d397d60e7b83031b866219d4f5a66f47e7e913094377e5caf91594bcd8f786e4efab05d4d7311c32839677a832434003d02490138"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400010467352600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

0s ago: executing program 4 (id=3583):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x2, 0x2, @remote, @loopback, 0x1, 0x10, 0x5, 0x8}})
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000040)={{0x100}, 'syz1\x00', 0x22})
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xe)
syz_usb_connect(0x1, 0x5a3, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x79, 0x38, 0x7f, 0x40, 0x1199, 0x9061, 0xcaf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x591, 0x1, 0x80, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x3, 0xb, 0xde, 0xac, 0x85, 0x67, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xb}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x4f, 0x1, "d9f0eb6b"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x2, 0x5, [0x6, 0x4, 0xa, 0xa, 0x7], 0xed}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x6, "3fa4"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x40, 0x6, 0x6, 0x0, [@generic={0x27, 0x7, "a6ccae71f6d39f8ee7676c2d6e3462bf6f088e19e19e07b4f02f3de596129889c174b66a03"}, @generic={0x6a, 0x10, "08945d2e2fa5c86faef43831f6387b4043a467948fbad7c7f67bad943d97dcd71d22660069aacef55ccc606f0413370b73f3af63883f7af4ec230d69df3315f128668a15fa945d011c5c6bda7f4a389bd864e710d83a426b42109beed1a70763cf91d9f1c3cda1de"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0xe, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0x5, 0x5, [@generic={0x15, 0x9, "49437bc3b8b5b63ec75e3506f389cce12114e4"}, @generic={0xdb, 0xf, "c439cb565876618e6c8a9860b3fdbf47a8e1bb0e5b106d385aa76a6e861b25c619ad254b15319ab00215f17eebcb59afc9240f9792cbd7b4780768d10a76fd375644c39201a2e15323b2ad5e90e3a331d71ecb36b50957012e6e4cd8ac22c7fc247249b6d86d27c7ddb0b00126a79fd64841f4c11ae1c0d091c7b1d01d76faec767aa85ccda072ee50316bc768d8bb8bb2ee112bb09e32d1ceae3db257262588138cfd0a141eaf50aca2f9e8549270e17c4becd1f4a32142fd0c9750c74e6d1713fe56ba5cf1a4a972564d0230fb1b3e72e5b5d30895689032"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0xf9, 0x0, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}, @generic={0xbf, 0x23, "dd2766857b1c436cc872b5c060241906ca958f347b434b881d1ba39dc1620bcce49c396ce1d124077117fb44600b8cf3141e4bacc9fb6cd8ae70d573e2709a703c56f2ecd1b23ddbb2955a84388fe50a0787de4c6290401f0420ef38881198cde4f34d53b30ad7143c24f08286de1d9a7d3e976893d50d0bab0063caa8faa26f997ca2ff5a5c91ff0e0369d1840b751cf69cc0b0fab45f93474b3f5a5667a280c2e66ea890a265ccb7f49299cff6774627508e26eb6f48ff9eb1ec3b9f"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0xa, 0xf0, 0x1, [@generic={0x28, 0x7, "ba60d73c6d6f56c2128ef1f0dc89edac37897d30cb1edb6bd85e591a639c06fe65166b986015"}, @generic={0xea, 0x5, "a140ce748e9ef4e9430fab72f38346863f1468a71c777f84a2831f1e285704c413f26f15adf4cc4488dccf45a9cb5c130bff025f627b51f688c6f588252c2cbc9b827676a709edd0e5c6fb70a2683adc0ba93821da137b00a6c16b3f3753796879792485398739211d37e0338bfb2a63c2429f321b42932ea15d73aad86b8619fd92b2d5c2a0040cb2d72f27c9542da3542c8c7d5f7e0148b2579511cd9b9291708cc7d7166eccffc096d327f6297736c5c2b789f360cccdfb6f04dd50998a7e4ec8fcf233637a5ab58abcca015ecc8f9defc3fb7705216a016fc119ea411e69d5c00f465de2518b"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0xb, 0xe, 0x3, [@generic={0x34, 0x23, "415ae0b3b42a61a78a52d34106db237009a5c787bd04b493002bee63750ce09ca998cddec6ef0802963e936cd39cc59103fb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x9, 0xf9, 0x6, [@generic={0xcd, 0xe, "7eb03d62b28d4fdb71bf5a3a9d81959d35cb992ca92af552d7a7f35e2f1b4da2f0b6759e3ccdaf00ca5757cb3a6e656b1d243c9b98e237afa8a18f33944c919e4fb68a5a4a247a041bef469b48a003fb06f053ddde3150668e920a0bd3ce6289572a75c89ede9e59f398e4dadfc70af69d34ff662aa7b367c20fc644fc820a47b75f77d1a3f084ff58eaae0b3b8dc73aef7b208196ed9605160031dd41cec7356189c4e155bd3151fefebd3882a91810276992be53947987656c785267478d24f530457ebd80d0cd1ed4a8"}, @generic={0x8f, 0x22, "c33d7c5465e8698956cf565bf6ba26de0116f1c5ed00619802610c128a8cf2870f48d599b8f6ca53e8a7537ddede470d5da071bf484bb8dcca88ff4ecebc0252c082d0b6a6e035d34daab32f89697a5375fbefd4c1aeeab3f2618e7ec9f4e73f3b94c4f3db2c86f2da42b1166e59ed0a029608849fe984ac396cb627a4194f5c4bc5895bcd7e8468bfbfcdda8a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x1a, 0x80}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x81, 0xad, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x0, 0x4, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="260120795dc5ffcce09cf887675d5e6a4d83a2aa89e61f6a4ae1bd0624465f79ba4606847b8ea4596f18692c03b891b0a8a61735df8fbb4501"], 0x2, [{0x99, &(0x7f0000000740)=@string={0x99, 0x3, "54b7b5b46494f384518468f9a8da5b922408a0ea48816038d8d0e5f221a7d037457fb9cd0119a92599f9406218323fd25a5cf3e2b9da0ed885a3dbd60eaa265acc1be8a5237352865999c2f854195277f72312848c0164c0572c4c3e6b7ab08be849c42d8658e71a3907ea1faa76f2be31d5a6c4d5c3fc9994e5f5dbe075bd6b7ed97ec8f81b2edc35a52747882e33df0bbbb99c4ce66c"}}, {0x3, &(0x7f0000000800)=@string={0x3, 0x3, "d5"}}]})

kernel console output (not intermixed with test programs):

criptor of length 0, skipping remainder of the config
[  606.553053][ T2044] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  606.562018][ T2044] usb 3-1: config 1 has no interface number 1
[  606.568426][ T2044] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  606.581294][ T2044] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  606.593660][ T2044] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  606.602801][ T2044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.610811][ T2044] usb 3-1: Product: syz
[  606.615011][ T2044] usb 3-1: Manufacturer: syz
[  606.619622][ T2044] usb 3-1: SerialNumber: syz
[  606.713065][  T288] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  606.981442][  T288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  607.003704][  T288] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  607.013002][  T288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.021114][  T288] usb 10-1: Product: syz
[  607.025695][  T288] usb 10-1: Manufacturer: syz
[  607.030495][  T288] usb 10-1: SerialNumber: syz
[  607.050461][  T288] usb 10-1: config 0 descriptor??
[  607.131573][  T288] hub 10-1:0.0: bad descriptor, ignoring hub
[  607.189733][  T288] hub: probe of 10-1:0.0 failed with error -5
[  607.293027][  T288] snd-usb-audio: probe of 10-1:0.0 failed with error -2
[  607.363096][ T8275] udevd[8275]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  607.382809][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  607.382829][   T28] audit: type=1400 audit(608.293:1539): avc:  denied  { accept } for  pid=9912 comm="syz.9.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  607.434272][ T9913] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2751'.
[  608.975048][ T9945] loop6: detected capacity change from 0 to 1024
[  608.984397][ T9945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  609.005464][ T9945] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  609.042508][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  609.086971][ T2044] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  609.107485][ T2044] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  609.130172][ T9958] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  609.160958][ T2044] usb 3-1: USB disconnect, device number 12
[  609.191485][ T9955] mmap: syz.2.2762 (9955): VmData 167620608 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  609.840309][ T9976] loop9: detected capacity change from 0 to 128
[  609.878737][ T9976] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  609.918958][   T28] audit: type=1400 audit(610.893:1540): avc:  denied  { create } for  pid=9975 comm="syz.9.2768" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[  609.939433][ T2044] usb 10-1: USB disconnect, device number 15
[  609.967841][ T8544] EXT4-fs (loop9): unmounting filesystem.
[  610.048731][ T9983] binder: BINDER_SET_CONTEXT_MGR already set
[  610.056215][ T9984] overlayfs: missing 'lowerdir'
[  610.061172][ T9983] binder: 9979:9983 ioctl 4018620d 2000000001c0 returned -16
[  610.951479][ T2045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  610.962509][   T28] audit: type=1400 audit(611.933:1541): avc:  denied  { append } for  pid=9997 comm="syz.9.2774" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  610.998316][   T28] audit: type=1400 audit(611.933:1542): avc:  denied  { read } for  pid=9992 comm="syz.6.2773" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  611.084396][   T28] audit: type=1400 audit(611.933:1543): avc:  denied  { open } for  pid=9992 comm="syz.6.2773" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  611.134701][   T28] audit: type=1400 audit(611.933:1544): avc:  denied  { ioctl } for  pid=9992 comm="syz.6.2773" path="/dev/ashmem" dev="devtmpfs" ino=269 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  611.508905][T10019] loop6: detected capacity change from 0 to 256
[  611.638654][T10019] FAT-fs (loop6): Directory bread(block 64) failed
[  611.665843][T10019] FAT-fs (loop6): Directory bread(block 65) failed
[  611.692518][T10019] FAT-fs (loop6): Directory bread(block 66) failed
[  611.699252][T10019] FAT-fs (loop6): Directory bread(block 67) failed
[  611.706137][T10019] FAT-fs (loop6): Directory bread(block 68) failed
[  611.712821][T10019] FAT-fs (loop6): Directory bread(block 69) failed
[  611.719471][T10019] FAT-fs (loop6): Directory bread(block 70) failed
[  611.726183][T10019] FAT-fs (loop6): Directory bread(block 71) failed
[  611.733033][T10019] FAT-fs (loop6): Directory bread(block 72) failed
[  611.739589][T10019] FAT-fs (loop6): Directory bread(block 73) failed
[  613.487909][   T28] audit: type=1400 audit(614.463:1545): avc:  denied  { module_request } for  pid=10044 comm="syz.2.2787" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  613.529777][T10048] tipc: Invalid UDP bearer configuration
[  613.529803][T10048] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  613.574378][T10047] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2787'.
[  613.589472][T10047] tipc: Started in network mode
[  615.969984][T10047] tipc: Node identity 7f000001, cluster identity 4711
[  615.978021][   T28] audit: type=1400 audit(615.913:1546): avc:  denied  { write } for  pid=10049 comm="syz.8.2790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  615.981721][T10047] tipc: Enabled bearer <udp:syz2>, priority 1
[  616.196913][T10077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10077 comm=syz.2.2796
[  617.244669][ T8807] tipc: Node number set to 2130706433
[  617.281519][   T28] audit: type=1400 audit(618.253:1547): avc:  denied  { write } for  pid=10087 comm="syz.0.2799" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  617.521012][T10102] loop6: detected capacity change from 0 to 512
[  618.537580][T10105] cgroup: Unknown subsys name 'measure'
[  618.577453][T10105] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2804'.
[  618.648550][ T8422] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  618.712831][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  618.912871][   T24] usb 1-1: Using ep0 maxpacket: 16
[  618.920643][   T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  619.253002][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.263814][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  619.277262][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  619.286652][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.298675][   T24] usb 1-1: Product: syz
[  619.328405][   T24] usb 1-1: Manufacturer: syz
[  619.340774][   T24] usb 1-1: SerialNumber: syz
[  619.491768][ T1111] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  619.963867][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.974862][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.984751][   T24] usb 1-1: 0:2 : does not exist
[  619.989842][ T1111] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  619.998958][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.007746][ T1111] usb 3-1: config 0 descriptor??
[  620.200841][T10131] loop9: detected capacity change from 0 to 512
[  620.212975][T10131] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  620.238817][T10131] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:164: inode #17: comm syz.9.2812: inline data xattr refers to an external xattr inode
[  620.254462][T10129] device wg2 left promiscuous mode
[  620.255864][T10131] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2812: couldn't read orphan inode 17 (err -117)
[  620.271971][T10131] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  620.351914][ T8544] VFS: Lookup of '.' in ext4 loop9 would have caused loop
[  620.359569][ T8544] VFS: Lookup of '.' in ext4 loop9 would have caused loop
[  620.489250][ T9341] EXT4-fs (loop9): unmounting filesystem.
[  620.525385][  T506] tipc: Left network mode
[  620.672804][ T8807] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  620.863872][ T8807] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  620.876305][ T8807] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.890680][ T8807] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  620.899859][ T8807] usb 7-1: config 1 has no interface number 1
[  620.906054][ T8807] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  620.906831][T10153] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.918988][ T8807] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  620.920822][ T8807] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  620.926602][T10153] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.937578][ T8807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.947008][T10153] device bridge_slave_0 entered promiscuous mode
[  620.953749][ T8807] usb 7-1: Product: syz
[  620.972175][ T8807] usb 7-1: Manufacturer: syz
[  620.976875][ T8807] usb 7-1: SerialNumber: syz
[  620.981631][T10153] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.988795][T10153] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.996555][T10153] device bridge_slave_1 entered promiscuous mode
[  621.078951][T10153] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.086105][T10153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.093496][T10153] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.100552][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.131309][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  621.139446][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.147547][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.156582][  T506] device bridge_slave_1 left promiscuous mode
[  621.163102][  T506] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.170890][  T506] device bridge_slave_0 left promiscuous mode
[  621.177194][  T506] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.185730][  T506] device veth0 left promiscuous mode
[  621.191120][  T506] device veth1_macvtap left promiscuous mode
[  621.197628][  T506] device veth0_vlan left promiscuous mode
[  621.359240][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  621.462528][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  621.530915][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.538083][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.634601][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  621.679501][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  621.718544][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.725704][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.761983][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  621.770463][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  621.786792][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  621.795523][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  621.811662][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  621.828970][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  621.849223][   T24] usb 1-1: 1:0: bogus dB values (-12637/-11528), disabling dB reporting
[  621.862140][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  621.871480][   T24] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  621.873743][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  621.900542][   T24] usb 1-1: USB disconnect, device number 23
[  621.906556][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  621.962497][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  621.963695][ T1111] usbhid 3-1:0.0: can't add hid device: -71
[  621.981902][T10153] device veth0_vlan entered promiscuous mode
[  622.048281][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  622.102319][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  622.123184][T10153] device veth1_macvtap entered promiscuous mode
[  622.125252][ T1111] usbhid: probe of 3-1:0.0 failed with error -71
[  622.138202][ T1111] usb 3-1: USB disconnect, device number 13
[  622.524774][ T2045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  622.578109][ T2045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  622.616731][ T2045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  622.715130][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  622.724570][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  623.180060][T10182] futex_wake_op: syz.0.2822 tries to shift op by -1; fix this program
[  624.080413][ T8807] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  624.192948][ T8807] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  624.220955][ T8807] usb 7-1: USB disconnect, device number 39
[  624.240258][T10199] syz.0.2827[10199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.240344][T10199] syz.0.2827[10199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.266600][T10200] loop2: detected capacity change from 0 to 256
[  624.295602][T10200] FAT-fs (loop2): Directory bread(block 64) failed
[  624.302211][T10200] FAT-fs (loop2): Directory bread(block 65) failed
[  624.308905][T10200] FAT-fs (loop2): Directory bread(block 66) failed
[  624.315680][T10200] FAT-fs (loop2): Directory bread(block 67) failed
[  624.322274][T10200] FAT-fs (loop2): Directory bread(block 68) failed
[  624.328861][T10200] FAT-fs (loop2): Directory bread(block 69) failed
[  624.335487][T10200] FAT-fs (loop2): Directory bread(block 70) failed
[  624.342067][T10200] FAT-fs (loop2): Directory bread(block 71) failed
[  624.348688][T10200] FAT-fs (loop2): Directory bread(block 72) failed
[  624.355300][T10200] FAT-fs (loop2): Directory bread(block 73) failed
[  624.743809][    T6] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  624.922768][    T6] usb 1-1: Using ep0 maxpacket: 32
[  624.930867][    T6] usb 1-1: unable to get BOS descriptor or descriptor too short
[  624.945914][    T6] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  624.962707][    T6] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  624.985368][    T6] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  625.002806][    T6] usb 1-1: config 128 has no interface number 0
[  625.016779][    T6] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  625.052777][    T6] usb 1-1: config 128 interface 127 has no altsetting 0
[  625.074026][    T6] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  625.099744][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.122538][    T6] usb 1-1: Product: syz
[  625.135582][    T6] usb 1-1: Manufacturer: syz
[  625.140241][    T6] usb 1-1: SerialNumber: syz
[  625.194054][T10214] loop6: detected capacity change from 0 to 256
[  625.214800][T10214] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  625.271526][T10214] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  625.456425][T10199] kernel profiling enabled (shift: 17)
[  625.514164][ T1111] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.531245][T10214] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  625.550226][ T1111] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.601571][ T1111] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.690888][ T1111] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.767442][ T1111] rtc rtc0: __rtc_set_alarm: err=-22
[  626.059977][T10218] fuse: Bad value for 'user_id'
[  627.065779][    T6] snd-usb-audio: probe of 1-1:128.127 failed with error -12
[  627.095236][    T6] usb 1-1: USB disconnect, device number 24
[  627.226308][T10220] loop3: detected capacity change from 0 to 1024
[  627.409698][T10220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  627.501391][T10233] device batadv_slave_0 entered promiscuous mode
[  627.516707][T10234] loop2: detected capacity change from 0 to 128
[  627.526550][   T28] audit: type=1400 audit(630.503:1548): avc:  denied  { mounton } for  pid=10235 comm="syz.8.2837" path="/proc/395/task" dev="proc" ino=47850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  627.553429][ T8275] udevd[8275]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  627.575406][   T28] audit: type=1400 audit(630.533:1549): avc:  denied  { ioctl } for  pid=10232 comm="syz.2.2834" path="socket:[47853]" dev="sockfs" ino=47853 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  627.736410][T10242] loop6: detected capacity change from 0 to 512
[  627.751059][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2837'.
[  627.780763][T10242] EXT4-fs: Ignoring removed orlov option
[  627.798907][T10242] EXT4-fs (loop6): can't mount with both data=journal and delalloc
[  627.807069][T10244] input: syz0 as /devices/virtual/input/input84
[  628.099580][T10153] EXT4-fs (loop3): unmounting filesystem.
[  628.650112][T10231] device batadv_slave_0 left promiscuous mode
[  628.800936][   T28] audit: type=1400 audit(631.773:1550): avc:  denied  { execute } for  pid=10259 comm="syz.8.2842" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  628.824697][T10260] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  629.682326][T10260] SELinux: failed to load policy
[  629.950731][T10272] loop2: detected capacity change from 0 to 1024
[  629.971829][T10272] EXT4-fs: Ignoring removed bh option
[  630.377192][T10272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  630.473959][   T28] audit: type=1400 audit(633.453:1551): avc:  denied  { setattr } for  pid=10271 comm="syz.2.2845" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  631.524453][T10272] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.2845: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  631.527984][   T28] audit: type=1400 audit(634.503:1552): avc:  denied  { link } for  pid=10271 comm="syz.2.2845" name="#20" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  631.708986][T10272] EXT4-fs (loop2): Remounting filesystem read-only
[  631.947280][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  631.981369][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  631.993101][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  632.033001][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.039685][ T9692] EXT4-fs error (device loop2): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  632.076585][T10293] loop3: detected capacity change from 0 to 4096
[  632.083253][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.089794][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.112951][T10293] EXT4-fs: Ignoring removed mblk_io_submit option
[  632.154030][T10293] EXT4-fs (loop3): Test dummy encryption mode enabled
[  632.243121][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  632.294602][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.294870][T10293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  632.301250][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  632.363307][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.379324][ T9692] EXT4-fs error (device loop2): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  632.455446][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.462947][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.486735][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  632.509040][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.515710][ T9692] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  632.538526][ T9692] EXT4-fs (loop2): Remounting filesystem read-only
[  632.545299][ T9692] EXT4-fs error (device loop2): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  632.566007][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.581211][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.597208][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.612633][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.613494][T10153] EXT4-fs (loop3): unmounting filesystem.
[  632.630891][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.652969][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.668016][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  632.683446][ T9692] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  634.266360][ T7840] tipc: Disabling bearer <udp:syz2>
[  634.271913][ T7840] tipc: Left network mode
[  634.612624][T10332] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2863'.
[  634.678249][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'.
[  634.941321][ T7840] device bridge_slave_1 left promiscuous mode
[  634.965542][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.008655][ T7840] device bridge_slave_0 left promiscuous mode
[  635.035184][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.105434][ T7840] device veth1_macvtap left promiscuous mode
[  635.128103][ T7840] device veth0_vlan left promiscuous mode
[  635.239598][T10333] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.251153][T10333] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.259358][T10333] device bridge_slave_0 entered promiscuous mode
[  635.267070][T10333] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.274482][T10333] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.282370][T10333] device bridge_slave_1 entered promiscuous mode
[  635.464897][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  635.472645][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  635.485387][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  635.494104][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  635.502506][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.509644][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.526158][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  635.535046][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  635.551361][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  635.560144][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.567271][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.595211][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  635.633073][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  635.710386][T10363] loop3: detected capacity change from 0 to 256
[  635.806447][T10363] incfs: Error accessing: ./file0.
[  635.811808][T10363] incfs: mount failed -2
[  635.844872][T10363] loop3: detected capacity change from 0 to 512
[  635.869810][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  635.967453][T10363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2867: inode #1: comm syz.3.2867: iget: illegal inode #
[  635.982009][T10363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2867: error while reading EA inode 1 err=-117
[  635.996250][T10363] EXT4-fs (loop3): 1 orphan inode deleted
[  636.002077][T10363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  636.137382][   T28] audit: type=1400 audit(639.043:1553): avc:  denied  { relabelto } for  pid=10357 comm="syz.3.2867" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  636.204581][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  636.793600][T10153] EXT4-fs (loop3): unmounting filesystem.
[  636.825888][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  636.837101][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  636.847498][T10333] device veth0_vlan entered promiscuous mode
[  637.035060][T10362] tipc: Started in network mode
[  637.040414][T10362] tipc: Node identity 2007ff, cluster identity 4711
[  637.069656][T10362] tipc: Node number set to 2099199
[  637.130315][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  637.151483][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  637.202579][T10333] device veth1_macvtap entered promiscuous mode
[  637.244151][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  637.254455][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  638.577973][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  638.965149][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  638.978365][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  638.994892][  T288] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  639.070516][T10396] loop5: detected capacity change from 0 to 128
[  639.077829][T10396] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  639.097527][T10396] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  639.119545][   T28] audit: type=1400 audit(642.093:1554): avc:  denied  { watch watch_reads } for  pid=10395 comm="syz.5.2860" path="/0/file1" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  639.154441][  T570] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  639.263941][  T288] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  639.274014][  T288] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  639.284368][  T288] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  639.293449][  T288] usb 7-1: config 1 has no interface number 1
[  639.300112][  T288] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  639.313108][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  639.320753][  T288] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  639.333542][  T288] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  639.342708][  T288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.374838][  T288] usb 7-1: Product: syz
[  639.379134][  T288] usb 7-1: Manufacturer: syz
[  639.383826][  T288] usb 7-1: SerialNumber: syz
[  639.515524][   T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  639.524877][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  639.535184][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  639.544451][   T24] usb 4-1: config 1 has no interface number 1
[  639.551231][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  639.564278][   T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  639.577885][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  639.587178][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.603409][   T24] usb 4-1: Product: syz
[  639.607786][   T24] usb 4-1: Manufacturer: syz
[  639.612507][   T24] usb 4-1: SerialNumber: syz
[  641.092099][T10423] loop5: detected capacity change from 0 to 128
[  641.113776][ T8194] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  641.170109][T10426] loop5: detected capacity change from 0 to 256
[  641.179802][T10426] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  641.766282][  T288] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  641.774288][  T288] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  641.795716][T10436] loop6: detected capacity change from 0 to 2048
[  641.796877][  T288] usb 7-1: USB disconnect, device number 40
[  641.829836][   T28] audit: type=1400 audit(644.803:1555): avc:  denied  { setattr } for  pid=10437 comm="syz.8.2889" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  641.835168][ T8641] udevd[8641]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  641.887465][   T28] audit: type=1400 audit(644.863:1556): avc:  denied  { create } for  pid=10435 comm="syz.6.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  641.989326][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  641.999303][T10440] xt_bpf: check failed: parse error
[  642.006591][   T24] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  642.059533][T10451] loop3: detected capacity change from 0 to 256
[  642.065717][   T24] usb 4-1: USB disconnect, device number 40
[  642.068262][T10451] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  642.085479][T10451] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  642.104376][T10451] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  642.140121][T10454] loop6: detected capacity change from 0 to 256
[  642.147028][T10454] exfat: Unknown parameter 'ì
'
[  642.215677][ T8275] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  642.228519][T10457] loop5: detected capacity change from 0 to 256
[  642.387753][T10457] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  643.313366][   T28] audit: type=1400 audit(646.293:1557): avc:  denied  { sys_module } for  pid=10485 comm="syz.0.2906" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  643.334443][    T6] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  643.555327][    T6] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  643.564586][    T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  643.576017][    T6] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  643.586000][    T6] usb 7-1: config 1 has no interface number 1
[  643.592284][    T6] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  643.606426][    T6] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  643.626413][    T6] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  643.636012][    T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.644979][    T6] usb 7-1: Product: syz
[  643.649596][    T6] usb 7-1: Manufacturer: syz
[  643.655131][    T6] usb 7-1: SerialNumber: syz
[  644.607560][T10506] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2910'.
[  646.109060][    T6] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  646.224595][    T6] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  646.293723][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'.
[  646.327976][    T6] usb 7-1: USB disconnect, device number 41
[  646.359678][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'.
[  646.522402][T10550] loop6: detected capacity change from 0 to 256
[  646.570739][T10550] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  646.705122][T10556] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  646.905776][T10552] loop3: detected capacity change from 0 to 40427
[  646.917435][T10552] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  646.932525][T10552] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  646.975604][T10552] F2FS-fs (loop3): Found nat_bits in checkpoint
[  647.067056][T10552] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  647.074464][T10552] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  647.162779][   T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  647.555668][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.570831][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.598488][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  647.893136][T10570] syz.3.2924: attempt to access beyond end of device
[  647.893136][T10570] loop3: rw=34817, sector=77824, nr_sectors = 848 limit=40427
[  647.902695][   T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  647.926471][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.945394][   T24] usb 7-1: config 0 descriptor??
[  647.963142][T10577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2930'.
[  648.364523][   T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd
[  648.373957][   T24] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  648.393755][   T24] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  648.555041][T10153] syz-executor: attempt to access beyond end of device
[  648.555041][T10153] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  648.672486][T10559] loop6: detected capacity change from 0 to 2048
[  648.723215][T10559]  loop6: p1 < > p2 p3 < p5 > p4
[  648.728218][T10559] loop6: partition table partially beyond EOD, truncated
[  648.735668][T10559] loop6: p1 start 4278190080 is beyond EOD, truncated
[  648.742478][T10559] loop6: p2 start 16908800 is beyond EOD, truncated
[  648.767960][T10559] loop6: p4 start 11326 is beyond EOD, truncated
[  648.775774][T10559] loop6: p5 start 16908800 is beyond EOD, truncated
[  649.079656][T10606] tipc: Started in network mode
[  649.084660][T10606] tipc: Node identity d244e5262735, cluster identity 4711
[  649.091877][T10606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  649.099307][T10606] device syzkaller0 entered promiscuous mode
[  649.109936][T10606] tipc: Resetting bearer <eth:syzkaller0>
[  649.118521][T10606] loop3: detected capacity change from 0 to 128
[  649.130001][T10606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  649.149578][T10603] tipc: Resetting bearer <eth:syzkaller0>
[  649.160354][T10603] tipc: Disabling bearer <eth:syzkaller0>
[  649.286162][T10153] EXT4-fs (loop3): unmounting filesystem.
[  649.378013][T10623] device pim6reg1 entered promiscuous mode
[  649.570776][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2947'.
[  651.717267][ T9932] usb 7-1: reset high-speed USB device number 42 using dummy_hcd
[  653.235876][T10632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2948'.
[  653.360257][T10640] loop6: detected capacity change from 0 to 1024
[  653.378309][T10640] EXT4-fs: Ignoring removed bh option
[  653.462154][T10639] overlayfs: missing 'lowerdir'
[  653.757989][T10651] netlink: 'syz.0.2954': attribute type 11 has an invalid length.
[  653.778605][T10640] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  654.211286][ T1111] usb 7-1: USB disconnect, device number 42
[  654.591526][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  654.669679][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'.
[  654.704538][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  654.733416][T10667] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  654.771219][T10679] loop3: detected capacity change from 0 to 256
[  654.787352][T10680] IPv6: NLM_F_REPLACE set, but no existing node found!
[  654.827317][T10679] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  654.994089][T10688] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  655.002436][T10688] tipc: Enabled bearer <udp:s>, priority 1
[  655.024306][ T1111] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[  656.192004][T10691] loop3: detected capacity change from 0 to 256
[  656.205584][T10691] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  656.270318][T10699] loop5: detected capacity change from 0 to 512
[  656.336158][ T1111] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.391799][ T1111] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  656.442599][T10699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  656.475343][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.484780][ T1111] usb 7-1: config 0 descriptor??
[  656.522128][T10333] EXT4-fs (loop5): unmounting filesystem.
[  656.709637][T10714] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.716954][T10714] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.905655][T10716] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  656.966552][ T1111] nintendo 0003:057E:200E.000E: unbalanced delimiter at end of report description
[  656.987288][ T1111] nintendo 0003:057E:200E.000E: HID parse failed
[  657.026690][ T1111] nintendo 0003:057E:200E.000E: probe - fail = -22
[  657.033390][ T1111] nintendo: probe of 0003:057E:200E.000E failed with error -22
[  657.094834][T10734] loop5: detected capacity change from 0 to 4096
[  657.120062][T10734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  657.144931][T10734] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2977: corrupted inode contents
[  657.161124][   T37] usb 7-1: USB disconnect, device number 43
[  657.167541][T10734] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #15: comm syz.5.2977: mark_inode_dirty error
[  657.179473][T10734] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2977: corrupted inode contents
[  657.193220][T10734] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.2977: mark_inode_dirty error
[  657.205168][T10734] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2977: corrupted inode contents
[  657.217642][T10734] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.2977: mark_inode_dirty error
[  657.230309][T10734] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2977: corrupted inode contents
[  657.270865][T10734] EXT4-fs error (device loop5): ext4_truncate:4314: inode #15: comm syz.5.2977: mark_inode_dirty error
[  657.302570][T10734] EXT4-fs error (device loop5) in ext4_setattr:5660: Corrupt filesystem
[  657.376034][T10738] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2977: corrupted inode contents
[  657.839710][T10750] IPv6: Can't replace route, no match found
[  657.895356][T10757] input: syz1 as /devices/virtual/input/input88
[  657.902968][ T2044] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  658.086812][T10762] input: syz1 as /devices/virtual/input/input89
[  658.343611][T10764] loop3: detected capacity change from 0 to 1024
[  658.353948][T10764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  658.365365][ T2044] usb 6-1: Using ep0 maxpacket: 32
[  658.371725][ T2044] usb 6-1: config 0 has an invalid interface number: 18 but max is 0
[  658.385336][ T2044] usb 6-1: config 0 has no interface number 0
[  658.391493][ T2044] usb 6-1: config 0 interface 18 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  658.403431][T10764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  658.415031][ T2044] usb 6-1: config 0 interface 18 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  658.425604][ T2044] usb 6-1: config 0 interface 18 has no altsetting 0
[  658.444635][ T2044] usb 6-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=6c.e0
[  658.454265][ T2044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.456487][T10153] EXT4-fs (loop3): unmounting filesystem.
[  658.462508][ T2044] usb 6-1: Product: syz
[  658.472680][ T2044] usb 6-1: Manufacturer: syz
[  658.478127][ T2044] usb 6-1: SerialNumber: syz
[  658.484303][ T2044] r8152-cfgselector 6-1: config 0 descriptor??
[  658.491247][T10734] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  658.498795][T10734] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  659.275470][T10734] input: syz0 as /devices/virtual/input/input90
[  659.509908][ T2044] r8152-cfgselector 6-1: Unknown version 0x0000
[  659.520406][ T2044] r8152-cfgselector 6-1: Unknown version 0x0000
[  659.535306][ T2044] r8152-cfgselector 6-1: USB disconnect, device number 2
[  659.762801][   T37] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  660.792796][   T37] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  660.801305][   T37] usb 1-1: config 179 has no interface number 0
[  660.807896][   T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  660.819314][   T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  660.829885][   T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  660.841396][   T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  660.855768][T10793] loop6: detected capacity change from 0 to 512
[  660.863013][   T37] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  660.876546][   T37] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  660.886269][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.898828][T10783] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  660.908034][T10793] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  660.972381][   T37] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  661.020158][   T37] xpad: probe of 1-1:179.65 failed with error -5
[  661.100981][T10793] EXT4-fs (loop6): 1 truncate cleaned up
[  661.106809][T10793] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  661.161330][T10333] EXT4-fs (loop5): unmounting filesystem.
[  661.308403][T10783] SELinux: ebitmap: truncated map
[  661.387362][T10783] SELinux: failed to load policy
[  661.475033][   T37] usb 1-1: USB disconnect, device number 25
[  661.749890][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  661.761954][T10807] loop3: detected capacity change from 0 to 1024
[  661.779669][T10807] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  661.811475][T10807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  661.847114][T10153] EXT4-fs (loop3): unmounting filesystem.
[  661.968258][T10818] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[  661.988933][T10818] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  662.152814][   T28] audit: type=1400 audit(665.093:1558): avc:  denied  { ioctl } for  pid=10815 comm="syz.3.2997" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  662.335382][T10834] netlink: 'syz.0.3000': attribute type 15 has an invalid length.
[  662.352091][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3000'.
[  662.552672][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2999'.
[  662.769675][T10842] netlink: 'syz.8.3002': attribute type 12 has an invalid length.
[  663.461346][T10866] loop6: detected capacity change from 0 to 1024
[  663.486667][T10866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  663.783280][T10866] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  663.911034][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  664.940532][   T37] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  665.049704][T10908] loop5: detected capacity change from 0 to 16
[  665.094402][T10908] erofs: (device loop5): mounted with root inode @ nid 36.
[  665.109194][T10908] incfs: Can't find or create .index dir in ./file0
[  665.116150][T10908] incfs: mount failed -30
[  665.155272][   T37] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  665.204181][   T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  665.325164][   T37] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  665.411552][   T37] usb 1-1: config 1 has no interface number 1
[  665.489417][   T37] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  665.807355][T10913] loop6: detected capacity change from 0 to 1024
[  665.824087][   T37] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  665.933037][T10913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  665.947921][   T37] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  666.323298][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.324914][T10913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  666.462427][   T37] usb 1-1: Product: syz
[  666.473253][   T37] usb 1-1: Manufacturer: syz
[  666.477988][   T37] usb 1-1: SerialNumber: syz
[  666.499725][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  666.743603][T10929] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  667.822797][ T2044] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  668.252787][ T2044] usb 6-1: Using ep0 maxpacket: 32
[  668.259108][ T2044] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  668.284409][ T2044] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  668.302845][ T2044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.323782][ T2044] usb 6-1: config 0 descriptor??
[  668.561885][T10946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  668.570815][T10946] overlayfs: missing 'lowerdir'
[  668.671744][T10952] loop3: detected capacity change from 0 to 2048
[  668.689955][T10952] EXT4-fs (loop3): blocks per group (262144) and clusters per group (16384) inconsistent
[  668.755814][ T2044] kye 0003:0458:5015.000F: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  668.778316][ T2044] kye 0003:0458:5015.000F: tablet-enabling feature report not found
[  668.793324][   T37] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  668.801249][   T37] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  668.803892][ T2044] kye 0003:0458:5015.000F: tablet enabling failed
[  668.825163][T10957] binder: 10954:10957 unknown command 0
[  668.829877][   T37] usb 1-1: USB disconnect, device number 26
[  668.851108][T10957] binder: 10954:10957 ioctl c0306201 200000000080 returned -22
[  668.876408][T10960] binder: 10954:10960 ioctl c0109428 200000000240 returned -22
[  668.908151][T10957] binder_alloc: 10954: binder_alloc_buf, no vma
[  668.942336][ T2044] usb 6-1: USB disconnect, device number 3
[  669.025250][T10972] loop6: detected capacity change from 0 to 1024
[  669.032106][T10972] EXT4-fs: Ignoring removed i_version option
[  669.040511][T10972] EXT4-fs (loop6): Test dummy encryption mode enabled
[  669.067027][T10974] loop3: detected capacity change from 0 to 512
[  669.084264][T10972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  669.093992][T10974] ext2: Unknown parameter 'pcr'
[  669.171084][ T8422] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  669.672874][   T28] audit: type=1400 audit(672.653:1559): avc:  denied  { create } for  pid=10985 comm="syz.8.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  669.746547][T10987] raw_sendmsg: syz.8.3042 forgot to set AF_INET. Fix it!
[  670.938853][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  671.772211][T11015] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  672.132647][T11019] loop5: detected capacity change from 0 to 512
[  672.147837][T11019] EXT4-fs: Ignoring removed nomblk_io_submit option
[  672.204385][T11019] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  672.235767][T11019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102]
[  672.253055][T11025] tipc: Cannot configure node identity twice
[  672.263593][T11019] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  672.288968][T11019] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[  672.297909][T11019] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  672.360038][T11019] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.3051: dx entry: limit 65535 != root limit 120
[  672.432805][T11019] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3051: Corrupt directory, running e2fsck is recommended
[  672.461543][T10333] EXT4-fs (loop5): unmounting filesystem.
[  672.498647][T11036] loop5: detected capacity change from 0 to 1024
[  673.327983][T11036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  673.639792][T11036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  673.678811][T11055] binder: 11054:11055 unknown command 0
[  673.684579][T11055] binder: 11054:11055 ioctl c0306201 200000000080 returned -22
[  673.746043][T10333] EXT4-fs (loop5): unmounting filesystem.
[  673.841455][T11058] loop3: detected capacity change from 0 to 2048
[  673.879123][T11058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  673.918422][ T7840] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  674.230289][ T7840] EXT4-fs (loop3): Remounting filesystem read-only
[  674.264796][T10153] EXT4-fs (loop3): unmounting filesystem.
[  674.562809][ T2044] usb 7-1: new low-speed USB device number 44 using dummy_hcd
[  675.682260][T11088] loop3: detected capacity change from 0 to 1024
[  675.711987][T11088] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  675.754628][ T2044] usb 7-1: descriptor type invalid, skip
[  675.760328][ T2044] usb 7-1: descriptor type invalid, skip
[  675.772756][ T2044] usb 7-1: No LPM exit latency info found, disabling LPM.
[  675.780771][ T2044] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  675.810396][T11088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  675.830841][ T2044] usb 7-1: config 1 interface 0 has no altsetting 0
[  675.855443][ T2044] usb 7-1: string descriptor 0 read error: -22
[  675.886900][ T2044] usb 7-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40
[  675.932492][ T2044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.946948][T11072] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  675.967726][T10153] EXT4-fs (loop3): unmounting filesystem.
[  676.396143][ T2044] usbhid 7-1:1.0: can't add hid device: -71
[  676.406289][ T2044] usbhid: probe of 7-1:1.0 failed with error -71
[  676.413664][ T2044] usb 7-1: USB disconnect, device number 44
[  679.342521][T11146] loop3: detected capacity change from 0 to 1024
[  679.382044][T11146] EXT4-fs: Ignoring removed nomblk_io_submit option
[  679.527161][T11146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  679.913959][T11161] device macsec1 entered promiscuous mode
[  680.036083][   T28] audit: type=1400 audit(683.013:1560): avc:  denied  { mounton } for  pid=11163 comm="syz.0.3095" path="/80/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  680.135289][  T570] tipc: Disabling bearer <udp:s>
[  680.140797][  T570] tipc: Left network mode
[  680.203418][T10153] EXT4-fs (loop3): unmounting filesystem.
[  680.838468][  T570] device bridge_slave_1 left promiscuous mode
[  680.845382][  T570] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.853985][  T570] device bridge_slave_0 left promiscuous mode
[  680.860259][  T570] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.877086][  T570] device veth1_macvtap left promiscuous mode
[  680.885025][  T570] device veth0_vlan left promiscuous mode
[  681.002549][T11185] loop5: detected capacity change from 0 to 256
[  681.017730][T11185] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  681.042845][T11185] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  681.067150][T11185] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  681.144269][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.193290][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.212866][T11181] device bridge_slave_0 entered promiscuous mode
[  681.219994][T11181] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.227282][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.236923][T11181] device bridge_slave_1 entered promiscuous mode
[  681.485114][T11181] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.492224][T11181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.499572][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.506631][T11181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.720452][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.742409][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.755198][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  681.824597][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  681.857971][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  681.877819][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.884982][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.893692][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  681.902060][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.909188][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.927323][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  681.935832][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  681.953119][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  681.967600][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  681.975867][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  681.983853][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  681.991534][T11181] device veth0_vlan entered promiscuous mode
[  682.005278][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  682.015213][T11181] device veth1_macvtap entered promiscuous mode
[  682.027173][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  682.038702][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  682.096074][T11215] binder: binder_mmap: 11214 200000000000-200000b36000 bad vm_flags failed -1
[  682.105626][   T28] audit: type=1400 audit(685.073:1561): avc:  denied  { append } for  pid=11214 comm="syz.4.3109" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  682.739651][T11236] loop4: detected capacity change from 0 to 512
[  682.747502][T11236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  682.861979][T11236] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  682.875871][T11236] System zones: 0-2, 18-18, 34-34
[  682.977396][T11236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  682.994794][T11236] EXT4-fs (loop4): unmounting filesystem.
[  683.131115][T11245] loop3: detected capacity change from 0 to 1024
[  683.138530][T11245] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  683.155213][T11245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  683.654605][T10153] EXT4-fs (loop3): unmounting filesystem.
[  684.571876][T11257] loop5: detected capacity change from 0 to 128
[  684.821868][   T28] audit: type=1400 audit(687.713:1562): avc:  denied  { create } for  pid=11256 comm="syz.5.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  685.686363][T11274] loop5: detected capacity change from 0 to 512
[  685.730187][T11274] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  685.813589][T11274] EXT4-fs (loop5): orphan cleanup on readonly fs
[  685.820094][T11274] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.3125: Block bitmap for bg 0 marked uninitialized
[  685.843729][T11274] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  685.859119][T11274] EXT4-fs (loop5): 1 orphan inode deleted
[  685.869310][T11283] tipc: Started in network mode
[  685.874362][T11274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  685.893656][T11283] tipc: Node identity 2007ff, cluster identity 4711
[  685.919387][T11283] tipc: Node number set to 2099199
[  685.960646][T11270] loop3: detected capacity change from 0 to 40427
[  686.043138][T11270] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  686.049820][T11270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  686.196304][T11270] F2FS-fs (loop3): Found nat_bits in checkpoint
[  686.332936][T10720] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  686.408003][T11270] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  686.416333][T11270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  686.584978][T10720] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  686.602768][T10720] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  686.622887][T10720] usb 6-1: config 1 interface 0 has no altsetting 0
[  686.635080][T10720] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  686.665045][T10720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.682799][T10720] usb 6-1: Product: Щ
[  686.686989][T10720] usb 6-1: Manufacturer: Ќ
[  686.692651][T10720] usb 6-1: SerialNumber: 텛ἥ䅷Ԣ켣䇜�沉ⲿʋ듫謢显맆�謂뉿ｲꢖ꟦�㺕�︪۸倖�㇒Ш藺ᖾ�墆튜蹘䎰嫀竈㎤귩♜֥휂䅨Ტᵲￗ䂵좋셼䬞턣ﶪ�칟凢銻辌�녠ች抿㕒黤�젷ⳳ鮤귆嫫떺創뽒顔�핧냱궚ྉ粲ꔜ�炶�謆煭銒ꫡ࣠立ힳ丵뮂≎釳礡�柎ퟋ惧⣰皱휰�㌷錆࠼禤
[  686.763604][T11310] loop6: detected capacity change from 0 to 256
[  686.786305][T11310] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  686.811642][T11312] loop4: detected capacity change from 0 to 512
[  686.825215][T11310] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  687.096607][T10720] cdc_ether: probe of 6-1:1.0 failed with error -22
[  687.098301][ T8275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  687.113801][T10720] usb 6-1: USB disconnect, device number 4
[  687.186278][T11312] loop4: detected capacity change from 0 to 1024
[  687.195261][ T8275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  687.251816][T11312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  687.330330][T11325] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  687.664732][T11181] EXT4-fs (loop4): unmounting filesystem.
[  687.792477][T10333] EXT4-fs (loop5): unmounting filesystem.
[  687.805097][T11330] device macsec1 entered promiscuous mode
[  687.854667][T11336] loop5: detected capacity change from 0 to 1024
[  687.870257][T11336] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  687.885399][T11336] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  687.996258][T10333] EXT4-fs (loop5): unmounting filesystem.
[  688.266339][ T8807] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  688.634110][ T8807] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  688.643006][ T8807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.653314][ T8807] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  688.662293][ T8807] usb 5-1: config 1 has no interface number 1
[  688.668529][ T8807] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  688.681792][ T8807] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  688.702970][ T8807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  688.712078][ T8807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.720224][ T8807] usb 5-1: Product: syz
[  688.724454][ T8807] usb 5-1: Manufacturer: syz
[  688.729082][ T8807] usb 5-1: SerialNumber: syz
[  689.439358][T11388] loop5: detected capacity change from 0 to 1024
[  689.475610][T11388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  689.515150][T11388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  689.823701][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  689.884909][T10333] EXT4-fs (loop5): unmounting filesystem.
[  689.986363][T11410] loop5: detected capacity change from 0 to 4096
[  689.997413][T11410] EXT4-fs: Ignoring removed mblk_io_submit option
[  690.193905][T11410] EXT4-fs (loop5): Test dummy encryption mode enabled
[  690.205317][T11410] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  690.338665][T11415] overlayfs: unrecognized mount option "fsmagic=0x0000000000000005" or missing value
[  690.348356][T10721] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  690.512776][T10721] usb 7-1: device descriptor read/64, error -71
[  690.764691][T10333] EXT4-fs (loop5): unmounting filesystem.
[  690.812297][T11419] loop5: detected capacity change from 0 to 256
[  690.834822][T11419] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  691.195105][ T8807] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  691.209348][ T8807] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  691.243742][ T8807] usb 5-1: USB disconnect, device number 47
[  691.284181][T11424] loop4: detected capacity change from 0 to 512
[  691.290966][T11424] EXT4-fs: Ignoring removed nobh option
[  691.296644][T11424] ext4: Unknown parameter 'fsuuid'
[  691.513328][ T8642] udevd[8642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  691.550558][T10721] usb 7-1: device descriptor read/64, error -71
[  691.557366][ T8275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  692.013106][T10721] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[  692.124018][T11434] cgroup: noprefix used incorrectly
[  692.182762][T10721] usb 7-1: device descriptor read/64, error -71
[  692.435229][T11440] loop3: detected capacity change from 0 to 1024
[  692.442571][T11440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  692.452784][T10721] usb 7-1: device descriptor read/64, error -71
[  692.474675][T11440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  692.495010][T10153] EXT4-fs (loop3): unmounting filesystem.
[  692.574294][T10721] usb usb7-port1: attempt power cycle
[  692.610097][T11449] loop5: detected capacity change from 0 to 4096
[  692.617440][T11449] EXT4-fs: Ignoring removed mblk_io_submit option
[  692.624861][T11449] EXT4-fs (loop5): Test dummy encryption mode enabled
[  692.637168][T11452] loop6: detected capacity change from 0 to 256
[  692.652825][T11449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  693.221036][T11452] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  693.251650][ T2044] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  693.280297][ T2044] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  693.406779][T10333] EXT4-fs (loop5): unmounting filesystem.
[  693.421226][T11464] loop3: detected capacity change from 0 to 1024
[  693.443098][T11464] EXT4-fs: Ignoring removed bh option
[  693.450058][T11464] EXT4-fs: Ignoring removed nomblk_io_submit option
[  693.484373][T11464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  693.620567][T10720] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  693.865873][T10720] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  693.894817][T10720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.906478][T10720] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  693.917112][T10720] usb 5-1: config 1 has no interface number 1
[  693.954922][T10720] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  693.988855][T10720] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  694.004833][T10720] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  694.014879][T10720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.024536][T10720] usb 5-1: Product: syz
[  694.029317][T10720] usb 5-1: Manufacturer: syz
[  694.035566][T10720] usb 5-1: SerialNumber: syz
[  694.759891][T10153] EXT4-fs (loop3): unmounting filesystem.
[  694.901350][T11486] loop3: detected capacity change from 0 to 1024
[  694.923141][T11486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  694.963862][T11491] loop5: detected capacity change from 0 to 256
[  694.965166][T11486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  695.541215][T11491] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  695.554371][T10153] EXT4-fs (loop3): unmounting filesystem.
[  695.668763][T11500] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  695.934035][T11502] loop3: detected capacity change from 0 to 1024
[  695.940986][T11502] EXT4-fs: Ignoring removed i_version option
[  695.972185][T11502] EXT4-fs (loop3): Test dummy encryption mode enabled
[  696.017335][T11502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  696.019453][T11512] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  696.370772][T11502] bridge0: port 3(vlan2) entered blocking state
[  696.377338][T11502] bridge0: port 3(vlan2) entered disabled state
[  696.455550][T10153] EXT4-fs (loop3): unmounting filesystem.
[  696.578439][T10720] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  696.592771][T10720] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  696.623016][T10720] usb 5-1: USB disconnect, device number 48
[  696.639616][T11530] netlink: 'syz.4.3198': attribute type 13 has an invalid length.
[  696.655007][T11530] netlink: 'syz.4.3198': attribute type 17 has an invalid length.
[  696.717843][T11530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  696.825808][T11533] loop5: detected capacity change from 0 to 1024
[  696.841055][ T8194] udevd[8194]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  696.867871][T11536] loop6: detected capacity change from 0 to 256
[  696.874680][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  696.884582][T11533] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  696.893483][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  696.927989][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  696.937022][T11536] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  696.945227][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  696.981384][T11533] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  696.983366][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  697.001785][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  697.014945][T11546] loop6: detected capacity change from 0 to 1024
[  697.023202][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  697.031636][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  697.040093][T11546] EXT4-fs: Ignoring removed bh option
[  697.047216][T11546] EXT4-fs: Ignoring removed nomblk_io_submit option
[  697.066202][T11552] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3205'.
[  697.068352][T11546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  697.096373][T10333] EXT4-fs (loop5): unmounting filesystem.
[  697.247664][T11559] loop5: detected capacity change from 0 to 256
[  697.263011][T11559] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  697.273759][T11559] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  697.284828][T11559] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  697.455512][T11546] fuseblk: Bad value for 'fd'
[  697.506374][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  698.467894][T11574] fuse: Bad value for 'fd'
[  698.694605][T11580] loop6: detected capacity change from 0 to 256
[  698.716538][T11580] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  698.820329][T11585] loop6: detected capacity change from 0 to 1024
[  698.857203][T11585] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  698.862911][T11586] overlayfs: './file0' not a directory
[  698.890084][T11585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  698.930993][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  699.205154][T11599] loop4: detected capacity change from 0 to 512
[  699.215311][T11599] EXT4-fs: Ignoring removed nomblk_io_submit option
[  699.223196][T11599] EXT4-fs (loop4): Test dummy encryption mode enabled
[  699.231658][T11599] EXT4-fs (loop4): 1 truncate cleaned up
[  699.241056][T11599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  699.242809][ T2044] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  700.258653][T11181] EXT4-fs (loop4): unmounting filesystem.
[  700.849332][   T28] audit: type=1400 audit(703.823:1563): avc:  denied  { create } for  pid=11619 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  700.870027][ T2044] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  700.880089][ T2044] usb 6-1: config 0 has no interface number 0
[  700.886406][ T2044] usb 6-1: New USB device found, idVendor=043e, idProduct=0000, bcdDevice= 0.00
[  700.895698][ T2044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.908891][ T2044] usb 6-1: config 0 descriptor??
[  700.915735][ T2044] usb-storage 6-1:0.133: USB Mass Storage device detected
[  701.497199][  T288] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  701.682755][  T288] usb 5-1: Using ep0 maxpacket: 16
[  701.690715][  T288] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  701.700285][  T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.708552][  T288] usb 5-1: Product: syz
[  701.713063][  T288] usb 5-1: Manufacturer: syz
[  701.717752][  T288] usb 5-1: SerialNumber: syz
[  701.735551][  T288] r8152-cfgselector 5-1: config 0 descriptor??
[  701.747366][T11635] loop3: detected capacity change from 0 to 512
[  701.774876][T11635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  701.785922][T11635] EXT4-fs (loop3): unmounting filesystem.
[  702.602717][  T288] r8152-cfgselector 5-1: Unknown version 0x0000
[  702.865876][ T2044] usb 6-1: USB disconnect, device number 5
[  702.928368][  T288] r8152-cfgselector 5-1: USB disconnect, device number 49
[  702.953813][T11658] incfs: Options parsing error. -22
[  702.967545][T11658] incfs: mount failed -22
[  703.008032][T11662] loop5: detected capacity change from 0 to 256
[  703.027295][T11662] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  703.416078][  T102] udevd[102]: worker [8422] terminated by signal 33 (Unknown signal 33)
[  703.434431][  T102] udevd[102]: worker [8422] failed while handling '/devices/virtual/block/loop8'
[  703.517588][T11683] loop4: detected capacity change from 0 to 1024
[  703.541982][  T102] udevd[102]: worker [8275] terminated by signal 33 (Unknown signal 33)
[  703.551827][  T102] udevd[102]: worker [8275] failed while handling '/devices/virtual/block/loop4'
[  703.563631][T11683] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  703.625547][T11683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  703.647655][T11181] EXT4-fs (loop4): unmounting filesystem.
[  705.612624][T11706] loop3: detected capacity change from 0 to 256
[  705.632982][T11706] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  706.446117][ T2044] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  706.527717][T11720] loop6: detected capacity change from 0 to 40427
[  706.535484][T11720] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  706.542248][T11720] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  706.555422][T11720] F2FS-fs (loop6): Found nat_bits in checkpoint
[  707.181308][   T28] audit: type=1400 audit(709.943:1564): avc:  denied  { ioctl } for  pid=11724 comm="syz.4.3257" path="socket:[54167]" dev="sockfs" ino=54167 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  707.791935][T11720] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  707.799184][ T2044] usb 4-1: Using ep0 maxpacket: 32
[  707.804484][T11720] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  710.142854][ T2044] usb 4-1: unable to get BOS descriptor or descriptor too short
[  710.152054][T11749] loop5: detected capacity change from 0 to 512
[  710.159006][ T2044] usb 4-1: unable to read config index 0 descriptor/start: -71
[  710.192757][ T2044] usb 4-1: can't read configurations, error -71
[  710.286359][T11749] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3263: casefold flag without casefold feature
[  710.333324][T11749] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3263: couldn't read orphan inode 15 (err -117)
[  710.372890][T11749] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  710.464148][T10333] EXT4-fs (loop5): unmounting filesystem.
[  712.502235][T11794] loop6: detected capacity change from 0 to 256
[  712.521385][T11794] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  712.632800][   T37] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  712.854765][   T37] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  712.876979][   T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.931572][   T37] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  712.941336][   T37] usb 6-1: config 1 has no interface number 1
[  712.947683][   T37] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  712.960825][   T37] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  712.981364][   T37] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  712.990664][   T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.998960][   T37] usb 6-1: Product: syz
[  713.003446][   T37] usb 6-1: Manufacturer: syz
[  713.008121][   T37] usb 6-1: SerialNumber: syz
[  713.018283][T11797] loop6: detected capacity change from 0 to 40427
[  713.025875][T11797] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  713.032669][T11797] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  713.043481][T11797] F2FS-fs (loop6): Found nat_bits in checkpoint
[  713.079869][T11797] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  713.087113][T11797] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  713.360156][T11805] syz.6.3279: attempt to access beyond end of device
[  713.360156][T11805] loop6: rw=34817, sector=77824, nr_sectors = 848 limit=40427
[  713.580514][   T28] audit: type=1400 audit(716.553:1565): avc:  denied  { accept } for  pid=11806 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  713.735563][T11815] loop3: detected capacity change from 0 to 1024
[  713.765806][T11815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  714.244600][ T4201] syz-executor: attempt to access beyond end of device
[  714.244600][ T4201] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  714.404669][T11826] loop4: detected capacity change from 0 to 256
[  714.419263][T11826] exfat: Deprecated parameter 'namecase'
[  714.431408][T11826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  714.907045][T10153] EXT4-fs (loop3): unmounting filesystem.
[  715.273695][T11838] loop6: detected capacity change from 0 to 256
[  715.341579][   T37] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  715.353437][   T37] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  715.365375][T11838] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  715.415605][T11844] loop5: detected capacity change from 0 to 512
[  715.425100][T10720] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  715.450799][T11844] EXT4-fs (loop5): Test dummy encryption mode enabled
[  715.460343][   T37] usb 6-1: USB disconnect, device number 6
[  715.483923][T11844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  715.614685][T10720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.648987][T10720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  715.688130][T10720] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  715.713440][ T8641] udevd[8641]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  715.813349][T10720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  715.821468][T10720] usb 4-1: SerialNumber: syz
[  715.828893][T11844] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3291: bad orphan inode 131083
[  715.848886][T11844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  715.872162][   T28] audit: type=1326 audit(718.843:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  715.896883][   T28] audit: type=1326 audit(718.843:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.707600][   T28] audit: type=1326 audit(718.873:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.748694][   T28] audit: type=1326 audit(718.873:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.822354][   T28] audit: type=1326 audit(718.873:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.852907][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3291'.
[  716.892237][   T28] audit: type=1326 audit(718.893:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.929348][T11861] device vlan2 entered promiscuous mode
[  716.955552][   T28] audit: type=1326 audit(719.093:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  716.980728][T11861] device gretap0 entered promiscuous mode
[  717.008434][   T28] audit: type=1326 audit(719.093:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  717.064854][   T28] audit: type=1326 audit(719.683:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff0e778ebe9 code=0x7ffc0000
[  717.312748][   T37] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  717.327309][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'.
[  717.356577][T11870] device macsec1 entered promiscuous mode
[  717.362369][T11870] device vlan1 entered promiscuous mode
[  717.388917][T11871] loop4: detected capacity change from 0 to 512
[  717.410399][T11870] device vlan1 left promiscuous mode
[  717.423791][T11871] EXT4-fs: Ignoring removed oldalloc option
[  717.469073][T11871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  717.502875][   T37] usb 7-1: Using ep0 maxpacket: 8
[  717.531983][   T37] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  717.602490][   T37] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.643383][   T37] usb 7-1: config 0 has no interface number 0
[  717.663192][   T37] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  717.691553][   T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.713902][   T37] usb 7-1: Product: syz
[  717.724668][   T37] usb 7-1: Manufacturer: syz
[  717.736966][   T37] usb 7-1: SerialNumber: syz
[  717.756124][   T37] usb 7-1: config 0 descriptor??
[  717.771262][   T37] usb 7-1: Found UVC 0.04 device syz (046d:08c3)
[  717.788778][   T37] usb 7-1: No valid video chain found.
[  717.948020][T10720] usb 4-1: 0:2 : does not exist
[  717.984497][T10720] usb 4-1: USB disconnect, device number 44
[  717.998949][ T1111] usb 7-1: USB disconnect, device number 48
[  718.352332][T11181] EXT4-fs (loop4): unmounting filesystem.
[  719.005946][T10333] EXT4-fs (loop5): unmounting filesystem.
[  719.143962][T11902] loop5: detected capacity change from 0 to 1024
[  719.152495][T11902] EXT4-fs: Ignoring removed bh option
[  719.162813][T11902] EXT4-fs: Ignoring removed nomblk_io_submit option
[  719.184663][T11902] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  719.265847][T11904] input: syz1 as /devices/virtual/input/input93
[  719.552851][ T2044] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  720.599487][T10333] EXT4-fs (loop5): unmounting filesystem.
[  720.633864][ T2044] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  720.653009][ T2044] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  720.945370][ T2044] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  720.954436][ T2044] usb 7-1: config 1 has no interface number 1
[  720.960568][ T2044] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  720.973414][ T2044] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  720.994026][ T2044] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  721.012722][ T2044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.020786][ T2044] usb 7-1: Product: syz
[  721.032729][ T2044] usb 7-1: Manufacturer: syz
[  721.037389][ T2044] usb 7-1: SerialNumber: syz
[  721.123528][T11921] loop5: detected capacity change from 0 to 40427
[  721.134543][T11921] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  721.141341][T11921] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  721.152627][T11921] F2FS-fs (loop5): Found nat_bits in checkpoint
[  721.205807][T11921] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  721.213300][T11921] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  721.561243][T11935] syz.5.3313: attempt to access beyond end of device
[  721.561243][T11935] loop5: rw=34817, sector=77824, nr_sectors = 848 limit=40427
[  722.886389][T11953] loop6: detected capacity change from 0 to 1024
[  722.894638][ T2044] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  722.902503][ T2044] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  722.957534][T11953] EXT4-fs: Ignoring removed bh option
[  722.963152][T11953] EXT4-fs: Ignoring removed nomblk_io_submit option
[  722.995727][ T2044] usb 7-1: USB disconnect, device number 49
[  723.207000][T11953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  723.378500][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  723.378517][   T28] audit: type=1400 audit(726.353:1581): avc:  denied  { remount } for  pid=11965 comm="syz.8.3325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  723.404137][   T28] audit: type=1400 audit(726.353:1582): avc:  denied  { mounton } for  pid=11965 comm="syz.8.3325" path="/223/file0" dev="ramfs" ino=55076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  723.483467][ T8642] udevd[8642]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  723.508218][T11966] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  723.543660][   T28] audit: type=1400 audit(726.523:1583): avc:  denied  { unmount } for  pid=8207 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  724.136526][T10333] syz-executor: attempt to access beyond end of device
[  724.136526][T10333] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  724.444877][T11980] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  724.515064][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  724.794111][   T28] audit: type=1400 audit(727.773:1584): avc:  granted  { setsecparam } for  pid=11985 comm="syz.3.3334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  724.795563][T11989] tipc: Started in network mode
[  724.829150][T11989] tipc: Node identity 527639a02ab6, cluster identity 4711
[  724.844801][T11989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.852611][T11990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3332'.
[  724.902271][T11990] netem: change failed
[  724.910160][T11992] device syzkaller0 entered promiscuous mode
[  724.918798][T11989] tipc: Resetting bearer <eth:syzkaller0>
[  724.925873][T11987] tipc: Resetting bearer <eth:syzkaller0>
[  724.958768][T11987] tipc: Disabling bearer <eth:syzkaller0>
[  724.969438][T12000] binder: 11999:12000 ioctl 4018620d 0 returned -22
[  726.121518][T12011] loop3: detected capacity change from 0 to 1024
[  726.129313][T12011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  726.172362][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3339'.
[  726.290609][T12014] device bridge_slave_1 left promiscuous mode
[  726.325840][T12011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  726.334464][T12014] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.689394][T12014] device bridge_slave_0 left promiscuous mode
[  726.695715][T12014] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.784874][T10153] EXT4-fs (loop3): unmounting filesystem.
[  727.508454][T12040] overlayfs: missing 'lowerdir'
[  727.572830][ T2044] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  727.731181][T12044] loop4: detected capacity change from 0 to 4096
[  727.741797][T12044] EXT4-fs: Ignoring removed mblk_io_submit option
[  727.749165][T12044] EXT4-fs (loop4): Test dummy encryption mode enabled
[  727.766333][ T2044] usb 6-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config
[  727.786164][ T2044] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  727.833027][ T2044] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  727.844863][T12044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  728.178869][ T2044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.188178][ T2044] usb 6-1: config 0 descriptor??
[  728.257396][   T28] audit: type=1400 audit(731.233:1585): avc:  denied  { read } for  pid=12055 comm="syz.8.3352" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  728.330892][T12058] loop6: detected capacity change from 0 to 1024
[  728.338148][T12058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  728.354353][T12058] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  728.378276][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  728.393292][T11181] EXT4-fs (loop4): unmounting filesystem.
[  728.406026][T12028] loop5: detected capacity change from 0 to 1024
[  728.454150][ T8194] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  728.683449][   T28] audit: type=1400 audit(731.663:1586): avc:  denied  { ioctl } for  pid=12055 comm="syz.8.3352" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  728.712821][T10720] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  728.773170][T12074] overlayfs: './file0' not a directory
[  728.787239][T12074] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  728.806027][ T2044] usb 6-1: string descriptor 0 read error: -71
[  728.814023][ T2044] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  728.822527][T12074] FAT-fs (loop13): unable to read boot sector
[  728.832474][ T2044] usb 6-1: USB disconnect, device number 7
[  728.892732][   T37] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  728.914243][T10720] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  728.932792][T10720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.944219][T10720] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  728.955468][T10720] usb 5-1: config 1 has no interface number 1
[  728.961638][T10720] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  728.974617][T10720] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  728.996106][T10720] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  729.005239][T10720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.013398][T10720] usb 5-1: Product: syz
[  729.017586][T10720] usb 5-1: Manufacturer: syz
[  729.032804][T10720] usb 5-1: SerialNumber: syz
[  729.094126][   T37] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.115332][   T37] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  729.128530][   T37] usb 4-1: config 0 interface 0 has no altsetting 0
[  729.135447][   T37] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  729.157765][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.167044][   T37] usb 4-1: config 0 descriptor??
[  729.172781][ T8807] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  729.373883][ T8807] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[  729.432356][ T8807] usb 7-1: config 0 has no interface number 0
[  729.439147][ T8807] usb 7-1: New USB device found, idVendor=043e, idProduct=0000, bcdDevice= 0.00
[  729.448568][ T8807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.457943][ T8807] usb 7-1: config 0 descriptor??
[  729.465508][ T8807] usb-storage 7-1:0.133: USB Mass Storage device detected
[  729.975517][   T37] itetech 0003:06CB:73F6.0011: item fetching failed at offset 0/3
[  730.043014][   T37] itetech: probe of 0003:06CB:73F6.0011 failed with error -22
[  730.195312][T12072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.219816][T12072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.383442][T12097] 9pnet_fd: Insufficient options for proto=fd
[  730.696640][T12102] loop5: detected capacity change from 0 to 512
[  730.729160][T12102] EXT4-fs (loop5): Test dummy encryption mode enabled
[  730.736196][T12102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  730.774340][T12102] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  730.784621][T12102] EXT4-fs (loop5): group descriptors corrupted!
[  731.720567][T10178] usb 4-1: USB disconnect, device number 45
[  731.737026][T10720] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  731.757026][T10720] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  731.793655][  T288] usb 7-1: USB disconnect, device number 50
[  731.874845][T10720] usb 5-1: USB disconnect, device number 50
[  732.062941][   T28] audit: type=1400 audit(735.023:1587): avc:  denied  { create } for  pid=12115 comm="syz.5.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  732.115182][ T8642] udevd[8642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  734.069111][T12131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3370'.
[  735.167518][T12143] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3374'.
[  735.950124][T12142] loop3: detected capacity change from 0 to 512
[  736.070714][T12142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  736.188642][T12142] EXT4-fs (loop3): orphan cleanup on readonly fs
[  736.197109][T12142] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[  736.206758][T12142] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  736.216230][T12142] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.3373: Failed to acquire dquot type 1
[  736.230103][T12142] EXT4-fs (loop3): 1 truncate cleaned up
[  736.237579][T12142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  738.099123][T12154] loop5: detected capacity change from 0 to 4096
[  738.207375][T12160] input: syz1 as /devices/virtual/input/input94
[  738.484562][T12154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  738.516473][T10153] EXT4-fs (loop3): unmounting filesystem.
[  738.534234][T10333] EXT4-fs (loop5): unmounting filesystem.
[  738.573932][T12168] xt_hashlimit: size too large, truncated to 1048576
[  740.926427][T12194] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  741.063755][T12198] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  741.223907][T12203] input: syz1 as /devices/virtual/input/input95
[  743.020042][T12215] loop4: detected capacity change from 0 to 512
[  743.037551][   T28] audit: type=1400 audit(746.013:1588): avc:  denied  { getopt } for  pid=12210 comm="syz.8.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  743.067569][   T28] audit: type=1400 audit(746.043:1589): avc:  denied  { read } for  pid=12210 comm="syz.8.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  743.097250][T12215] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  743.112603][T12215] EXT4-fs (loop4): mount failed
[  744.056994][T12215] loop4: detected capacity change from 0 to 512
[  744.072393][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3393'.
[  744.082781][T10178] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  744.577779][T12229] loop5: detected capacity change from 0 to 40427
[  744.591025][T12229] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  744.599183][T12229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  744.609575][T12229] F2FS-fs (loop5): invalid crc value
[  744.636827][T12229] F2FS-fs (loop5): Found nat_bits in checkpoint
[  744.707063][T12229] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  744.714265][T12229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  744.914897][T12250] overlayfs: missing 'lowerdir'
[  745.667404][T12258] loop4: detected capacity change from 0 to 256
[  746.822160][T12269] overlayfs: missing 'lowerdir'
[  747.904687][T12277] loop6: detected capacity change from 0 to 256
[  747.954189][T12277] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  747.978176][T12277] 9pnet_fd: Insufficient options for proto=fd
[  748.047387][T12280] input: syz1 as /devices/virtual/input/input96
[  748.542760][  T288] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  748.550566][T10720] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  748.814824][   T28] audit: type=1400 audit(751.763:1590): avc:  denied  { create } for  pid=12292 comm="syz.3.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  748.933716][T10720] usb 7-1: Using ep0 maxpacket: 32
[  748.933750][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  749.032326][T10720] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  749.102881][  T288] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  749.183938][T10720] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  749.270682][T10720] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  749.332802][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  749.338562][  T288] usb usb6-port1: attempt power cycle
[  749.777300][T10720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.813036][T10720] usb 7-1: config 0 descriptor??
[  750.019581][T12316] 9pnet_fd: Insufficient options for proto=fd
[  750.061738][T12314] overlayfs: unrecognized mount option "fsname=overlay" or missing value
[  750.070533][   T28] audit: type=1400 audit(753.033:1591): avc:  denied  { mount } for  pid=12309 comm="syz.3.3420" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  750.224950][  T288] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  750.275009][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  750.388917][T10720] savu 0003:1E7D:2D5A.0012: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  750.421628][T12312] overlayfs: missing 'lowerdir'
[  750.426988][T12312] SELinux:  Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped).
[  750.436894][   T28] audit: type=1400 audit(753.413:1592): avc:  denied  { relabelto } for  pid=12311 comm="syz.4.3419" name="file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0"
[  750.437311][  T288] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  750.476404][   T28] audit: type=1400 audit(753.413:1593): avc:  denied  { associate } for  pid=12311 comm="syz.4.3419" name="file0" dev="tmpfs" ino=344 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:run_init_exec_t:s0"
[  750.543116][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  750.548699][  T288] usb usb6-port1: unable to enumerate USB device
[  750.624757][T12287] device pim6reg1 entered promiscuous mode
[  750.632909][T10178] usb 7-1: USB disconnect, device number 51
[  750.765300][   T28] audit: type=1400 audit(753.743:1594): avc:  denied  { unmount } for  pid=10153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  750.830523][   T28] audit: type=1400 audit(753.803:1595): avc:  denied  { rmdir } for  pid=11181 comm="syz-executor" name="file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0"
[  751.871675][T12347] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  752.008036][T12349] loop5: detected capacity change from 0 to 256
[  752.267422][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3429'.
[  752.328936][T12349] FAT-fs (loop5): Directory bread(block 64) failed
[  752.335552][T12349] FAT-fs (loop5): Directory bread(block 65) failed
[  752.342122][T12349] FAT-fs (loop5): Directory bread(block 66) failed
[  752.348805][T12349] FAT-fs (loop5): Directory bread(block 67) failed
[  752.355467][T12349] FAT-fs (loop5): Directory bread(block 68) failed
[  752.362014][T12349] FAT-fs (loop5): Directory bread(block 69) failed
[  752.368615][T12349] FAT-fs (loop5): Directory bread(block 70) failed
[  752.375182][T12349] FAT-fs (loop5): Directory bread(block 71) failed
[  752.381750][T12349] FAT-fs (loop5): Directory bread(block 72) failed
[  752.388317][T12349] FAT-fs (loop5): Directory bread(block 73) failed
[  752.652752][ T8807] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  752.682988][T10178] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  752.884072][T12370] input: syz1 as /devices/virtual/input/input97
[  753.082438][ T8807] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  753.091279][ T8807] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  753.101421][ T8807] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  753.110413][T10178] usb 4-1: Using ep0 maxpacket: 16
[  753.115628][ T8807] usb 7-1: config 1 has no interface number 1
[  753.121773][ T8807] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  753.134718][ T8807] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  753.146243][T10178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  753.157320][T10178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  753.167151][T10178] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  753.180099][T10178] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  753.182743][  T288] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  753.189215][T10178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.204813][ T8807] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  753.214174][ T8807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.222455][T10178] usb 4-1: config 0 descriptor??
[  753.227555][ T8807] usb 7-1: Product: syz
[  753.231798][ T8807] usb 7-1: Manufacturer: syz
[  753.237171][ T8807] usb 7-1: SerialNumber: syz
[  753.412756][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  753.800724][  T288] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  753.822216][T10178] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  753.837306][T10178] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input98
[  753.982778][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  753.988631][  T288] usb usb6-port1: attempt power cycle
[  754.110466][T10178] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  754.223081][T10723] usb 4-1: USB disconnect, device number 46
[  754.400352][T12399] device ip6erspan0 entered promiscuous mode
[  754.432763][  T288] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  754.463326][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  754.612740][  T288] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  754.643128][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  754.648593][  T288] usb usb6-port1: unable to enumerate USB device
[  755.294235][T12412] overlayfs: overlapping lowerdir path
[  756.262971][T12422] loop5: detected capacity change from 0 to 1024
[  756.291206][T12422] EXT4-fs: Ignoring removed bh option
[  756.310816][T12422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  756.473507][T12422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  756.485450][ T8807] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  756.500144][ T8807] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  756.838694][ T8807] usb 7-1: USB disconnect, device number 52
[  756.853177][T10169] udevd[10169]: setting mode of /dev/snd/pcmC0D0c to 020660 failed: No such file or directory
[  756.902837][T10169] udevd[10169]: setting owner of /dev/snd/pcmC0D0c to uid=0, gid=29 failed: No such file or directory
[  757.090401][T12389] udevd[12389]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  757.604192][   T28] audit: type=1400 audit(760.583:1596): avc:  denied  { unlink } for  pid=10333 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  757.683623][T12453] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  757.730077][T10333] EXT4-fs (loop5): unmounting filesystem.
[  758.993472][T12477] input: syz1 as /devices/virtual/input/input99
[  759.001823][  T288] usb 7-1: new full-speed USB device number 53 using dummy_hcd
[  759.323978][  T288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  759.334428][  T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  759.345945][  T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  759.357549][  T288] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  759.371032][T10723] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  759.380666][  T288] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  759.391595][  T288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.441788][  T288] usb 7-1: config 0 descriptor??
[  759.455059][  T288] usb 7-1: MIDIStreaming interface descriptor not found
[  759.612724][T10723] usb 5-1: Invalid ep0 maxpacket: 64
[  759.628381][  T102] udevd[102]: worker [12390] terminated by signal 33 (Unknown signal 33)
[  759.641228][  T102] udevd[102]: worker [12390] failed while handling '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0'
[  759.660383][  T102] udevd[102]: worker [10169] terminated by signal 33 (Unknown signal 33)
[  759.669799][  T102] udevd[102]: worker [10169] failed while handling '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/midiC0D0'
[  759.787583][T10723] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  759.911651][T12505] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  759.982797][T10723] usb 5-1: Invalid ep0 maxpacket: 64
[  759.988795][T10723] usb usb5-port1: attempt power cycle
[  760.502876][T10723] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  760.533140][T10723] usb 5-1: Invalid ep0 maxpacket: 64
[  760.722959][T10723] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  760.775739][T10723] usb 5-1: Invalid ep0 maxpacket: 64
[  760.781630][T10723] usb usb5-port1: unable to enumerate USB device
[  761.119156][T10178] usb 7-1: USB disconnect, device number 53
[  761.342639][T12534] loop6: detected capacity change from 0 to 1024
[  761.389225][T12534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  761.444939][T12534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  761.481621][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  762.184584][T12559] loop5: detected capacity change from 0 to 512
[  762.194845][T12559] EXT4-fs (loop5): invalid first ino: 6
[  762.332945][T12541] 9pnet_fd: p9_fd_create_tcp (12541): problem connecting socket to 127.0.0.1
[  763.770677][T12577] loop6: detected capacity change from 0 to 1024
[  763.793429][T12577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  764.885325][T12589] input: syz1 as /devices/virtual/input/input100
[  764.930425][T12577] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  765.267222][  T102] udevd[102]: worker [12111] terminated by signal 33 (Unknown signal 33)
[  765.276940][ T4201] EXT4-fs (loop6): unmounting filesystem.
[  765.290470][  T102] udevd[102]: worker [12111] failed while handling '/devices/virtual/block/loop6'
[  765.300453][  T288] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  765.347394][  T102] udevd[102]: worker [12389] terminated by signal 33 (Unknown signal 33)
[  765.363392][  T102] udevd[102]: worker [12389] failed while handling '/devices/virtual/input/input100/event3'
[  765.532745][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  765.682849][  T288] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  765.892711][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  765.898187][  T288] usb usb6-port1: attempt power cycle
[  766.197398][T12622] loop6: detected capacity change from 0 to 256
[  766.219491][T12622] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  766.332832][  T288] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  766.441411][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  766.674306][T12637] loop4: detected capacity change from 0 to 1024
[  766.685162][T12637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  766.702815][  T288] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  766.726343][T12637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  766.743096][  T288] usb 6-1: Invalid ep0 maxpacket: 64
[  766.752644][  T288] usb usb6-port1: unable to enumerate USB device
[  766.753612][T11181] EXT4-fs (loop4): unmounting filesystem.
[  768.537083][T12666] bridge0: port 3(vlan2) entered blocking state
[  768.555470][T12666] bridge0: port 3(vlan2) entered disabled state
[  769.254096][T12688] input: syz1 as /devices/virtual/input/input101
[  769.596066][T12674] loop4: detected capacity change from 0 to 40427
[  769.612765][T12674] F2FS-fs (loop4): invalid crc value
[  769.643594][T12674] F2FS-fs (loop4): Found nat_bits in checkpoint
[  769.724306][T12674] F2FS-fs (loop4): Start checkpoint disabled!
[  769.735147][T12674] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  770.502752][   T28] audit: type=1400 audit(773.193:1597): avc:  denied  { create } for  pid=12665 comm="syz.4.3527" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  770.607954][  T288] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  770.613791][    T8] kworker/u4:0: attempt to access beyond end of device
[  770.613791][    T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  770.904858][  T288] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  770.936494][  T288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  771.057458][  T288] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  771.074858][  T288] usb 6-1: config 1 has no interface number 1
[  771.088659][  T288] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  771.102137][  T288] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  771.122288][  T288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  771.131756][  T288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.140027][  T288] usb 6-1: Product: syz
[  771.144591][  T288] usb 6-1: Manufacturer: syz
[  771.149320][  T288] usb 6-1: SerialNumber: syz
[  771.280984][T12720] loop4: detected capacity change from 0 to 40427
[  771.291691][T12720] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  771.298586][T12720] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  771.309844][T12720] F2FS-fs (loop4): Found nat_bits in checkpoint
[  771.347208][T12720] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  771.354501][T12720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  771.482750][T10178] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  771.834540][T12720] syz.4.3542: attempt to access beyond end of device
[  771.834540][T12720] loop4: rw=34817, sector=77824, nr_sectors = 848 limit=40427
[  771.884267][T11181] syz-executor: attempt to access beyond end of device
[  771.884267][T11181] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  771.903263][T10178] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  771.919321][T10178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  771.930841][T10178] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  771.958091][T10178] usb 4-1: config 1 has no interface number 1
[  771.973029][T10178] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  771.996149][T10178] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  772.023499][T10178] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  772.042824][T10178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.050886][T10178] usb 4-1: Product: syz
[  772.055634][T10178] usb 4-1: Manufacturer: syz
[  772.060280][T10178] usb 4-1: SerialNumber: syz
[  772.326582][T10178] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  772.346476][T10178] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  772.368737][T10178] usb 4-1: USB disconnect, device number 47
[  772.598477][ T8641] udevd[8641]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  772.915179][  T288] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  772.925247][  T288] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  772.942742][  T288] usb 6-1: USB disconnect, device number 21
[  773.049347][T12760] loop4: detected capacity change from 0 to 1024
[  773.077333][T12760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  774.590935][T11181] EXT4-fs (loop4): unmounting filesystem.
[  775.215304][T12795] bridge0: port 3(vlan0) entered blocking state
[  775.221657][T12795] bridge0: port 3(vlan0) entered disabled state
[  776.262734][  T288] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  776.483816][  T288] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  776.492575][  T288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  776.502903][  T288] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  776.511900][  T288] usb 4-1: config 1 has no interface number 1
[  776.519110][  T288] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  776.533153][  T288] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  776.595815][  T288] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  776.682461][  T288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.755859][  T288] usb 4-1: Product: syz
[  776.793493][  T288] usb 4-1: Manufacturer: syz
[  776.828054][  T288] usb 4-1: SerialNumber: syz
[  776.877114][T12820] loop5: detected capacity change from 0 to 256
[  776.900338][  T102] udevd[102]: worker [12388] terminated by signal 33 (Unknown signal 33)
[  776.911335][  T102] udevd[102]: worker [12388] failed while handling '/devices/virtual/block/loop5'
[  777.589184][T10720] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  778.130671][   T28] audit: type=1400 audit(1009.681:1598): avc:  denied  { write } for  pid=12836 comm="syz.8.3580" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  778.179507][   T28] audit: type=1400 audit(1009.681:1599): avc:  denied  { open } for  pid=12836 comm="syz.8.3580" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  778.207330][T10720] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  778.220340][T10720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  778.237747][T10720] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  778.254005][T10720] usb 7-1: config 1 has no interface number 1
[  778.265308][T10720] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  778.290523][T10720] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  778.313260][T10720] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  778.331627][T10720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.348000][T10720] usb 7-1: Product: syz
[  778.366495][T12844] loop5: detected capacity change from 0 to 40427
[  778.389022][T12844] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  778.390941][T10720] usb 7-1: Manufacturer: syz
[  778.401834][T10720] usb 7-1: SerialNumber: syz
[  778.420752][T12844] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  778.440429][T12844] F2FS-fs (loop5): invalid crc value
[  778.520467][T12844] F2FS-fs (loop5): Found nat_bits in checkpoint
[  778.564461][T12844] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  778.571724][T12844] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  778.715504][T12855] input: syz1 as /devices/virtual/input/input102
[  779.103254][T12856] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN
[  779.115040][T12856] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf]
[  779.123491][T12856] CPU: 0 PID: 12856 Comm: syz.8.3582 Not tainted syzkaller #0
[  779.130983][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  779.141059][T12856] RIP: 0010:htb_qlen_notify+0x30/0xc0
[  779.146480][T12856] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4e 25 6c fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 49 29 6c
[  779.166111][T12856] RSP: 0018:ffffc900085c6df0 EFLAGS: 00010202
[  779.172208][T12856] RAX: ffffffff8403e212 RBX: 0000000000000037 RCX: 0000000000080000
[  779.180199][T12856] RDX: ffffc90011b92000 RSI: 00000000000001b8 RDI: 00000000000001b9
[  779.188200][T12856] RBP: ffffc900085c6e18 R08: ffff88811dc88000 R09: 0000000000000002
[  779.196198][T12856] R10: 0000000000000000 R11: ffffffff8403e1f0 R12: dffffc0000000000
[  779.204197][T12856] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811ee94000
[  779.212190][T12856] FS:  00007ff22d1dc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  779.221152][T12856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  779.227765][T12856] CR2: 0000001b2e017ff8 CR3: 00000001201a3000 CR4: 00000000003506b0
[  779.235769][T12856] Call Trace:
[  779.239066][T12856]  <TASK>
[  779.242021][T12856]  qdisc_tree_reduce_backlog+0x20a/0x360
[  779.247725][T12856]  fq_codel_change+0xafd/0x1010
[  779.252623][T12856]  ? __cfi_fq_codel_change+0x10/0x10
[  779.258039][T12856]  ? netlink_sendmsg+0x8aa/0xbc0
[  779.263014][T12856]  fq_codel_init+0x384/0xa90
[  779.267649][T12856]  ? __cfi_fq_codel_init+0x10/0x10
[  779.272797][T12856]  qdisc_create+0x7f3/0x1040
[  779.277419][T12856]  ? qdisc_notify+0x360/0x360
[  779.282128][T12856]  tc_modify_qdisc+0x8ea/0x1900
[  779.287017][T12856]  ? __cfi_tc_modify_qdisc+0x10/0x10
[  779.292337][T12856]  ? __kasan_check_write+0x14/0x20
[  779.297480][T12856]  ? mutex_lock+0x8d/0x1a0
[  779.301926][T12856]  ? __cfi_mutex_lock+0x10/0x10
[  779.306797][T12856]  ? ns_capable+0x8c/0xf0
[  779.311154][T12856]  ? netlink_net_capable+0x125/0x160
[  779.316466][T12856]  ? __cfi_tc_modify_qdisc+0x10/0x10
[  779.321781][T12856]  rtnetlink_rcv_msg+0x9f4/0xcf0
[  779.326755][T12856]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[  779.332237][T12856]  ? kernel_text_address+0xa0/0xd0
[  779.337388][T12856]  ? __kernel_text_address+0xd/0x30
[  779.342649][T12856]  ? unwind_get_return_address+0x4d/0x90
[  779.348310][T12856]  ? memcpy+0x56/0x70
[  779.352330][T12856]  ? avc_has_perm_noaudit+0x2f4/0x460
[  779.357740][T12856]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  779.363502][T12856]  ? slab_post_alloc_hook+0x4f/0x2d0
[  779.368821][T12856]  ? kmem_cache_alloc_node+0x181/0x340
[  779.374310][T12856]  ? __alloc_skb+0xea/0x4b0
[  779.378851][T12856]  ? avc_has_perm+0x158/0x240
[  779.383565][T12856]  ? __alloc_skb+0x236/0x4b0
[  779.388190][T12856]  ? netlink_sendmsg+0x626/0xbc0
[  779.393161][T12856]  ? __cfi_avc_has_perm+0x10/0x10
[  779.398228][T12856]  ? selinux_nlmsg_lookup+0x400/0x4c0
[  779.403638][T12856]  netlink_rcv_skb+0x1f2/0x440
[  779.408466][T12856]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[  779.413955][T12856]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  779.419279][T12856]  ? __netlink_lookup+0x387/0x3b0
[  779.424335][T12856]  rtnetlink_rcv+0x1c/0x20
[  779.428782][T12856]  netlink_unicast+0x8b1/0xa30
[  779.433581][T12856]  netlink_sendmsg+0x8aa/0xbc0
[  779.438379][T12856]  ? __cfi_netlink_sendmsg+0x10/0x10
[  779.443694][T12856]  ? __schedule+0xb8f/0x14e0
[  779.448327][T12856]  ? security_socket_sendmsg+0x93/0xb0
[  779.453827][T12856]  ? __cfi_netlink_sendmsg+0x10/0x10
[  779.459154][T12856]  ____sys_sendmsg+0x5a9/0x990
[  779.463951][T12856]  ? __sys_sendmsg_sock+0x40/0x40
[  779.469007][T12856]  ? import_iovec+0x7c/0xb0
[  779.473546][T12856]  ___sys_sendmsg+0x21c/0x290
[  779.478249][T12856]  ? __sys_sendmsg+0x270/0x270
[  779.483051][T12856]  ? __fdget+0x19c/0x220
[  779.487338][T12856]  __x64_sys_sendmsg+0x1f0/0x2c0
[  779.492303][T12856]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  779.497786][T12856]  ? __kasan_check_write+0x14/0x20
[  779.502932][T12856]  ? fpregs_restore_userregs+0x128/0x260
[  779.508594][T12856]  ? switch_fpu_return+0xe/0x10
[  779.513480][T12856]  x64_sys_call+0x171/0x9a0
[  779.518022][T12856]  do_syscall_64+0x4c/0xa0
[  779.522487][T12856]  ? clear_bhb_loop+0x30/0x80
[  779.527199][T12856]  ? clear_bhb_loop+0x30/0x80
[  779.531911][T12856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  779.537865][T12856] RIP: 0033:0x7ff22c38ebe9
[  779.542307][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  779.561939][T12856] RSP: 002b:00007ff22d1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  779.570386][T12856] RAX: ffffffffffffffda RBX: 00007ff22c5b6180 RCX: 00007ff22c38ebe9
[  779.578383][T12856] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000b
[  779.586377][T12856] RBP: 00007ff22c411e19 R08: 0000000000000000 R09: 0000000000000000
[  779.594375][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  779.602401][T12856] R13: 00007ff22c5b6218 R14: 00007ff22c5b6180 R15: 00007ffea4983078
[  779.610413][T12856]  </TASK>
[  779.613460][T12856] Modules linked in:
[  779.617441][T12856] ---[ end trace 0000000000000000 ]---
[  779.623057][T12856] RIP: 0010:htb_qlen_notify+0x30/0xc0
[  779.628524][T12856] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4e 25 6c fd 4d 8d ae b8 01 00 00 4c 89 eb 48 c1 eb 03 <42> 0f b6 04 23 84 c0 75 56 45 8b 65 00 31 ff 44 89 e6 e8 49 29 6c
[  779.648265][T12856] RSP: 0018:ffffc900085c6df0 EFLAGS: 00010202
[  779.654525][T12856] RAX: ffffffff8403e212 RBX: 0000000000000037 RCX: 0000000000080000
[  779.662571][T12856] RDX: ffffc90011b92000 RSI: 00000000000001b8 RDI: 00000000000001b9
[  779.670665][T12856] RBP: ffffc900085c6e18 R08: ffff88811dc88000 R09: 0000000000000002
[  779.678749][T12856] R10: 0000000000000000 R11: ffffffff8403e1f0 R12: dffffc0000000000
[  779.686860][T12856] R13: 00000000000001b8 R14: 0000000000000000 R15: ffff88811ee94000
[  779.694935][T12856] FS:  00007ff22d1dc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  779.703983][T12856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  779.710649][T12856] CR2: 0000001b2e017ff8 CR3: 00000001201a3000 CR4: 00000000003506b0
[  779.718748][T12856] Kernel panic - not syncing: Fatal exception in interrupt
[  779.726294][T12856] Kernel Offset: disabled
[  779.730649][T12856] Rebooting in 86400 seconds..