last executing test programs:

24m49.815523722s ago: executing program 32 (id=47):
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1d, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@map_fd={0x18, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x8, 0x25, &(0x7f0000000780)=""/37, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x8, 0x9}, {0x2, 0x4, 0xf, 0x3}, {0x1, 0x4, 0x8}, {0x5, 0x1, 0x5, 0x6}, {0x3, 0x1, 0xb, 0x7}, {0x3, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x10}], 0x10, 0x7fffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005d00)={r1, 0x0, 0x1b, 0x81, &(0x7f0000000900)="615d068cf7910a728f1643ccbb17681f34d1b3b2c3e7e7acca1e48", &(0x7f0000000940)=""/129, 0x3ff, 0x0, 0x1000, 0xa2, &(0x7f0000004c40)="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", &(0x7f0000005c40)="f112f061b30266b5732bda08aa0a1d88a1a19234f46f6194eccd5ffaab4c4b3bd02d66d9636b99daaee950cc48ae5289a2b536f89a632a9242fcac7b6ec933bfc51866a846f3c9db3bb491d2c58bd736cb331ff8ca27ce7e2d455b8c399ffd7e47a15dfeef0e3ed7001b416b776af3f29f7e7e0a48dad7d57b330cb28b534f92946c9b77b70aa60d7be1b99fd2302db84ae59cc49b897088ead758846a11bbb27f49", 0x4, 0x0, 0x10}, 0x50)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd03, &(0x7f0000000000)="040000000000000000")
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x9580a8, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e000100000000401000000007000000", @ANYBLOB="0000000006"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000ba000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020)

20m11.833734621s ago: executing program 33 (id=1685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/fscaps', 0x82, 0x10a)
io_setup(0x4fe, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000000180))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x101, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x4000003, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
socket$netlink(0x10, 0x3, 0xc)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})
write$char_usb(r9, &(0x7f0000000040)="e2", 0x918)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x200000000622c, 0x0)

20m2.173424696s ago: executing program 34 (id=1633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000080)="e1497c", 0x3)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioprio_set$pid(0x2, r2, 0x2007)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x800)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x202f)
write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x2b, 0x4, 0x100, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1ed)
r8 = syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00')
openat(r8, &(0x7f00000000c0)='./file1\x00', 0x2a242, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000000), 0x2, 0x0)

19m50.048078938s ago: executing program 35 (id=1790):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='! L'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ptrace(0x10, 0x1)

11m55.852075334s ago: executing program 36 (id=5539):
syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0)
r0 = userfaultfd(0x801)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4})
fcntl$notify(r1, 0x402, 0x25)

11m55.837986135s ago: executing program 37 (id=5533):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback, 0x2e, 0x1, 0xf02, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x6, 0x10}, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r2, r0, 0x7, 0x11, r0, @void, @value=r0, @void, @void, r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
ftruncate(0xffffffffffffffff, 0xc17a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="4000040000001f3b1b75"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000006}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newtclass={0x470, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x444, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3e, 0x2, 0x7, 0x81, 0x8, 0x1}, {0x4, 0x0, 0x48da, 0x1ff, 0x19, 0x8000}, 0x9, 0x0, 0x4, 0x7, 0x1}}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_CTAB={0x404, 0x3, [0xaa, 0xfbd2, 0x8, 0x7, 0x9, 0x0, 0x80000000, 0x9, 0x6a5e, 0x9eb, 0xb, 0x8, 0x8, 0xffff, 0x40, 0x1, 0x9, 0x7, 0x7, 0x8, 0xbec, 0x0, 0xd316, 0xffffffff, 0x9, 0x3, 0x6, 0x9, 0x7, 0x3, 0x5, 0x5, 0xfffffc01, 0x6, 0x101, 0x0, 0x3, 0x9, 0x6, 0x9, 0x9, 0x1, 0x6, 0x80, 0xb, 0xfffffff9, 0x10, 0x8, 0x400, 0x200, 0xf07d, 0x4, 0xffff, 0x7ff, 0x4, 0x9, 0x0, 0x9161, 0x3, 0x5, 0xffff, 0x9, 0x1, 0x5, 0x2, 0xb, 0x7ff, 0x8, 0x7, 0x7ff, 0x7, 0x0, 0x200, 0x435e2304, 0x43, 0xd02, 0x503, 0x1, 0x7, 0x400, 0x26, 0xa9, 0x3, 0x0, 0x5, 0x80000000, 0xa, 0x0, 0x0, 0x4, 0x3, 0xb657, 0x6, 0x7, 0xe820, 0x9, 0x6, 0x55, 0x0, 0x10000, 0x4, 0x2, 0xd978, 0x41, 0x6c98, 0xffffff01, 0x86, 0x200, 0x7ff, 0x5, 0xfffffffa, 0x2, 0xfffffffb, 0x5, 0xaf2a, 0x7fffffff, 0x1ca, 0xd, 0x55ac6e1b, 0x7882, 0x7, 0x4, 0xc5a, 0xffffffff, 0x9, 0x2, 0x6, 0xffff, 0x80, 0xffffffff, 0x44a, 0x9000000, 0xffffffff, 0x9, 0xa5, 0x133, 0x8, 0x8, 0x8, 0x800, 0x7de2c467, 0xfe2, 0xfff, 0x3, 0x7f, 0x0, 0x0, 0xff, 0x6, 0x40, 0x4, 0x6, 0x3ff, 0x6, 0x0, 0x9, 0xfffffffc, 0x9, 0x7, 0x0, 0x2, 0x9, 0x65, 0x0, 0x2, 0x100, 0x3fd, 0x1, 0x4b4, 0xbb46, 0x8, 0x5, 0x4, 0x1ff, 0x2, 0x926, 0x2, 0xfff, 0x7, 0x4, 0xaf, 0x3b1, 0x7, 0x800, 0x10, 0x4, 0x4, 0x7, 0x7, 0x2, 0x8, 0x1, 0x400, 0x3, 0x800, 0x2e359fff, 0x1, 0x8, 0x9fb, 0x2, 0xf8af, 0x5, 0x136, 0x401, 0xfffffffc, 0x7, 0xfd5e, 0x0, 0x80000001, 0x200, 0x3, 0x0, 0x1, 0x229, 0x3, 0xfffffffe, 0x2, 0x7, 0x7, 0x10000, 0x4, 0xffff, 0x7, 0xb0, 0x0, 0x401, 0x5, 0x6, 0x7, 0x7, 0x7ff, 0x7fff, 0xe4, 0xe, 0x6, 0x5, 0x2, 0x7ff, 0x3, 0xffffffff, 0x1, 0x3, 0x8, 0x6, 0x7, 0x2, 0x156570e0, 0x1ff, 0x0, 0x7, 0x9, 0xfff, 0x1, 0x7, 0x7f39, 0x101]}]}}]}, 0x470}}, 0x0)
syz_usb_connect$uac2(0x4, 0x120, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x3, 0x1, 0x9, 0x0, 0x70, {0x8, 0xb, 0x2, 0x2, 0x1, 0x8, 0x20, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x100, 0x4, 0x39, 0xc}, [@processing_unit={0xd, 0x24, 0x8, 0x3, 0x5, [0x1, 0x1, 0x1, 0x2]}, @sample_rate={0x9, 0x24, 0xd, 0x3, 0x2, 0x1, [0x3]}, @sample_rate={0xb, 0x24, 0xd, 0x1, 0x1, 0x4, [0x1, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0x8, 0x0, 0x6, 0x80, 0x3}, @feature_unit={0x7, 0x24, 0x6, 0x3, 0x6, [0x8]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x7, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x6, 0xb, 0xa, 0x3}, @as_header={0x10, 0x24, 0x1, 0x4, 0x9, 0xd27695ec874cc214, 0x1, 0x92, 0x5, 0x75}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x9, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x4, 0x4, "2fb2", 'g'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x46, 0x6, {0x8, 0x25, 0x1, 0x80, 0x6c, 0x4, 0xd9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x255e, 0x3, "d0b1b45d7d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x5, 0x3, 0x1}, @as_header={0x10, 0x24, 0x1, 0xf, 0x40, 0x3, 0x2, 0x0, 0x32e5, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x10, 0x14, "b46db89a439d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x38, 0x80, 0xf0, {0x8, 0x25, 0x1, 0x2, 0x30, 0x0, 0x9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x80, 0x80, 0x6, 0x10, 0xd7}, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "6d6ee388fc9af4409725692156f597d47e7965f9cf35ba76dcc49d757bb47185089b53e1c78ab2fba1834c3d0d5dfba335348f3f0bce3ec71abb43bbca9ff1737ae300b953915284cafc9e3ac1209345e666da733f93dd8d238d159723b83b057fef4a173d7df4bb96b97f8752292d3f665f8dbc3aab9cad34d8fa4b989920e43f97a87715604599fbaa2e1edfb29bbe60b08beff9a4957c89258786e86df605acbf03e5a8be3b2c8a15899e92453388ef"}}]})

11m55.696065041s ago: executing program 38 (id=5534):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000004c0)=""/4089, 0xfffffffffffffeb3, 0x7fd)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
r2 = eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r3=>0x0)
read$eventfd(r2, &(0x7f0000000000), 0x8)
socket$netlink(0x10, 0x3, 0xf) (async)
r4 = socket$netlink(0x10, 0x3, 0xf)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @remote}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @remote}, 0x1c)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) (async)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x40000002, 0x0, 0x44})
io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0xeffd, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c)
ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000240)={&(0x7f00000000c0)=[{0x10, 0x8000000000000000, 0x4, 0x9, 0xfffffff7}, {0xfe, 0x9, 0xad, 0x6, 0x6}, {0x7f21, 0x80, 0x1, 0x2, 0x2}], 0x3, 0x28, 0x8001, 0x9}) (async)
ioctl$NILFS_IOCTL_GET_BDESCS(r4, 0xc0186e87, &(0x7f0000000240)={&(0x7f00000000c0)=[{0x10, 0x8000000000000000, 0x4, 0x9, 0xfffffff7}, {0xfe, 0x9, 0xad, 0x6, 0x6}, {0x7f21, 0x80, 0x1, 0x2, 0x2}], 0x3, 0x28, 0x8001, 0x9})
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x3008014, &(0x7f0000000340)=ANY=[@ANYBLOB="af0720ca0b8db0bcfe634bb5d295dac5dd0f6a415429212c2ca429709569a8e86976b4775e41c2c9197725ecb612d8684a2cb91889256e69a939c902e8bc537912358768e20d0179101cb762051124a4441512b636403ff347725eb096b602b78730a8924bbc0322424bc834f87b47471897d0bc7dadd1acef4ed255f81ce618a0a3822b66404105350a0d0553b2341181dcdc7e598302d702edee8524d82296851a58c5be716c25b66b71215e3e9b05e61b8fafc7e48dc168fa7440bf9ecb65bca9baead5b052e519e9c2cec349cec91218837f7c3ae008b6c2418d711abae5adfa4c6743fdef824609a4e42f69903aa2", @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES8=r0], 0x0, 0x151b, &(0x7f0000002180)="$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")
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
read$msr(r8, &(0x7f0000001bc0)=""/3, 0x3)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x9}) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x9})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x3569a000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x3569a000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x838012, &(0x7f00000001c0), 0x0, 0x47f, &(0x7f0000000680)="$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")

11m55.664373922s ago: executing program 39 (id=5544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20060400)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000})
creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

11m55.559664928s ago: executing program 40 (id=5541):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9m52.452027603s ago: executing program 41 (id=6145):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221400000075ca76c40d97cfd565f583f39eb3d4037091d4e2"], 0x0}, 0x0) (async)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0xde, 0x0)
close(0x3) (async, rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 64)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x2000000}]}) (async)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

7m37.281476167s ago: executing program 42 (id=7044):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = io_uring_setup(0x31a, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000400)={0x6, 0x1}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100))
listen(r1, 0x802)
close(r0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020240020200000905820220"], 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r5 = syz_io_uring_complete(0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000000)={0x4d, "4eb5989ee8b80c6545ca77428f6421a9a7ad12e4b893cb777e58b0ef8d57483e27d7355480e4cea1b69278043f63f155ce6d78d9483f830d06243e75bf09be222142d48d9a2f3e3440460dde9f"})

6m43.792161805s ago: executing program 0 (id=7383):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r4 = eventfd(0x100000d)
fgetxattr(r4, &(0x7f0000000000)=@random={'osx.', 'krusted.overlay.opaque\x00'}, 0x0, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000001c00)={0xa, 0x200000000000}, 0x0)
unshare(0x24060400)

6m39.983098854s ago: executing program 0 (id=7396):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0x1000, 0x300000000000000)

6m39.018575589s ago: executing program 0 (id=7400):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x40c4)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

6m37.789528788s ago: executing program 0 (id=7405):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000007080000000100000300cfde0f2b70acdda3d09076000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
epoll_create1(0x0)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000900000000000000060000000000000014000100ff01"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840)
r1 = getpid()
unshare(0x22020600)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
unshare(0x2000000)
lseek(r2, 0x10001, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
setns(r3, 0x24020000)
r4 = syz_io_uring_setup(0x2f8d, &(0x7f0000000540)={0x0, 0xc383, 0x190, 0x3, 0x200004, 0x0, r2}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x2, 0x8c1, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xc}}}, 0x0)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000080)={0x10000004})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
unshare(0x64000400)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x310000, &(0x7f0000000040), 0x0, 0x56f, &(0x7f0000003780)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x8ac42, 0x100)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)

6m36.569144615s ago: executing program 0 (id=7410):
r0 = inotify_init()
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
inotify_add_watch(r0, &(0x7f0000000140)='./mnt\x00', 0x150003de)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f0000000180)={0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x37f, 0x0, 0x0, 0x1000, 0x1, r1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil)
syz_clone(0xc080000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

6m35.116471404s ago: executing program 0 (id=7412):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)

6m35.116319373s ago: executing program 43 (id=7412):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)

6m31.923410683s ago: executing program 1 (id=7426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
timer_create(0x3, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x800000, 0xffffffe})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000120000000000000029000000", @ANYRES32=r1], 0x30}, 0x4004000)

6m31.374151559s ago: executing program 1 (id=7428):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
setpriority(0x0, 0x0, 0x200002a14b56)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f0000000100)={0x4, 0x9, 0x80000001, 0xe, 0x5, 0x4, 0x3ff, 0x1, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x7, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
readahead(0xffffffffffffffff, 0xb, 0x83)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/139, 0x8b}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r4=>0x0})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x24, &(0x7f00000004c0)={0x0, 0x3, 0x4, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550d, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r8})
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000000)={0x2, r8})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x8d, &(0x7f0000000380)={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0xab, 0xaa, 'Os', "d59c57", 0xd, "b588737521a89b68960842c2073532cfe30fc1ada81ee9456d4a604463c2ac89f5a9a24db8a5cf5b2fc5b9fc2e1a0061bf387d76d4f9a49a0579d165ab84cc18fb706e2c8a7da4a7cea574061e598334057f383105319e45f52e911969fa25b833f7cbfa7ed3750c7af6c416fdd94ea44bcd"}}}}}, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000000))
socket$nl_sock_diag(0x10, 0x3, 0x4)

6m30.489123701s ago: executing program 1 (id=7434):
unshare(0x22020600)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')

6m30.426178014s ago: executing program 1 (id=7435):
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800)
socket$inet(0x2, 0x2, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = memfd_create(&(0x7f0000000000)='\x00', 0x5)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000005c0)={[0x2]}, 0x8)
kcmp(r0, r0, 0x1, r2, r3)
ptrace(0x10, r0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="0f20e035004000000f22e08d972700c0fe40c174feeac2f2defc42da8f0000000066b88d008ee0660f0059c766b8ed008ec8670f782a0ff2ed", 0x39}], 0x1, 0x54, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00006d8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$setsig(0x4203, r0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})

6m30.070832381s ago: executing program 1 (id=7437):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x5, "bc42a061ad"}, &(0x7f0000000140)=0x29)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000d80))
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1', 0x1)
openat(r2, 0x0, 0x1c1080, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_elf64(r4, &(0x7f0000001b40)=ANY=[], 0xfffffe3e)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001200))
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'})
syz_emit_ethernet(0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa060aaaaaaabb0800450000201236400040119078010203040808080812345678000c907800000000"], 0x0)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
r7 = epoll_create(0x5)
r8 = socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r10=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x3})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x40000000000004, 0x200000000000000, 0x0, 0x4101, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x100000000})
ppoll(&(0x7f00000001c0)=[{r7, 0x4000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
syz_emit_ethernet(0x387, &(0x7f00000009c0)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x7}, {0xd615, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xef7, 0x0, 0x1}], @ipv4=@esp={{0x1a, 0x4, 0x3, 0x4, 0x369, 0x66, 0x0, 0x2, 0x32, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}, {[@end, @end, @end, @ssrr={0x89, 0x1f, 0x9b, [@empty, @multicast1, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @multicast2]}, @noop, @end, @rr={0x7, 0xb, 0x1a, [@private=0xa010100, @broadcast]}, @rr={0x7, 0x1f, 0xe8, [@multicast1, @multicast1, @local, @loopback, @rand_addr=0x64010100, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x9}]}}, {0x4d2, 0xffff4eb4, @cc={0x1, 0x0, 0x7, 0x1ff, 0xfffffffffffffffb, 0x9, 0xfa3d, [@ipv6=@dccp_packet={0xf, 0x6, "0720dd", 0x2af, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@srh={0x89, 0x12, 0x4, 0x9, 0x2d, 0x8, 0x2, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @loopback]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x2, 0x64}, @dstopts={0x3b, 0x0, '\x00', [@pad1]}, @routing={0x2f, 0x8, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback]}, @dstopts={0x0, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe2, 0xfffe, [0x7, 0x4, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x7b}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x6, 0xc, '\x00', [@jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x7c, 0x4f3, [0x6, 0x2, 0x100000000, 0x6, 0x3, 0x5ea, 0xffffffffffffffff]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @pad1]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, "674005", 0xb8, "201321"}, "4eb9b676d643124d6cc92a2057fbf879071ccf5fdb3768c25c9f50cef02bcb37fedc0a1645e50bb9e77147c82eb66c30cf846c76ab86a366a52c05398bdbb7fa773279bda0f07c2612279b4d4f13a768b798ffafe314221c36109623907863ce66695fef919f3c9d10c11d1fe60a0fa2871c11eaed0413ace6835230c83d4b78dc16083a07122adb9e5afad41f40d454ea087da24a912c44c00bb29ee4ce1dcd3f7710794747797e5ccaff05607e901c25c45def8763fa4a6eea6234677b03fca8519508bdf33f"}}}]}, "70e9172a4f3adcc6", 0x8}}}}}}, 0x0)

6m29.970397615s ago: executing program 1 (id=7438):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x5, "bc42a061ad"}, &(0x7f0000000140)=0x29)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000d80))
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1', 0x1)
openat(r2, 0x0, 0x1c1080, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_elf64(r4, &(0x7f0000001b40)=ANY=[], 0xfffffe3e)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001200))
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'})
syz_emit_ethernet(0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa060aaaaaaabb0800450000201236400040119078010203040808080812345678000c907800000000"], 0x0)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
r7 = epoll_create(0x5)
r8 = socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r10=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0)
sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x3})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x40000000000004, 0x200000000000000, 0x0, 0x4101, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x100000000})
ppoll(&(0x7f00000001c0)=[{r7, 0x4000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
syz_emit_ethernet(0x387, &(0x7f00000009c0)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x7}, {0xd615, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xef7, 0x0, 0x1}], @ipv4=@esp={{0x1a, 0x4, 0x3, 0x4, 0x369, 0x66, 0x0, 0x2, 0x32, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}, {[@end, @end, @end, @ssrr={0x89, 0x1f, 0x9b, [@empty, @multicast1, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @multicast2]}, @noop, @end, @rr={0x7, 0xb, 0x1a, [@private=0xa010100, @broadcast]}, @rr={0x7, 0x1f, 0xe8, [@multicast1, @multicast1, @local, @loopback, @rand_addr=0x64010100, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x9}]}}, {0x4d2, 0xffff4eb4, @cc={0x1, 0x0, 0x7, 0x1ff, 0xfffffffffffffffb, 0x9, 0xfa3d, [@ipv6=@dccp_packet={0xf, 0x6, "0720dd", 0x2af, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@srh={0x89, 0x12, 0x4, 0x9, 0x2d, 0x8, 0x2, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @loopback]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x2, 0x64}, @dstopts={0x3b, 0x0, '\x00', [@pad1]}, @routing={0x2f, 0x8, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback]}, @dstopts={0x0, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe2, 0xfffe, [0x7, 0x4, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x7b}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x6, 0xc, '\x00', [@jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x7c, 0x4f3, [0x6, 0x2, 0x100000000, 0x6, 0x3, 0x5ea, 0xffffffffffffffff]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @pad1]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, "674005", 0xb8, "201321"}, "4eb9b676d643124d6cc92a2057fbf879071ccf5fdb3768c25c9f50cef02bcb37fedc0a1645e50bb9e77147c82eb66c30cf846c76ab86a366a52c05398bdbb7fa773279bda0f07c2612279b4d4f13a768b798ffafe314221c36109623907863ce66695fef919f3c9d10c11d1fe60a0fa2871c11eaed0413ace6835230c83d4b78dc16083a07122adb9e5afad41f40d454ea087da24a912c44c00bb29ee4ce1dcd3f7710794747797e5ccaff05607e901c25c45def8763fa4a6eea6234677b03fca8519508bdf33f"}}}]}, "70e9172a4f3adcc6", 0x8}}}}}}, 0x0)

6m29.969476235s ago: executing program 44 (id=7438):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x5, "bc42a061ad"}, &(0x7f0000000140)=0x29)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000d80))
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1', 0x1)
openat(r2, 0x0, 0x1c1080, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_elf64(r4, &(0x7f0000001b40)=ANY=[], 0xfffffe3e)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001200))
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'})
syz_emit_ethernet(0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa060aaaaaaabb0800450000201236400040119078010203040808080812345678000c907800000000"], 0x0)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
r7 = epoll_create(0x5)
r8 = socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r10=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0)
sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x3})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x40000000000004, 0x200000000000000, 0x0, 0x4101, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x100000000})
ppoll(&(0x7f00000001c0)=[{r7, 0x4000}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
syz_emit_ethernet(0x387, &(0x7f00000009c0)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x7}, {0xd615, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xef7, 0x0, 0x1}], @ipv4=@esp={{0x1a, 0x4, 0x3, 0x4, 0x369, 0x66, 0x0, 0x2, 0x32, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}, {[@end, @end, @end, @ssrr={0x89, 0x1f, 0x9b, [@empty, @multicast1, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @multicast2]}, @noop, @end, @rr={0x7, 0xb, 0x1a, [@private=0xa010100, @broadcast]}, @rr={0x7, 0x1f, 0xe8, [@multicast1, @multicast1, @local, @loopback, @rand_addr=0x64010100, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x9}]}}, {0x4d2, 0xffff4eb4, @cc={0x1, 0x0, 0x7, 0x1ff, 0xfffffffffffffffb, 0x9, 0xfa3d, [@ipv6=@dccp_packet={0xf, 0x6, "0720dd", 0x2af, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@srh={0x89, 0x12, 0x4, 0x9, 0x2d, 0x8, 0x2, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @loopback]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x2, 0x64}, @dstopts={0x3b, 0x0, '\x00', [@pad1]}, @routing={0x2f, 0x8, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback]}, @dstopts={0x0, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe2, 0xfffe, [0x7, 0x4, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x7b}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x6, 0xc, '\x00', [@jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x7c, 0x4f3, [0x6, 0x2, 0x100000000, 0x6, 0x3, 0x5ea, 0xffffffffffffffff]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @pad1]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, "674005", 0xb8, "201321"}, "4eb9b676d643124d6cc92a2057fbf879071ccf5fdb3768c25c9f50cef02bcb37fedc0a1645e50bb9e77147c82eb66c30cf846c76ab86a366a52c05398bdbb7fa773279bda0f07c2612279b4d4f13a768b798ffafe314221c36109623907863ce66695fef919f3c9d10c11d1fe60a0fa2871c11eaed0413ace6835230c83d4b78dc16083a07122adb9e5afad41f40d454ea087da24a912c44c00bb29ee4ce1dcd3f7710794747797e5ccaff05607e901c25c45def8763fa4a6eea6234677b03fca8519508bdf33f"}}}]}, "70e9172a4f3adcc6", 0x8}}}}}}, 0x0)

3m4.860763602s ago: executing program 8 (id=8483):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x9000, 0xffffdffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
write$selinux_load(r1, 0x0, 0x36)

3m2.746593521s ago: executing program 8 (id=8487):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
finit_module(r0, 0x0, 0x0)

3m2.678501354s ago: executing program 8 (id=8488):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40c4)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

3m1.822106985s ago: executing program 8 (id=8496):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000dd}, 0x200000d0)

3m1.778921407s ago: executing program 8 (id=8498):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003d2000/0x3000)=nil, 0x3000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000005)

3m0.565925124s ago: executing program 8 (id=8499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x0, 0x183, 0x400000000, 0xfffffffffffffffd, 0xee, 0x200000000000091a, 0x3, 0x1000041, 0xfffc, 0x3, 0xf, 0xfffffffffffffffd, 0x3, 0x20000000000ab], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m42.748881902s ago: executing program 45 (id=8499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x0, 0x183, 0x400000000, 0xfffffffffffffffd, 0xee, 0x200000000000091a, 0x3, 0x1000041, 0xfffc, 0x3, 0xf, 0xfffffffffffffffd, 0x3, 0x20000000000ab], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m25.572423093s ago: executing program 4 (id=8973):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10)
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7a, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0xfffffffffffffffd]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m25.440002829s ago: executing program 4 (id=8975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f0000000400)=0x54) (async)
read$FUSE(r1, &(0x7f0000014680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020) (async)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x31, 0x2, @tid=r3}, &(0x7f0000000080)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

1m25.041103267s ago: executing program 4 (id=8976):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe0440, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r2, &(0x7f0000000300)=""/172, 0xdc)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1, 0x4000000000000})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x5, 0xffff1ffc, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
unshare(0x60600)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
openat(r1, &(0x7f0000000100)='./file0\x00', 0xc0400, 0x8)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r6, 0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e25, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000006c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)="5b7f65"})

1m21.690477374s ago: executing program 4 (id=8985):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000040)={0x2, 0x200, 0x0, 0x1, 0xfffffffc, 0x3e})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffe60000fd000000000000edffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000006000000089"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000180)={0x0, 0xfffffdf6, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20)
bind$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x1}}, 0x10)
mkdir(&(0x7f00000000c0)='./bus\x00', 0xf6)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r4, 0x0, 0x7}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3}, 0xc)

1m17.377201845s ago: executing program 4 (id=9011):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd06, &(0x7f0000000000))

1m17.2823546s ago: executing program 4 (id=9013):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
fcntl$setstatus(r2, 0x4, 0x6000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x10000000}, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0x2000}])
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x15, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @alu={0x4, 0x1, 0x9, 0x1, 0x4, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x38}, @alu={0x4, 0x1, 0x1, 0x3, 0x5, 0x10, 0x1}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

1m17.26603347s ago: executing program 46 (id=9013):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
fcntl$setstatus(r2, 0x4, 0x6000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x10000000}, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0x2000}])
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x15, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @alu={0x4, 0x1, 0x9, 0x1, 0x4, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x38}, @alu={0x4, 0x1, 0x1, 0x3, 0x5, 0x10, 0x1}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)

55.372553353s ago: executing program 7 (id=9203):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a2702834492796d83000000000b09007a150b00000000378841f944ea7e104bc7148499397363c60d39720d5c3fc21dfc"], 0x0}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x25)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
read$msr(r2, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x11, r3, 0x37d75000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2b9, 0x9174, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0xd4, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}}}}})
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x5)
getdents64(0xffffffffffffffff, &(0x7f0000002b40)=""/4144, 0x1030)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000000, 0x80}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xdcc14db29e37bbf5}, 0x1)

53.607924906s ago: executing program 7 (id=9216):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r1}, &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 hash=%'], 0x0, 0x0)

53.593745246s ago: executing program 7 (id=9217):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="784e8532bc51d9778e4bbb81e255693d2832f3802728ed763aacf318e80e1b19cf30c5f4214185052aab22dea830553c6db324352d6edce6927f9e747f08a659c1365f8b318c734936b24ccb80c8b9892cf2d5f5e6f9bd14951b8dac37e3c51873f21eb6a3d5b0f6852ef05a094926bd00f74ab5d68f2dbec3a6471ec5517ea7973b0eadd203e9d651881048bf4102cc30729aae5c8a1b3a4223a29d92aa550723d99f6596f26bfc66e02de540c397a62d50bb060246300520caddf20ae6701bac03fe94aec0bb32b8ee92dd974bb54ea2ccc2959f4f07e91cb2f22e8e16b11cee681e1f909bc6edfd7d05f7c914a76c9c99879bc728e358d8fcd7e3767117482364ed76b0bd26fca5cc821dfcc0320e2da567cf8e266adcfa020bdc376bb0e3a3cc9725682a957265884a6705f12b04414779837b8fe1ac5457fc005d8609efe3a00007d08ac5a9c7442bbd775f9d7ff490b3fb820e2f4e64c31cfa2101de770ad8d0903c2cf7f907fccfadad58b54d3e76d855ccc9e69fa067578ef929d153e148f0e611a40fe480ee02c2c6880a3ebf78f949e53ffef9aab25fb2816e2933f480d6d60a91c045b70211934ace2695a867eb88d29b2253174baaa56ce64db43e4f5cc822d371c92fd49dec3ac483d904343b3549e529cac2b8be9532f073d7e7c742cf7fa09b030b36671b397e03b9aca2dea714e57b7b429bd064b3c5406b960dfceba3b624c67490309875a87a93250a9113c7e051c506ecb935ed7beef8b644e7725c473250b4b88c78a33c7329ae801e09fed0a408a4e7af19c2fe674b1a56da16c8aad062b00dc84ea79442cfca1645ee35e9bc22ce3199862506cb15cd79c2704c5b86bd992045fe4f8b3e07a9fe59f7b829a232a5fa15b8bcc971857e036afa9651cf114ac34600be4f663f07067e1e55ed8aa1641f6381cb6ce2cb751f032bd6588835acf67ddf7a3af75526ca75bdcfc7a5566044af497610e79987c61d8e5d8292a88107a5b4ee93a34eac880433585092356f76f2633db86b1a1412e10d3932bb7a52d3007dd635bda34a82769e5a9bdade27aed4f9c68f8527924b07749980e1e15c708010274a6c6ebc5213fe31d3bc459051823b7ee6c32797239e40d4821209b498c95080a2ca90c479da86c164304e02a7e71b8f55586292cc9fafa4c5bda285a9de792d6a6a03e5a1f2a13eac02a95f87f13fbfbedc6533b78cf5ac5ce562ef504f95465814f9bb35495196b73780c0a5fc7c6a006ee2d34123c1224d9c08baf0611ba9e7ceb3ccf887e58a78fe236947c4a486c83e49e0070d4fa81a9652e690dcdae169ebd65c281a863905a7ecf9c8f19fe059b2022ef75ab1e9c7c1ad532ff25da12c5e250f601ce95844223310d9959fddc0e684979c6f15d7673512237239b9eb48f72a930e5cc64c382c662db18581eb0069b2242058812f1ae092e139411fc8ec242e8f7dd4da10bcd3f92c0715edf775ffaabd181a36d2a39ceb192e3ebdff02c0c75bd259e725fd4cd5c2722efc41f37ab25706485a265d683c8569c3209a930e05047074b3941f41003d550d923e6dd50110e18d965763727739902067e73a520270c5cb53d6fd22ec4ea8853d113451cb3da2a7a698c807ec394c1da0b9de2a1d62f24a2292c65640ef6a0924191133e80aa60e4f8f5adbae3131956b38c997085f25f54338653d65847f1602e1ad7eb9501f9867e1bfc2410c3fc6402a1f605c0088ef13db8cf967a868e7ae2713b1dc297a5ab33b27566df656d954ee44ffed8a15bac40262099a3287f40425cd146c4a9639321fd46dd85dab9000bce3558f7c99de2849d57041d79082b82faf85abf5ac0c325ca3645500d2bb04809ac3ab33c24b738765d80c610c917b756a1cd4da3ce0921ae1789ea8c3f00532fe97c435cda5a2f5013b90ea596389af1fbba1510ce50d3476019d70be6634ddabdc925324e0bf6914a803c9bccb9f4daa61e9250e05a0d6e906d68418f906dfdcc416441828680bc9160a932168adf51240bce901a1eee84f69dce9cee3378f8414188afc484cfb92043b352271552a152ecac0ec1ba19f1dc72db5d4155d5bf6a63aee9a702f1e194082e609bb30419901349d244a11617795b4580a849196f5c67ed4b060e42b394bbfb4bbfa601d2c8ddff5986563df99b5f02a0f61d56d11a47095651d7337c7c167a04e4a71596fe58486d74bc8ef0a82c370c9ed24e58ed5950b119664767fd6742e967199c4671f5b48a2d723dabc77fc7f9ac57cc36d95b0e336032ccb4647a5502e44db059bb0bce58e4ed4bdd6931cc92c782c75d44d4a1f25e6f6ca076f2ea586ac5daadc5599aa6e5bb26206ffc1310779cba10d72bdbb7ef62b9d22bec948b2153afa5a8e1c1d8d724fc673069c74564102400417452c5eb5350e2a50a732f76122a5648525fa1793a0af6e0a3dcb568a598f7c179e908b40f19fc10a16d53b112692adc1e4dc954009f726057acf04a9740f6bb66327e746dcd7b8b8851e622f9da2c9ddd124e300f03f07e77cf04a263329b435ed04eadb9dc91cfe396f41114283eccbf58f2dccfe32f908cea6678f7490bacbe60c75eb2754e9722b2c58771537966bfe1066c4d28bcceccdca07eb60ddc355aa710266da85e456aa83739fea4ad7dadf461c682201391fa550e12e01be5a2a2c55c3b697aa2e176aad4be5a8dbfb8043f72c5743992e5c7000608a2cf86d88885bf6e1e2173b1361cec282ef35bde24cf99c11110c16c1678c38b74738911ec3eac23067500103f0f5d7dff122fca66852126ce9ac10c7c065992b3fcd81f7d94adad6fcb45872d3fa97f5d704f1653dad962c16daa6978e2fcf41f10257c306fc05fe4cd20e30989b37b19e874f27a065c8d62f2b4194a1540199be22b7e267ce6d2ffc8243421d9f629f5048587ff5d91f8c7bbb9049b40d859e6d382926ba8f005deb18727cefd76198d00d92ef680b56864c9eea9dca35b0e90d0afe1440af704bf00bd68ca088c568088d6aa34a42d66645743ad481b9e5490cfcee486f456490a0e9c3a0bff49b528871a4dfb104a18ba6a22df288349b6fca36b1908c548e90cec26fa28a0772fa4e9418c8d02a3319bc9e8f3892fc933f465ccb6ec683fdc9dd5854bb1295d114bde2e84d04513897ed3ee41ecc1d6d0354c57046c58e390836f11b3e6d4712f7d61b221aa147a58c3903b319a3da746296e576ae21bca4c1c939986fe04145093c4b9173e1936654c4bfd9aaa4efdd39f2a39e9554fe1bfee4597ce8c798b6233e22a8dcdc7e610ddf6a8c810e7429bb2fcd60f7108119112b3cc5a71fef1fac311afa0d034fd00954111ded4cf381d6a73cc4f6165052325e04566fbb2c644e8bd7e7cf3923af608af8f3537deaaef891bdc258a8341e742f62727444c2cb28ccf8c7e3d79d1162c29af2914627830fe3433c8beb27efc8e08f14581ee0acb0a761a2b0a1f219601c9bae3c6d92f2d3d712e9c239d2910e9ea0f539bc069b7e8a1e36abb4e3ec20ca1677fa0cf3c4d2d3180d15a3c808d0421b564fcb180316df4f46b33df1e57ca2644d8b3fcdd13fef43a3ab76982887a4751615e7665d639854c8c3a8bdceb6cee0fb00fb19f98c42cd6a555da3c4d6a5c6c3ca9f7ccece5bee4907e8676a05aaf4213d4e60c4f5f0bf1a8126b6555ec137dc5f7ca56901bf21329da5a6ad30ebd1d454d7ee3110ae88de0109084e1cdc6342b68883a5205ef763645cdf26815e9f99f8c4bcc5227142ba4e9da752abe3ce3a11f2df8aff40ea3db731c8c1992fc0ab2681c9613861f61f8173d7fafd7a3516e169a8c0541d7632a59641ad3c67ca2cde8dcfcababaa676e25f113d0a6bf3274fc532fafb6042b633051039d682d87477f3a14fa77a7966a6f019738c0a8eb737eea7464d4477f7be1a4553ae736f0dde836688cd4d90e0d207cb82b33f1207d893b1c720d3070c73d6a9b1e52634aea9117ba6a3c063c28e46a687ab0e239b0d95cc2eb76f2b1b6fa6963bb11489e490e70d7f2394cb350f952170a0f6c6338e8460579a1013d9bbc9cc438f617551803af00700e636d0545a4a6877698441b5961cf86d5c40fbbf95775d13dbb50de6a565bd98c3fc8db86278de0bdada8860917ae00345191f96cdffb43216705048851b9bb9cca1e14d394bd9ecd6f567cb16a17592535b0322d143e14f0f982262d5ea7f6790e16c49f6e8740c40be3ae70bf21e5691a175b0060e72c8025f46a439732b8cb8239a5e6823846838f54cb939beca1ca0425c3e43027b3526fc1ffe5e71b72a908002e2e5090e343e87c82cbf2f162f2fef4081c4212b9e4eed4f746a85859f33bcca464667b850851c6e6aafacf930c2f70e777133c651c1851ea8015a9f01cf7c41bf37af677dcd6ad9b0a8eb235f73db7f72007b9d12044451725c559f47deb4bf5054f154e805788a39e69754a054aff979122800365765843cce90a93a3bc6955963594e02da9f7fad62743419870c04751fcd7d8800fc17d6c1566fd1c35f9b464d235d7569f2d0cceeee1c5adbff3e87f3e67bc4beaa4a3fb948b2241b315d0d2a2060bdb2514eaae67a0add5ff446c8291c69d3acd9b7ffa4d01490994bf0135759ba56973d703883c4736c76f5dacb2629bdb429e41bce829bf72b13c0c3d0163efff66b3cde89a61ec6d4a0c3269924934575ff6a6656fc89e9d0d5a5d2a093022b9791763c14a76581e5e1e9f0cf56803e3a29fa93610cff5473a9299dff90e5bfd0e078bc0c4f48a7e379c63b5b048a5ddaeddb495c1631b871f053ad863e832fdc250c1de5242375734feb2895f905d77a1cb3219bb48c3a1403173e401f99d30e5af3731a08fc47186657353cef9e0a628cbf2f67bbe297c9e5bc1b99968f6d744e338a9b3618f180e49d1b641290b2beeaba720abdf6ef0391ab5499d15b5ee5480060e05bb1b50e6516f1f28588343c73c037f410a413cddaecaca940072844ad343a497984d45aa9b8e2be120b8bd0c6e786f5541e7d400d58431417001694a990af3270f82e4a8717e29514f78d0f8e8d9fb373268656b60c0c1c81999f86343a5271481bdf7b724b55d8ae05cb2ef6d81a7688d2f13a087b4759f3dae8762f76b4cd1fd61cf5b50667e1010c1ae5cd00761b7e077238647ba9206513bf9c62b507088c2d60e76030d572a86a217eca7480886aa9c3a93019316ffcb1555d978a1ed048adbdfd0b128eb073e5eb9593789b7474a8fe1695a7176deb561cd8cd656fd852df410aa4642f1c1534a272b9a0a6e6f1d660d035a4ed6f566678b83775f359a1119643b28b2466c1d192b54bcd3c2e7104ecf1d5fa70544bd38a0edbf26e9a6844bd9adade62cc76be8f2840c50afb9fe95698b945fe2fe17080f4c296b474e47179583f4cdf36fb93c4d53ff4d0697a221d497ce4240db574b53f60dd38862e7e04e64bfdd53639ea6c4b60ec39f7425dab78c7635fac31685b626b67119e3afb3e682fe3476e82b18f115b4b45366816012fb579d67e1f01028622ab891d3a44db13fb8b15ceb4aa88be06c80b049176fd368d32d06975d402b3f4078828edeb8ea49220e888ef3aec7f572aec2ad09c216626a9121f9533b6cb0e5084ebbc1c8b77ddd0021cf749310ab316c285090b50315e51eb6ea04411c77ed685ca0a674aafbb5d39e7752de1956b5811a8e6dc259a5bf1cc43ff94e0eca9bee7452bb81d52480b3760f3563617cd0a5a297cff0da357f678f95ce433de5cca614114916a3b35d4a911c0", 0x1000}], 0x1}}], 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
writev(r0, &(0x7f0000001780)=[{&(0x7f0000000080)="62d6c45c11cd9730f7a15b8ab79f", 0xe}, {&(0x7f0000000180)="cffbb818b14d62448d46e4cfa778baea843c7ed9c96d3bc87a75513dedde3df1f5391fa3b3f537776fa2a490a6ac0b683e43d6abf120bd5d0009786b59fd959205299879b4c1753fb9deffd810b6bb8312cd6ad3115602b7f467bf7820bbc5b5d7c25c940d2ed76cb7504690d65f49f02fc2f49794a68683700dad15216280bdc5af97967a88ce9940bd3cdb96185ea0a97a77af6153c5da963b9d7b51297c124c3c9cf81de750ef7cf603fbe134725e692050675ecc", 0xb6}, {&(0x7f0000001240)="e29f45a2c2c3a0ba302c9abcb392e4b0a7c2ba7c83a7d791a5ee2fef9d1cb0f7bf30d069476948d8ad09b3fa213b90c71f750d008f10c104573ede78683827f773849f2d81e7639857c71ed4c7c1f0c7e99b477163e112201434b98a2a1215c9edc059b94d9e10f560c756322a72a42db605db1489335e6f437d7dc7c170932d3dda1c65ee8f0ef1edd3f731002b04bc", 0x90}, {&(0x7f0000001300)="e64176ef0a81712f45ab891dceae24a934837227984c2abeb4b3df2b0f77253f81727fdd9ff4545699b2b1e8f4fee1332fa14615b14a40fc918340929e18e62efc03a63415b7a597935d07b0e06fc141", 0x50}, {&(0x7f0000001380)='z', 0x1}, {&(0x7f00000013c0)="3a71226e00a271477c92cc9168e7e31a2a3d2b5033aacc6a9e9a3543b53f094d523cfa4a38dbaad0ae619e155459134cb01bc73c32942e4c1173ea8371a5894ea3ff8a1d236479e343cef0bc088191d903b3ee3d5808f0aad3785607f2935eac4d1a15c232269c079fdff9fdfdbaaacc664c2afec03aff008a3fed24fc0037494b185e5ec3eb5b5e3965c3359a6adae5", 0x90}, {&(0x7f0000001480)="b8db2d706e442d2d0178a699270daba05887176bc524d1745065d34dfea18f62f8cc5f46edf4555af745ebc39a237ca7f01664b27dcb22ee6df6631626f42cf07c5aa060b4131ebe637516be97084cd129208b998e88e03a09855988f5321c4ee1419b17833f2b9296ab5dad305a59089dc08fe047d1f8fcc41447cec8a19073da636762e967385782692b4478275814980883f15d40fde426727834a0e2f9c37ebb4688c0f110e25bdb04f0a9c639ea", 0xb0}, {&(0x7f0000001640)="d10ae229d18b2cec1d38b0f6c565b35e02f5346c4a0308441d8af6eb04ddb94e0bec8b08ebb47013e4c60b1a2a315214c5e1aa61a399b82ee6448819de0faf68fcba7d0de6c4b6a2ef6738e8340f55831b2cc780cf0c0e47748de003804180faa27d6ed33def05d0e5789f75e4c74ffb9b0bf3a5b8d8e9bc9b6cd3685052bfb5fb8e5f57376d18591f7d254d8fbdba04240b3719c0ff63572b6c581f9e94aa11a63cc89c521cd3b9943c5fc9bc64575d65b6f4766f49fa722d80273347539d77f0676a81a281a12dcedd7505e2266b6fb3897b556a245d60728d7c54709ee9da8da26bdab734225d7f9a11da0afd8d", 0xef}, {&(0x7f0000001740)="8ce144fad7bcb83032653a551cd32db6bcf5b7167193a9883c24409a42ebb0124c242b4b", 0x24}], 0x9)
getsockopt$packet_int(r1, 0x107, 0x13, 0x0, &(0x7f0000001600)=0x20)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000aa3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0xff2b)

52.141648434s ago: executing program 7 (id=9222):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x6, 0x7}, 0x50)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xbe9f6000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r1 = userfaultfd(0x801)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c696b", 0x23)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000862000/0x4000)=nil, &(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001d0000000000000015000010"], 0x1c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000680000/0x4000)=nil, 0x4000}, 0x1})
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000140)={0x110000, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000280)={0x10200, 0x1, 0x54000, 0x2000, &(0x7f000079f000/0x2000)=nil, 0x2000, r6})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9)

51.418367818s ago: executing program 7 (id=9229):
r0 = inotify_init()
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
inotify_add_watch(r0, &(0x7f0000000140)='./mnt\x00', 0x150003de)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f0000000180)={0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x37f, 0x0, 0x0, 0x1000, 0x1, r1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_clone(0xc080000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

51.417987898s ago: executing program 7 (id=9230):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10400, &(0x7f0000000040)=ANY=[], 0x5, 0x559c, &(0x7f0000001f40)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44000, 0x50)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

51.417731988s ago: executing program 47 (id=9230):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10400, &(0x7f0000000040)=ANY=[], 0x5, 0x559c, &(0x7f0000001f40)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44000, 0x50)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

4.206578523s ago: executing program 6 (id=9604):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1000000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x80000000000000, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)

4.206370203s ago: executing program 6 (id=9605):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000300)={0x60000018})
epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0xdf0, 0x0, 0x0)

3.295111556s ago: executing program 3 (id=9613):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000)
read(r0, &(0x7f00000002c0)=""/148, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40)

3.124228334s ago: executing program 6 (id=9614):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c00)={0x1c, &(0x7f0000000280)={0x0, 0x30, 0xb, "da81715ba42649ce7073a1"}, 0x0, 0x0})

3.117128834s ago: executing program 2 (id=9615):
mmap$IORING_OFF_SQ_RING(0x0, 0xbffffd, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)

2.718264573s ago: executing program 5 (id=9616):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.718032923s ago: executing program 2 (id=9617):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
close(0xffffffffffffffff)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0)
close(0xffffffffffffffff)
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')

2.681169065s ago: executing program 2 (id=9618):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0)

2.636508307s ago: executing program 3 (id=9619):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x65)

2.572898939s ago: executing program 3 (id=9620):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000000a01010100000000000000000002c865ff1414bb000000000000000000000000000004001019080002"], 0xb8}}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0)

2.572185059s ago: executing program 3 (id=9621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380))

2.091086052s ago: executing program 5 (id=9623):
unshare(0x28000600)
r0 = dup(0xffffffffffffffff)
shutdown(r0, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0xff}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0)

2.042901364s ago: executing program 5 (id=9624):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc16}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x10001}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

1.982662937s ago: executing program 5 (id=9625):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffbffd, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4090}, 0x2c000010)

1.982394057s ago: executing program 5 (id=9626):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000580)='./bus\x00', 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00')
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2cb, &(0x7f00000004c0)="$eJzs3T9rJGUYAPBndmc3iQq7hZUIDmhhFS73CS5IhNNUyhTaqHg5kOxykMWFUzFeZS9Y+Qls/A6WFjZ+AwtLwc5DxJHJzOzfyd3lWPaO8Ps1eXbf93nnfZ95s4HAvPvxq+PTO/cmdx989Xvs7ibRuRW34mESw+hE45sAAK6Th0URfxWViH5Lj3dmUXrRXgzqV53tzRIA2KTlv/+P9c+TdQMAnmfvf/Dhu4fHx0fvZdluxPjbaZ5ExDiZ5lX74d34LEZxEjdiEP9GFDNV/NLt46NIs6z5Z8B0L/KI8Ue/1q8P/4y4yD+IQQzX89++fXx0kFXijfH5NC+vXP7sxQtJxGGRVAPdjEG8HFH0oh5knn+zJT/yfrz5+g/1/P87if0YxG+fxr0YRZKWufP8rw+y7K3i+7+/rFaQRyTn03wn7ixVquhu7aYAAAAAAAAAAAAAAAAAAAAAAHDt7Wczw8Xzc5pj/vb329svzgfqtpwPVJ/wc75wvs6NLMuaY3ymeS+q/DReSSN9posHAAAAAAAAAAAAAAAAAACA58Tk/henn4xGJ2dLwc+dz3+MaG2aB/UT/VG/ky40pdFZbHr0OC3B6U+PvfpTBtGtZz1K1i7RLOiJB0wv77xzlYnttY1Tl7Clhukoqsl/d/UivHalBZZB8RR1bnZXuUke0bkbk/u7awtMymBhZ+7Vg51NLm7Q3mWbdjkoFkpX3vMy6F6a1d/QHuu/uNlNW664NyvmrKnfFHixc2+zvym9lU+KZBb90t/kJxAAAAAAAAAAAAAAAAAAANCYP/Qbf6w1PngmUwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArZt///8siOHqO6vBeZ180pa+EuycTVouO9zyMgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjm/g8AAP//vUJWHA==")

1.982137497s ago: executing program 5 (id=9627):
r0 = syz_usb_connect$midi(0x1, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x7, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x9, 0x7, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.969295018s ago: executing program 9 (id=9628):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}})

1.861461473s ago: executing program 9 (id=9629):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

1.634634763s ago: executing program 9 (id=9630):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000)
read(r0, &(0x7f00000002c0)=""/148, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40)

1.634022623s ago: executing program 3 (id=9640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setfsgid(0xee00)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)

1.0727764s ago: executing program 9 (id=9631):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)

1.042980381s ago: executing program 9 (id=9632):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$inet6(0xa, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.032360971s ago: executing program 2 (id=9633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

946.418225ms ago: executing program 6 (id=9634):
r0 = socket$netlink(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)='X\x00\x00', 0x3}], 0x1)

650.716029ms ago: executing program 3 (id=9635):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

639.24315ms ago: executing program 6 (id=9636):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfffffe01}, {0x5, 0x21, 0x7, 0xfffffff8}]}, 0x10)
syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@quota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)

600.666862ms ago: executing program 6 (id=9637):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20)

25.965929ms ago: executing program 9 (id=9638):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$OCFS2_IOC_RESVSP(r2, 0x402c5828, 0x0)

12.217199ms ago: executing program 2 (id=9639):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=9641):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
listen(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7f, 0x5, 0x0, 0x1}, {0x8, 0x3, 0x9}]}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

kernel console output (not intermixed with test programs):

9][   T29]  ? __cfi_queue_delayed_work_on+0x10/0x10
[ 1463.644471][   T29]  ? _raw_spin_unlock+0x4c/0x70
[ 1463.649377][   T29]  wait_for_common+0x364/0x640
[ 1463.654220][   T29]  ? wait_for_completion+0x20/0x20
[ 1463.659381][   T29]  wait_for_completion+0x18/0x20
[ 1463.659950][  T845] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[ 1463.664372][   T29]  __synchronize_srcu+0x173/0x200
[ 1463.664400][   T29]  ? synchronize_srcu_expedited+0x20/0x20
[ 1463.664423][   T29]  ? _raw_spin_lock_irqsave+0xc2/0x130
[ 1463.664453][   T29]  ? __cfi_wakeme_after_rcu+0x10/0x10
[ 1463.664483][   T29]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[ 1463.664509][   T29]  ? ktime_get_mono_fast_ns+0x1b3/0x1d0
[ 1463.664533][   T29]  synchronize_srcu+0x1c5/0x1d0
[ 1463.664557][   T29]  rcu_tasks_postscan+0x10/0x20
[ 1463.664578][   T29]  rcu_tasks_wait_gp+0x2ec/0xa30
[ 1463.664610][   T29]  ? __kasan_check_write+0x14/0x20
[ 1463.664634][   T29]  ? _raw_spin_lock_irqsave+0xc2/0x130
[ 1463.664665][   T29]  ? __cfi_rcu_tasks_wait_gp+0x10/0x10
[ 1463.664686][   T29]  ? mutex_lock+0x93/0x1b0
[ 1463.664711][   T29]  rcu_tasks_one_gp+0xc25/0xde0
[ 1463.664732][   T29]  ? schedule_timeout+0x1a7/0x340
[ 1463.664765][   T29]  rcu_tasks_kthread+0x6a/0x90
[ 1463.664785][   T29]  kthread+0x281/0x320
[ 1463.664808][   T29]  ? __cfi_rcu_tasks_kthread+0x10/0x10
[ 1463.664828][   T29]  ? __cfi_kthread+0x10/0x10
[ 1463.664850][   T29]  ret_from_fork+0x1f/0x30
[ 1463.664878][   T29]  </TASK>
[ 1463.672245][   T29] NMI backtrace for cpu 0
[ 1463.672260][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G        W          syzkaller #0
[ 1463.672288][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1463.672301][   T29] Call Trace:
[ 1463.803537][   T29]  <TASK>
[ 1463.806477][   T29]  __dump_stack+0x21/0x24
[ 1463.810830][   T29]  dump_stack_lvl+0x110/0x170
[ 1463.815521][   T29]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1463.820634][   T29]  ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960
[ 1463.827271][   T29]  dump_stack+0x15/0x24
[ 1463.831445][   T29]  nmi_cpu_backtrace+0x2af/0x2c0
[ 1463.836399][   T29]  ? rcu_read_unlock_special+0xb2/0x450
[ 1463.841965][   T29]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[ 1463.847429][   T29]  ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0
[ 1463.853498][   T29]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 1463.859487][   T29]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 1463.865482][   T29]  nmi_trigger_cpumask_backtrace+0x16b/0x3a0
[ 1463.871468][   T29]  arch_trigger_cpumask_backtrace+0x10/0x20
[ 1463.877384][   T29]  watchdog+0xde1/0xf30
[ 1463.881556][   T29]  ? __cfi_watchdog+0x10/0x10
[ 1463.886245][   T29]  ? __kasan_check_read+0x11/0x20
[ 1463.891314][   T29]  ? __kthread_parkme+0x13a/0x180
[ 1463.896353][   T29]  kthread+0x281/0x320
[ 1463.900436][   T29]  ? __cfi_watchdog+0x10/0x10
[ 1463.905128][   T29]  ? __cfi_kthread+0x10/0x10
[ 1463.909731][   T29]  ret_from_fork+0x1f/0x30
[ 1463.914168][   T29]  </TASK>
[ 1463.917556][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1463.922875][    C1] NMI backtrace for cpu 1
[ 1463.922887][    C1] CPU: 1 PID: 2174 Comm: syz.3.9066 Tainted: G        W          syzkaller #0
[ 1463.922905][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1463.922916][    C1] RIP: 0010:preempt_count_add+0x42/0x1b0
[ 1463.922950][    C1] Code: b7 87 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 01 01 00 00 83 3d ce 2d 6b 06 00 75 07 65 8b 05 8d da b5 7e 65 01 3d 86 da b5 7e <48> c7 c0 00 c1 b7 87 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 fc 00
[ 1463.922964][    C1] RSP: 0018:ffffc90001787578 EFLAGS: 00000282
[ 1463.922979][    C1] RAX: 0000000080000000 RBX: ffffc900017d9048 RCX: ffffffff87b7c103
[ 1463.922991][    C1] RDX: ffffc900011b1000 RSI: 000000000007ffff RDI: 0000000000000201
[ 1463.923003][    C1] RBP: ffffc90001787590 R08: 0000000000000003 R09: 0000000000000004
[ 1463.923014][    C1] R10: dffffc0000000000 R11: fffff520002f0eb8 R12: dffffc0000000000
[ 1463.923026][    C1] R13: 1ffff920002fb201 R14: ffffc900017875c0 R15: dffffc0000000000
[ 1463.923039][    C1] FS:  00007f853ddbc6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1463.923053][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1463.923065][    C1] CR2: 00007f1db0ff2e20 CR3: 0000000125ec1000 CR4: 00000000003506a0
[ 1463.923080][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1463.923097][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1463.923108][    C1] Call Trace:
[ 1463.923113][    C1]  <TASK>
[ 1463.923119][    C1]  _raw_spin_lock_bh+0x6c/0xf0
[ 1463.923143][    C1]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[ 1463.923168][    C1]  htable_put+0x301/0x650
[ 1463.923184][    C1]  ? nf_ct_netns_do_put+0x2de/0x3f0
[ 1463.923284][    C1]  ? nf_ct_netns_put+0x144/0x360
[ 1463.923304][    C1]  ? __cfi_hashlimit_mt_destroy_v1+0x10/0x10
[ 1463.923320][    C1]  hashlimit_mt_destroy_v1+0x58/0x60
[ 1463.923336][    C1]  cleanup_entry+0x165/0x370
[ 1463.923378][    C1]  ? translate_table+0x2030/0x2030
[ 1463.923399][    C1]  translate_table+0x1e17/0x2030
[ 1463.923421][    C1]  ? ip6t_register_table+0x7c0/0x7c0
[ 1463.923436][    C1]  ? sysvec_reschedule_ipi+0x78/0x80
[ 1463.923455][    C1]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[ 1463.923477][    C1]  ? _copy_from_user+0x8f/0xc0
[ 1463.923501][    C1]  ? copy_from_sockptr_offset+0x77/0x90
[ 1463.923520][    C1]  do_ip6t_set_ctl+0x9e9/0xe00
[ 1463.923537][    C1]  ? __schedule+0xcbb/0x1700
[ 1463.923561][    C1]  ? __cfi_do_ip6t_set_ctl+0x10/0x10
[ 1463.923579][    C1]  ? release_firmware_map_entry+0x190/0x190
[ 1463.923607][    C1]  ? __kasan_check_read+0x11/0x20
[ 1463.923625][    C1]  ? __kasan_check_write+0x14/0x20
[ 1463.923641][    C1]  ? mutex_unlock+0x8f/0x230
[ 1463.923657][    C1]  ? __cfi_mutex_unlock+0x10/0x10
[ 1463.923673][    C1]  ? irqentry_exit+0x37/0x40
[ 1463.923692][    C1]  nf_setsockopt+0x284/0x2b0
[ 1463.923729][    C1]  ipv6_setsockopt+0x170/0x1a0
[ 1463.923746][    C1]  tcp_setsockopt+0xeb/0x100
[ 1463.923784][    C1]  sock_common_setsockopt+0xb1/0xc0
[ 1463.923802][    C1]  ? __cfi_sock_common_setsockopt+0x10/0x10
[ 1463.923819][    C1]  __sys_setsockopt+0x2ff/0x4e0
[ 1463.923842][    C1]  ? __cfi___sys_setsockopt+0x10/0x10
[ 1463.923863][    C1]  ? __this_cpu_preempt_check+0x13/0x20
[ 1463.923883][    C1]  ? xfd_validate_state+0x70/0x150
[ 1463.923907][    C1]  ? __kasan_check_write+0x14/0x20
[ 1463.923923][    C1]  ? fpregs_restore_userregs+0x128/0x260
[ 1463.923942][    C1]  __x64_sys_setsockopt+0xbf/0xd0
[ 1463.923965][    C1]  x64_sys_call+0x124/0x9a0
[ 1463.923983][    C1]  do_syscall_64+0x4c/0xa0
[ 1463.924006][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1463.924023][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1463.924040][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1463.924057][    C1] RIP: 0033:0x7f853cf9e159
[ 1463.924070][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1463.924084][    C1] RSP: 002b:00007f853ddbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1463.924123][    C1] RAX: ffffffffffffffda RBX: 00007f853d225fa0 RCX: 00007f853cf9e159
[ 1463.924136][    C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008
[ 1463.924147][    C1] RBP: 00007f853d03506b R08: 0000000000000528 R09: 0000000000000000
[ 1463.924158][    C1] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000
[ 1463.924170][    C1] R13: 00007f853d226038 R14: 00007f853d225fa0 R15: 00007ffe8af75628
[ 1463.924187][    C1]  </TASK>
[ 1463.971878][ T2183] xt_l2tp: v2 doesn't support IP mode
[ 1464.075018][T31039] usb 7-1: Audio class v2/v3 interfaces need an interface association
[ 1464.369979][  T845] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[ 1464.387397][ T2068] udevd[2068]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1464.406730][  T845] usb 3-1: USB disconnect, device number 102
[ 1464.419360][T31039] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[ 1464.447866][T31039] usb 7-1: USB disconnect, device number 34
[ 1464.679943][   T28] kauditd_printk_skb: 128 callbacks suppressed
[ 1464.679961][   T28] audit: type=1400 audit(1700133172.373:15947): avc:  denied  { mount } for  pid=2214 comm="syz.3.9079" name="/" dev="incremental-fs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1464.931588][  T845] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1464.939368][T31039] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1465.122989][  T845] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1465.133813][  T845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024
[ 1465.133905][T31039] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1465.152820][  T845] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1465.162863][  T845] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1465.176497][T31039] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1465.187545][T31039] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7
[ 1465.199311][  T845] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[ 1465.208482][  T845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.216660][  T845] usb 3-1: Product: syz
[ 1465.221036][  T845] usb 3-1: Manufacturer: syz
[ 1465.225726][  T845] usb 3-1: SerialNumber: syz
[ 1465.230406][T31039] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[ 1465.240284][T31039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.248405][T31039] usb 7-1: Product: syz
[ 1465.248600][ T2208] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1465.252760][T31039] usb 7-1: Manufacturer: syz
[ 1465.264387][T31039] usb 7-1: SerialNumber: syz
[ 1465.270807][  T845] ums-onetouch 3-1:1.0: USB Mass Storage device detected
[ 1465.501066][T31039] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1465.534687][  T845] usb 3-1: USB disconnect, device number 103
[ 1465.540975][T31039] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1465.573270][T31039] usb 7-1: USB disconnect, device number 35
[ 1465.601287][ T2235] xt_hashlimit: size too large, truncated to 1048576
[ 1466.312707][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9095'.
[ 1466.322105][ T2263] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9095'.
[ 1466.631562][T31039] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1466.742559][ T2272] Mass Storage Function, version: 2009/09/11
[ 1466.748727][ T2272] LUN: removable file: (no medium)
[ 1466.754533][   T28] audit: type=1400 audit(1700149815.456:15948): avc:  denied  { read } for  pid=2271 comm="syz.7.9099" name="nofua" dev="configfs" ino=139321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 1466.831528][T31039] usb 7-1: Using ep0 maxpacket: 16
[ 1466.839303][T31039] usb 7-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1466.858583][T31039] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1466.882485][ T2275] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9099'.
[ 1466.892961][T31039] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1466.897420][ T2277] xt_hashlimit: size too large, truncated to 1048576
[ 1466.902745][T31039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.917514][T31039] usb 7-1: Product: syz
[ 1466.921864][T31039] usb 7-1: Manufacturer: syz
[ 1466.926540][T31039] usb 7-1: SerialNumber: syz
[ 1467.135427][T31039] usb 7-1: 0:2 : does not exist
[ 1467.153181][T31039] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1467.161209][   T28] audit: type=1400 audit(1700149815.856:15949): avc:  denied  { write } for  pid=2284 comm="syz.2.9103" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[ 1467.189609][T31039] usb 7-1: USB disconnect, device number 36
[ 1467.401904][ T2068] udevd[2068]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1467.547854][   T28] audit: type=1400 audit(1700149816.246:15950): avc:  denied  { getopt } for  pid=2300 comm="syz.7.9110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1467.760668][ T2315] xt_hashlimit: size too large, truncated to 1048576
[ 1467.846330][ T2324] device-mapper: ioctl: name not supplied when creating device
[ 1469.477291][ T2357] device-mapper: ioctl: name not supplied when creating device
[ 1469.701198][ T2377] FAULT_INJECTION: forcing a failure.
[ 1469.701198][ T2377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1469.714421][ T2377] CPU: 1 PID: 2377 Comm: syz.6.9130 Tainted: G        W          syzkaller #0
[ 1469.723308][ T2377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1469.733376][ T2377] Call Trace:
[ 1469.736678][ T2377]  <TASK>
[ 1469.739621][ T2377]  __dump_stack+0x21/0x24
[ 1469.743976][ T2377]  dump_stack_lvl+0x110/0x170
[ 1469.748685][ T2377]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1469.753740][ T2377]  dump_stack+0x15/0x24
[ 1469.757936][ T2377]  should_fail_ex+0x3bf/0x510
[ 1469.762656][ T2377]  should_fail+0xb/0x10
[ 1469.766828][ T2377]  should_fail_usercopy+0x1a/0x20
[ 1469.771868][ T2377]  strncpy_from_user+0x24/0x2c0
[ 1469.776741][ T2377]  ? kmem_cache_alloc+0x166/0x320
[ 1469.781783][ T2377]  ? getname_flags+0xba/0x510
[ 1469.786497][ T2377]  getname_flags+0xf5/0x510
[ 1469.791015][ T2377]  getname+0x19/0x20
[ 1469.794919][ T2377]  do_sys_openat2+0xeb/0x820
[ 1469.799536][ T2377]  ? do_sys_open+0xe0/0xe0
[ 1469.803969][ T2377]  ? ksys_write+0x1fa/0x260
[ 1469.808490][ T2377]  __x64_sys_openat+0x136/0x160
[ 1469.813362][ T2377]  x64_sys_call+0x783/0x9a0
[ 1469.817886][ T2377]  do_syscall_64+0x4c/0xa0
[ 1469.822326][ T2377]  ? clear_bhb_loop+0x30/0x80
[ 1469.827025][ T2377]  ? clear_bhb_loop+0x30/0x80
[ 1469.831721][ T2377]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1469.837632][ T2377] RIP: 0033:0x7f1db0d9e159
[ 1469.842066][ T2377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1469.861696][ T2377] RSP: 002b:00007f1daf7b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1469.870124][ T2377] RAX: ffffffffffffffda RBX: 00007f1db1026180 RCX: 00007f1db0d9e159
[ 1469.878457][ T2377] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1469.886444][ T2377] RBP: 00007f1daf7b5090 R08: 0000000000000000 R09: 0000000000000000
[ 1469.894427][ T2377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1469.902411][ T2377] R13: 00007f1db1026218 R14: 00007f1db1026180 R15: 00007ffe1809a8b8
[ 1469.910423][ T2377]  </TASK>
[ 1470.283349][ T2392] device-mapper: ioctl: name not supplied when creating device
[ 1471.529318][   T28] audit: type=1400 audit(1700166461.220:15951): avc:  denied  { ioctl } for  pid=2408 comm="syz.7.9148" path="socket:[139798]" dev="sockfs" ino=139798 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1471.567718][ T2411] xt_hashlimit: size too large, truncated to 1048576
[ 1471.825777][ T2440] FAULT_INJECTION: forcing a failure.
[ 1471.825777][ T2440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1471.839286][ T2440] CPU: 1 PID: 2440 Comm: syz.9.9161 Tainted: G        W          syzkaller #0
[ 1471.848160][ T2440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1471.858212][ T2440] Call Trace:
[ 1471.861501][ T2440]  <TASK>
[ 1471.864462][ T2440]  __dump_stack+0x21/0x24
[ 1471.868819][ T2440]  dump_stack_lvl+0x110/0x170
[ 1471.873525][ T2440]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1471.878600][ T2440]  dump_stack+0x15/0x24
[ 1471.882775][ T2440]  should_fail_ex+0x3bf/0x510
[ 1471.887465][ T2440]  should_fail+0xb/0x10
[ 1471.891640][ T2440]  should_fail_usercopy+0x1a/0x20
[ 1471.896684][ T2440]  copyin+0x20/0xa0
[ 1471.900527][ T2440]  _copy_from_iter+0x3cd/0xfe0
[ 1471.905315][ T2440]  ? arch_stack_walk+0xfc/0x150
[ 1471.910216][ T2440]  ? __cfi__copy_from_iter+0x10/0x10
[ 1471.915525][ T2440]  ? txopt_get+0x18c/0x210
[ 1471.919993][ T2440]  ? fl6_sock_lookup+0xc0/0xc0
[ 1471.924770][ T2440]  ? __stack_depot_save+0x36/0x490
[ 1471.929897][ T2440]  rawv6_probe_proto_opt+0x170/0x320
[ 1471.935195][ T2440]  rawv6_sendmsg+0xa4a/0x16c0
[ 1471.939876][ T2440]  ? __cfi_avc_has_perm+0x10/0x10
[ 1471.944900][ T2440]  ? __cfi_rawv6_sendmsg+0x10/0x10
[ 1471.950025][ T2440]  ? selinux_socket_sendmsg+0x22f/0x340
[ 1471.955598][ T2440]  ? __fget_files+0x2d1/0x330
[ 1471.960289][ T2440]  ? inet_send_prepare+0x60/0x4d0
[ 1471.965319][ T2440]  inet_sendmsg+0xb6/0xd0
[ 1471.969653][ T2440]  __sys_sendto+0x4ac/0x660
[ 1471.974162][ T2440]  ? __cfi___sys_sendto+0x10/0x10
[ 1471.979196][ T2440]  ? ksys_write+0x1fa/0x260
[ 1471.983697][ T2440]  ? __cfi_ksys_write+0x10/0x10
[ 1471.988544][ T2440]  __x64_sys_sendto+0xe5/0x100
[ 1471.993335][ T2440]  x64_sys_call+0x83/0x9a0
[ 1471.997760][ T2440]  do_syscall_64+0x4c/0xa0
[ 1472.002198][ T2440]  ? clear_bhb_loop+0x30/0x80
[ 1472.006889][ T2440]  ? clear_bhb_loop+0x30/0x80
[ 1472.011623][ T2440]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1472.017538][ T2440] RIP: 0033:0x7f2ad599e159
[ 1472.021960][ T2440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1472.041600][ T2440] RSP: 002b:00007f2ad68ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1472.050058][ T2440] RAX: ffffffffffffffda RBX: 00007f2ad5c25fa0 RCX: 00007f2ad599e159
[ 1472.058055][ T2440] RDX: 000000000000003c RSI: 0000200000000000 RDI: 0000000000000003
[ 1472.066043][ T2440] RBP: 00007f2ad68ad090 R08: 0000000000000000 R09: fffffffffffffec8
[ 1472.074049][ T2440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1472.082022][ T2440] R13: 00007f2ad5c26038 R14: 00007f2ad5c25fa0 R15: 00007ffdeb574678
[ 1472.090034][ T2440]  </TASK>
[ 1472.182989][ T2446] device-mapper: ioctl: name not supplied when creating device
[ 1472.226088][ T2452] xt_hashlimit: size too large, truncated to 1048576
[ 1472.742180][ T2462] ------------[ cut here ]------------
[ 1472.747698][ T2462] WARNING: CPU: 1 PID: 2462 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600
[ 1472.757365][ T2462] Modules linked in:
[ 1472.761291][ T2462] CPU: 1 PID: 2462 Comm: syz.7.9168 Tainted: G        W          syzkaller #0
[ 1472.770573][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1472.780807][ T2462] RIP: 0010:pkcs1pad_verify+0x4b8/0x600
[ 1472.786511][ T2462] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 7f 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 d8 7f 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85
[ 1472.806470][ T2462] RSP: 0018:ffffc9000162f728 EFLAGS: 00010287
[ 1472.812658][ T2462] RAX: ffffffff8244e9c8 RBX: ffff88815a56d000 RCX: 0000000000080000
[ 1472.820677][ T2462] RDX: ffffc90004d12000 RSI: 000000000000057d RDI: 000000000000057e
[ 1472.828796][ T2462] RBP: ffffc9000162f770 R08: ffffc9000162f8af R09: ffffc9000162f898
[ 1472.836846][ T2462] R10: 0000000000000000 R11: ffffffff8244e510 R12: 0000000000000000
[ 1472.844897][ T2462] R13: ffff88811a68a700 R14: dffffc0000000000 R15: ffff88815a56d038
[ 1472.852941][ T2462] FS:  00007f6af37f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1472.861962][ T2462] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1472.868567][ T2462] CR2: 0000200000002100 CR3: 0000000129cf2000 CR4: 00000000003506a0
[ 1472.876591][ T2462] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1472.884608][ T2462] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1472.892632][ T2462] Call Trace:
[ 1472.895930][ T2462]  <TASK>
[ 1472.898868][ T2462]  ? sg_init_one+0x93/0x140
[ 1472.903453][ T2462]  public_key_verify_signature+0x90f/0xd80
[ 1472.909320][ T2462]  ? __cfi_public_key_verify_signature+0x10/0x10
[ 1472.915762][ T2462]  ? __kmem_cache_free+0xb7/0x1b0
[ 1472.920826][ T2462]  ? crypto_destroy_tfm+0x229/0x270
[ 1472.926067][ T2462]  ? software_key_query+0x580/0x840
[ 1472.931315][ T2462]  ? __cfi_public_key_verify_signature_2+0x10/0x10
[ 1472.937917][ T2462]  public_key_verify_signature_2+0x43/0x50
[ 1472.943771][ T2462]  verify_signature+0xe4/0x110
[ 1472.948549][ T2462]  asymmetric_key_verify_signature+0x177/0x220
[ 1472.954815][ T2462]  ? __cfi_asymmetric_key_verify_signature+0x10/0x10
[ 1472.961576][ T2462]  ? should_fail+0xb/0x10
[ 1472.965921][ T2462]  ? __kasan_check_write+0x14/0x20
[ 1472.971063][ T2462]  keyctl_pkey_verify+0x434/0x460
[ 1472.976255][ T2462]  ? __cfi_keyctl_pkey_verify+0x10/0x10
[ 1472.981851][ T2462]  ? kasan_quarantine_put+0x34/0x190
[ 1472.987176][ T2462]  __se_sys_keyctl+0x817/0xe10
[ 1472.991998][ T2462]  ? ____kasan_slab_free+0x13d/0x180
[ 1472.997321][ T2462]  ? __x64_sys_keyctl+0xd0/0xd0
[ 1473.002345][ T2462]  ? do_futex+0x2e2/0x430
[ 1473.006729][ T2462]  ? slab_free_freelist_hook+0xc2/0x190
[ 1473.012354][ T2462]  ? __cfi_do_futex+0x10/0x10
[ 1473.017077][ T2462]  ? __se_sys_futex+0x136/0x310
[ 1473.021978][ T2462]  ? __this_cpu_preempt_check+0x13/0x20
[ 1473.027567][ T2462]  ? xfd_validate_state+0x70/0x150
[ 1473.032746][ T2462]  ? __kasan_check_write+0x14/0x20
[ 1473.037896][ T2462]  ? fpregs_restore_userregs+0x128/0x260
[ 1473.043588][ T2462]  __x64_sys_keyctl+0xbf/0xd0
[ 1473.048296][ T2462]  x64_sys_call+0x71a/0x9a0
[ 1473.052860][ T2462]  do_syscall_64+0x4c/0xa0
[ 1473.057352][ T2462]  ? clear_bhb_loop+0x30/0x80
[ 1473.062086][ T2462]  ? clear_bhb_loop+0x30/0x80
[ 1473.066816][ T2462]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1473.072773][ T2462] RIP: 0033:0x7f6af4d9e159
[ 1473.077268][ T2462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1473.096986][ T2462] RSP: 002b:00007f6af37f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1473.105485][ T2462] RAX: ffffffffffffffda RBX: 00007f6af5026090 RCX: 00007f6af4d9e159
[ 1473.113560][ T2462] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c
[ 1473.121588][ T2462] RBP: 00007f6af4e3506b R08: 0000000000000000 R09: 0000000000000000
[ 1473.129591][ T2462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1473.137623][ T2462] R13: 00007f6af5026128 R14: 00007f6af5026090 R15: 00007ffcb49ca098
[ 1473.145672][ T2462]  </TASK>
[ 1473.148721][ T2462] ---[ end trace 0000000000000000 ]---
[ 1473.641545][  T703] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1473.831558][  T703] usb 10-1: Using ep0 maxpacket: 16
[ 1473.838111][  T703] usb 10-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1473.848804][  T703] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1473.859661][  T703] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1473.869045][  T703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.877441][  T703] usb 10-1: Product: syz
[ 1473.881921][  T703] usb 10-1: Manufacturer: syz
[ 1473.886666][  T703] usb 10-1: SerialNumber: syz
[ 1474.009410][ T2490] xt_hashlimit: size too large, truncated to 1048576
[ 1474.102666][  T703] usb 10-1: 0:2 : does not exist
[ 1474.113833][  T703] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1474.137731][  T703] usb 10-1: USB disconnect, device number 11
[ 1474.697296][   T28] audit: type=1326 audit(1700183105.396:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1474.776607][   T28] audit: type=1326 audit(1700183105.396:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1474.852854][   T28] audit: type=1326 audit(1700183105.426:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1474.949874][   T28] audit: type=1326 audit(1700183105.426:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1475.038704][   T28] audit: type=1326 audit(1700183105.426:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1475.120378][   T28] audit: type=1326 audit(1700183105.426:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1475.186562][   T28] audit: type=1326 audit(1700183105.426:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1475.259770][   T28] audit: type=1326 audit(1700183105.426:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1475.336664][   T28] audit: type=1326 audit(1700183105.426:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2508 comm="syz.7.9186" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af4d9e159 code=0x7ffc0000
[ 1476.792644][ T2547] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9199'.
[ 1476.881621][  T703] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1476.891532][  T845] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1477.081549][  T703] usb 7-1: Using ep0 maxpacket: 16
[ 1477.088069][  T703] usb 7-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1477.099853][   T28] kauditd_printk_skb: 163 callbacks suppressed
[ 1477.099868][   T28] audit: type=1326 audit(1700199748.795:16124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.3.9204" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f853cf9e159 code=0x0
[ 1477.101717][  T845] usb 10-1: Using ep0 maxpacket: 16
[ 1477.106918][  T703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1477.147181][  T845] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1477.158326][  T703] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1477.158355][  T845] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1477.174993][  T703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.177956][  T845] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1477.198274][  T845] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1477.207531][  T703] usb 7-1: Product: syz
[ 1477.211111][  T845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.211811][T30505] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[ 1477.228074][  T845] usb 10-1: config 0 descriptor??
[ 1477.237697][  T703] usb 7-1: Manufacturer: syz
[ 1477.242470][  T703] usb 7-1: SerialNumber: syz
[ 1477.431529][T30505] usb 8-1: Using ep0 maxpacket: 16
[ 1477.443757][T30505] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1477.461812][T30505] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1477.471710][  T703] usb 7-1: 0:2 : does not exist
[ 1477.476773][T30505] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1477.490031][T30505] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1477.499528][T30505] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.512526][  T703] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1477.519968][T30505] usb 8-1: config 0 descriptor??
[ 1477.530042][  T703] usb 7-1: USB disconnect, device number 37
[ 1477.646054][  T845] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.002B/input/input53
[ 1477.722536][  T845] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1477.733186][ T2068] udevd[2068]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1477.865605][  T703] usb 10-1: USB disconnect, device number 12
[ 1477.896291][ T2569] device syz_tun entered promiscuous mode
[ 1477.902150][ T2569] device macsec1 entered promiscuous mode
[ 1477.908794][ T2569] device syz_tun left promiscuous mode
[ 1477.961346][T30505] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002C/input/input54
[ 1477.985891][ T2574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9210'.
[ 1477.996473][ T2574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9210'.
[ 1478.042829][T30505] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[ 1478.176940][T30505] usb 8-1: USB disconnect, device number 44
[ 1478.281544][  T703] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1478.394839][   T28] audit: type=1400 audit(1700216391.097:16125): avc:  denied  { unmount } for  pid=2013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1478.461539][  T703] usb 7-1: Using ep0 maxpacket: 8
[ 1478.468108][  T703] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1478.476952][  T703] usb 7-1: config 10 has an invalid interface number: 188 but max is 14
[ 1478.485403][  T703] usb 7-1: config 10 has 1 interface, different from the descriptor's value: 15
[ 1478.498136][  T703] usb 7-1: config 10 has no interface number 0
[ 1478.504665][  T703] usb 7-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10
[ 1478.516831][  T703] usb 7-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024
[ 1478.528420][  T703] usb 7-1: config 10 interface 188 altsetting 134 has a duplicate endpoint with address 0xA, skipping
[ 1478.539508][  T703] usb 7-1: config 10 interface 188 has no altsetting 0
[ 1478.548020][  T703] usb 7-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be
[ 1478.557165][  T703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.565270][  T703] usb 7-1: Product: syz
[ 1478.569515][  T703] usb 7-1: Manufacturer: syz
[ 1478.574182][  T703] usb 7-1: SerialNumber: syz
[ 1478.583874][ T2574] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1478.797545][  T703] snd-usb-audio: probe of 7-1:10.188 failed with error -2
[ 1478.809438][ T2068] udevd[2068]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:10.188/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1478.826289][  T703] usb 7-1: USB disconnect, device number 38
[ 1480.180245][   T28] audit: type=1400 audit(1700216392.877:16126): avc:  denied  { getattr } for  pid=2610 comm="syz.7.9222" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=140217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1480.255579][ T2615] device sit0 entered promiscuous mode
[ 1480.262431][ T2615] netlink: 'syz.7.9222': attribute type 1 has an invalid length.
[ 1480.270219][ T2615] netlink: 1 bytes leftover after parsing attributes in process `syz.7.9222'.
[ 1480.294780][   T28] audit: type=1400 audit(1700216392.997:16127): avc:  denied  { watch watch_reads } for  pid=2621 comm="syz.9.9226" path="/53/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[ 1480.481556][T23686] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1480.521535][  T703] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1480.576508][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.583640][ T2629] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1480.591177][ T2629] device bridge_slave_0 entered promiscuous mode
[ 1480.598564][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.605685][ T2629] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.613183][ T2629] device bridge_slave_1 entered promiscuous mode
[ 1480.660908][ T2629] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.663759][T23686] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1480.667983][ T2629] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1480.677706][T23686] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[ 1480.683165][ T2629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.696637][T23686] usb 3-1: string descriptor 0 read error: -22
[ 1480.699993][ T2629] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1480.706760][T23686] usb 3-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40
[ 1480.723059][T23686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.741814][  T703] usb 7-1: Using ep0 maxpacket: 16
[ 1480.748500][  T703] usb 7-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1480.749957][ T2618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1480.767554][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1480.776395][T29400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1480.783751][  T703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1480.792961][T29400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.793403][T23686] usb 3-1: MIDIStreaming interface descriptor not found
[ 1480.803651][  T703] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1480.826505][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1480.842772][  T703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.851115][T29400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.858208][T29400] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1480.866004][  T703] usb 7-1: Product: syz
[ 1480.870250][  T703] usb 7-1: Manufacturer: syz
[ 1480.875025][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1480.883135][  T703] usb 7-1: SerialNumber: syz
[ 1480.890057][T29400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.897285][T29400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1480.916511][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1480.931783][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1480.949715][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1480.961426][ T2629] device veth0_vlan entered promiscuous mode
[ 1480.968945][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1480.977938][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1480.985849][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1481.002671][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1481.016323][  T845] usb 3-1: USB disconnect, device number 104
[ 1481.027615][ T2629] device veth1_macvtap entered promiscuous mode
[ 1481.042092][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1481.056519][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1481.087684][ T2641] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9231'.
[ 1481.099332][  T703] usb 7-1: 0:2 : does not exist
[ 1481.107341][   T28] audit: type=1326 audit(1700216393.807:16128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2640 comm="syz.5.9231" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8653d9e159 code=0x0
[ 1481.133261][  T703] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1481.144124][  T703] usb 7-1: USB disconnect, device number 39
[ 1481.157117][ T2643] 9pnet_fd: Insufficient options for proto=fd
[ 1481.164137][ T5041] device bridge_slave_1 left promiscuous mode
[ 1481.178262][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1481.186559][ T5041] device bridge_slave_0 left promiscuous mode
[ 1481.200079][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1481.217241][ T5041] device veth0_vlan left promiscuous mode
[ 1481.373052][ T2068] udevd[2068]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[ 1481.678768][ T2666] device-mapper: ioctl: name not supplied when creating device
[ 1481.984353][ T2684] FAULT_INJECTION: forcing a failure.
[ 1481.984353][ T2684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1481.997491][ T2684] CPU: 1 PID: 2684 Comm: syz.2.9240 Tainted: G        W          syzkaller #0
[ 1482.006378][ T2684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1482.016451][ T2684] Call Trace:
[ 1482.019766][ T2684]  <TASK>
[ 1482.022716][ T2684]  __dump_stack+0x21/0x24
[ 1482.027080][ T2684]  dump_stack_lvl+0x110/0x170
[ 1482.031788][ T2684]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1482.036850][ T2684]  dump_stack+0x15/0x24
[ 1482.041030][ T2684]  should_fail_ex+0x3bf/0x510
[ 1482.045748][ T2684]  should_fail+0xb/0x10
[ 1482.049950][ T2684]  should_fail_usercopy+0x1a/0x20
[ 1482.055022][ T2684]  _copy_from_user+0x1e/0xc0
[ 1482.059647][ T2684]  __sys_bpf+0x2a0/0x850
[ 1482.063935][ T2684]  ? bpf_link_show_fdinfo+0x330/0x330
[ 1482.069335][ T2684]  ? __cfi_ksys_write+0x10/0x10
[ 1482.074211][ T2684]  ? debug_smp_processor_id+0x17/0x20
[ 1482.079606][ T2684]  __x64_sys_bpf+0x7c/0x90
[ 1482.084045][ T2684]  x64_sys_call+0x488/0x9a0
[ 1482.088569][ T2684]  do_syscall_64+0x4c/0xa0
[ 1482.093007][ T2684]  ? clear_bhb_loop+0x30/0x80
[ 1482.097704][ T2684]  ? clear_bhb_loop+0x30/0x80
[ 1482.102400][ T2684]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1482.108317][ T2684] RIP: 0033:0x7fcd2099e159
[ 1482.112784][ T2684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1482.132431][ T2684] RSP: 002b:00007fcd218a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1482.140879][ T2684] RAX: ffffffffffffffda RBX: 00007fcd20c26180 RCX: 00007fcd2099e159
[ 1482.148873][ T2684] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[ 1482.156867][ T2684] RBP: 00007fcd218a5090 R08: 0000000000000000 R09: 0000000000000000
[ 1482.164859][ T2684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1482.172852][ T2684] R13: 00007fcd20c26218 R14: 00007fcd20c26180 R15: 00007ffe47722c48
[ 1482.180941][ T2684]  </TASK>
[ 1484.478815][   T29] INFO: task rcu_tasks_kthre:11 blocked for more than 317 seconds.
[ 1484.495703][   T29]       Tainted: G        W          syzkaller #0
[ 1484.521820][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1484.562981][   T29] task:rcu_tasks_kthre state:D stack:29152 pid:11    ppid:2      flags:0x00004000
[ 1484.593686][   T29] Call Trace:
[ 1484.601641][   T29]  <TASK>
[ 1484.613523][   T29]  __schedule+0xcb3/0x1700
[ 1484.632535][   T29]  ? release_firmware_map_entry+0x190/0x190
[ 1484.668056][ T2691] overlayfs: failed to resolve './file0': -2
[ 1484.684460][   T29]  ? __queue_work+0x9f2/0xd50
[ 1484.701970][   T29]  schedule+0xbd/0x170
[ 1484.716195][   T29]  schedule_timeout+0xba/0x340
[ 1484.744838][   T29]  ? __cfi_schedule_timeout+0x10/0x10
[ 1484.768835][   T29]  ? __cfi_queue_delayed_work_on+0x10/0x10
[ 1484.775526][   T29]  ? _raw_spin_unlock+0x4c/0x70
[ 1484.780501][   T29]  wait_for_common+0x364/0x640
[ 1484.785468][   T29]  ? wait_for_completion+0x20/0x20
[ 1484.790624][   T29]  wait_for_completion+0x18/0x20
[ 1484.795614][   T29]  __synchronize_srcu+0x173/0x200
[ 1484.800681][   T29]  ? synchronize_srcu_expedited+0x20/0x20
[ 1484.806479][   T29]  ? _raw_spin_lock_irqsave+0xc2/0x130
[ 1484.812001][   T29]  ? __cfi_wakeme_after_rcu+0x10/0x10
[ 1484.817413][   T29]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[ 1484.823802][   T29]  ? ktime_get_mono_fast_ns+0x1b3/0x1d0
[ 1484.829380][   T29]  synchronize_srcu+0x1c5/0x1d0
[ 1484.834298][   T29]  rcu_tasks_postscan+0x10/0x20
[ 1484.839185][   T29]  rcu_tasks_wait_gp+0x2ec/0xa30
[ 1484.844182][   T29]  ? __kasan_check_write+0x14/0x20
[ 1484.849317][   T29]  ? _raw_spin_lock_irqsave+0xc2/0x130
[ 1484.854931][   T29]  ? __cfi_rcu_tasks_wait_gp+0x10/0x10
[ 1484.860423][   T29]  ? mutex_lock+0x93/0x1b0
[ 1484.864911][   T29]  rcu_tasks_one_gp+0xc25/0xde0
[ 1484.869813][   T29]  ? schedule_timeout+0x1a7/0x340
[ 1484.874936][   T29]  rcu_tasks_kthread+0x6a/0x90
[ 1484.879731][   T29]  kthread+0x281/0x320
[ 1484.883876][   T29]  ? __cfi_rcu_tasks_kthread+0x10/0x10
[ 1484.889379][   T29]  ? __cfi_kthread+0x10/0x10
[ 1484.894046][   T29]  ret_from_fork+0x1f/0x30
[ 1484.898497][   T29]  </TASK>
[ 1484.907567][   T29] NMI backtrace for cpu 0
[ 1484.912001][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G        W          syzkaller #0
[ 1484.920711][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1484.930799][   T29] Call Trace:
[ 1484.934113][   T29]  <TASK>
[ 1484.937071][   T29]  __dump_stack+0x21/0x24
[ 1484.941439][   T29]  dump_stack_lvl+0x110/0x170
[ 1484.946151][   T29]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1484.951233][   T29]  ? rcu_preempt_deferred_qs_irqrestore+0x6af/0x960
[ 1484.957875][   T29]  dump_stack+0x15/0x24
[ 1484.962070][   T29]  nmi_cpu_backtrace+0x2af/0x2c0
[ 1484.967036][   T29]  ? irqentry_exit+0x37/0x40
[ 1484.971655][   T29]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[ 1484.977147][   T29]  ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0
[ 1484.983240][   T29]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 1484.989260][   T29]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 1484.989733][ T2700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9245'.
[ 1484.995299][   T29]  nmi_trigger_cpumask_backtrace+0x16b/0x3a0
[ 1484.995332][   T29]  arch_trigger_cpumask_backtrace+0x10/0x20
[ 1484.995358][   T29]  watchdog+0xde1/0xf30
[ 1485.020361][   T29]  ? __cfi_watchdog+0x10/0x10
[ 1485.025067][   T29]  ? __kasan_check_read+0x11/0x20
[ 1485.030125][   T29]  ? __kthread_parkme+0x13a/0x180
[ 1485.035194][   T29]  kthread+0x281/0x320
[ 1485.039303][   T29]  ? __cfi_watchdog+0x10/0x10
[ 1485.044015][   T29]  ? __cfi_kthread+0x10/0x10
[ 1485.048653][   T29]  ret_from_fork+0x1f/0x30
[ 1485.053150][   T29]  </TASK>
[ 1485.056396][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1485.061999][    C1] NMI backtrace for cpu 1
[ 1485.062013][    C1] CPU: 1 PID: 279 Comm: syz-executor Tainted: G        W          syzkaller #0
[ 1485.062033][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1485.062044][    C1] RIP: 0010:__kernel_text_address+0x29/0x30
[ 1485.062073][    C1] Code: 4a 55 48 89 e5 53 48 89 fb e8 33 00 00 00 48 81 fb 00 90 9a 87 0f 93 c1 48 81 fb 64 f1 a8 87 0f 92 c2 20 ca 08 c2 0f b6 c2 5b <5d> c3 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 dc 6f 7b
[ 1485.062088][    C1] RSP: 0018:ffffc90000d37090 EFLAGS: 00000202
[ 1485.062104][    C1] RAX: 0000000000000001 RBX: ffffc90000d37110 RCX: 00000000001a6e00
[ 1485.062118][    C1] RDX: ffffc90000d37e01 RSI: 1ffff920001a6e1a RDI: ffffffff81bf59da
[ 1485.062132][    C1] RBP: ffffc90000d37090 R08: ffffc90000d37190 R09: ffffc90000d37188
[ 1485.062145][    C1] R10: 0000000000000010 R11: fffff520001a6e25 R12: ffff88810d496540
[ 1485.062158][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001a6e22
[ 1485.062171][    C1] FS:  000055555ada9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1485.062191][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1485.062204][    C1] CR2: 00007ffc87e2d2d8 CR3: 00000001214ab000 CR4: 00000000003526a0
[ 1485.062220][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1485.062232][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1485.062244][    C1] Call Trace:
[ 1485.062250][    C1]  <TASK>
[ 1485.062256][    C1]  unwind_get_return_address+0x4d/0x90
[ 1485.062278][    C1]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[ 1485.062311][    C1]  arch_stack_walk+0xfc/0x150
[ 1485.062339][    C1]  ? ksys_read+0x14a/0x260
[ 1485.062358][    C1]  stack_trace_save+0xa6/0xf0
[ 1485.062381][    C1]  ? __cfi_stack_trace_save+0x10/0x10
[ 1485.062405][    C1]  ? memset+0x35/0x40
[ 1485.062423][    C1]  kasan_set_track+0x4b/0x70
[ 1485.062443][    C1]  ? kasan_set_track+0x4b/0x70
[ 1485.062463][    C1]  ? kasan_save_free_info+0x2b/0x40
[ 1485.062479][    C1]  ? ____kasan_slab_free+0x132/0x180
[ 1485.062502][    C1]  ? __kasan_slab_free+0x11/0x20
[ 1485.062523][    C1]  ? slab_free_freelist_hook+0xc2/0x190
[ 1485.062540][    C1]  ? kmem_cache_free+0x12d/0x300
[ 1485.062563][    C1]  ? kfree_skbmem+0x10c/0x180
[ 1485.062584][    C1]  ? __kfree_skb+0x58/0x70
[ 1485.062603][    C1]  ? tcp_data_queue+0xff/0x59c0
[ 1485.062624][    C1]  ? tcp_rcv_established+0x9d6/0x1ab0
[ 1485.062643][    C1]  ? tcp_v4_do_rcv+0x446/0x9c0
[ 1485.062661][    C1]  ? __release_sock+0x154/0x380
[ 1485.062685][    C1]  ? release_sock+0x60/0x1c0
[ 1485.062704][    C1]  ? tcp_recvmsg+0x224/0x820
[ 1485.062728][    C1]  ? inet_recvmsg+0x141/0x480
[ 1485.062752][    C1]  ? sock_read_iter+0x2ee/0x3b0
[ 1485.062768][    C1]  ? vfs_read+0x46e/0x930
[ 1485.062794][    C1]  ? kmem_cache_free+0x12d/0x300
[ 1485.062819][    C1]  kasan_save_free_info+0x2b/0x40
[ 1485.062835][    C1]  ____kasan_slab_free+0x132/0x180
[ 1485.062858][    C1]  __kasan_slab_free+0x11/0x20
[ 1485.062879][    C1]  slab_free_freelist_hook+0xc2/0x190
[ 1485.062897][    C1]  ? kfree_skbmem+0x10c/0x180
[ 1485.062917][    C1]  kmem_cache_free+0x12d/0x300
[ 1485.062943][    C1]  kfree_skbmem+0x10c/0x180
[ 1485.062964][    C1]  __kfree_skb+0x58/0x70
[ 1485.062984][    C1]  tcp_data_queue+0xff/0x59c0
[ 1485.063007][    C1]  ? tcp_rcv_established+0x1ab0/0x1ab0
[ 1485.063027][    C1]  ? __kasan_check_read+0x11/0x20
[ 1485.063044][    C1]  ? __check_object_size+0x45a/0x600
[ 1485.063061][    C1]  ? tcp_urg+0x108/0x410
[ 1485.063081][    C1]  ? tcp_urg+0x410/0x410
[ 1485.063099][    C1]  ? tcp_validate_incoming+0x26f0/0x26f0
[ 1485.063120][    C1]  ? tcp_mstamp_refresh+0x20/0x90
[ 1485.063142][    C1]  ? ktime_get+0x141/0x170
[ 1485.063160][    C1]  tcp_rcv_established+0x9d6/0x1ab0
[ 1485.063182][    C1]  ? tcp_recvmsg_locked+0x1b84/0x23c0
[ 1485.063207][    C1]  ? avc_has_perm_noaudit+0x390/0x490
[ 1485.063228][    C1]  ? __cfi_tcp_rcv_established+0x10/0x10
[ 1485.063250][    C1]  ? ipv4_dst_check+0xf2/0x160
[ 1485.063277][    C1]  tcp_v4_do_rcv+0x446/0x9c0
[ 1485.063303][    C1]  __release_sock+0x154/0x380
[ 1485.063330][    C1]  release_sock+0x60/0x1c0
[ 1485.063350][    C1]  tcp_recvmsg+0x224/0x820
[ 1485.063376][    C1]  ? __cfi_tcp_recvmsg+0x10/0x10
[ 1485.063402][    C1]  ? __cfi_selinux_socket_recvmsg+0x10/0x10
[ 1485.063422][    C1]  ? avc_has_perm+0x163/0x250
[ 1485.063441][    C1]  inet_recvmsg+0x141/0x480
[ 1485.063468][    C1]  ? __cfi_inet_recvmsg+0x10/0x10
[ 1485.063494][    C1]  ? security_socket_recvmsg+0x99/0xc0
[ 1485.063517][    C1]  sock_read_iter+0x2ee/0x3b0
[ 1485.063535][    C1]  ? __cfi_sock_read_iter+0x10/0x10
[ 1485.063551][    C1]  ? __kasan_check_read+0x11/0x20
[ 1485.063571][    C1]  ? __kasan_check_read+0x11/0x20
[ 1485.063588][    C1]  ? fsnotify_perm+0x269/0x5b0
[ 1485.063615][    C1]  vfs_read+0x46e/0x930
[ 1485.063632][    C1]  ? __cfi_vfs_read+0x10/0x10
[ 1485.063649][    C1]  ? lock_vma_under_rcu+0x3f8/0x4f0
[ 1485.063669][    C1]  ? __kasan_check_read+0x11/0x20
[ 1485.063686][    C1]  ? __fdget_pos+0x1f2/0x380
[ 1485.063705][    C1]  ksys_read+0x14a/0x260
[ 1485.063722][    C1]  ? __cfi_ksys_read+0x10/0x10
[ 1485.063740][    C1]  ? fpregs_restore_userregs+0x128/0x260
[ 1485.063761][    C1]  __x64_sys_read+0x7b/0x90
[ 1485.063778][    C1]  x64_sys_call+0x2f/0x9a0
[ 1485.063800][    C1]  do_syscall_64+0x4c/0xa0
[ 1485.063825][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1485.063844][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1485.063864][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1485.063882][    C1] RIP: 0033:0x7fa91fd592d7
[ 1485.063896][    C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1485.063910][    C1] RSP: 002b:00007ffda3bd4760 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 1485.063937][    C1] RAX: ffffffffffffffda RBX: 000055555ada9500 RCX: 00007fa91fd592d7
[ 1485.063950][    C1] RDX: 0000000000000004 RSI: 00007ffda3bd47bc RDI: 0000000000000003
[ 1485.063961][    C1] RBP: 00007ffda3bd4c60 R08: 0000000000000000 R09: 0000000000000000
[ 1485.063972][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[ 1485.063984][    C1] R13: 00007ffda3bd47bc R14: 00007ffda3bd4850 R15: 0000000000000000
[ 1485.064006][    C1]  </TASK>
[ 1485.070571][ T2700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9245'.
[ 1487.025329][ T2715] xt_hashlimit: size too large, truncated to 1048576
[ 1487.121610][T23686] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1487.311525][  T845] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[ 1487.471566][  T845] usb 3-1: device descriptor read/64, error -71
[ 1487.741530][  T845] usb 3-1: device descriptor read/64, error -71
[ 1487.782366][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1487.821632][  T703] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1488.011547][  T845] usb 3-1: new full-speed USB device number 106 using dummy_hcd
[ 1488.041554][  T703] usb 10-1: Using ep0 maxpacket: 16
[ 1488.052840][  T703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1488.081571][  T703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1488.111495][  T703] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1488.147383][  T703] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1488.171606][  T845] usb 3-1: device descriptor read/64, error -71
[ 1488.177052][  T703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.211061][  T703] usb 10-1: config 0 descriptor??
[ 1488.451577][  T845] usb 3-1: device descriptor read/64, error -71
[ 1488.571828][  T845] usb usb3-port1: attempt power cycle
[ 1488.638462][  T703] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.002D/input/input55
[ 1488.712459][  T703] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1488.838667][ T1408] usb 10-1: USB disconnect, device number 13
[ 1488.941563][T23686] usb 6-1: device descriptor read/64, error -71
[ 1488.981513][  T845] usb 3-1: new full-speed USB device number 107 using dummy_hcd
[ 1489.013832][  T845] usb 3-1: device descriptor read/8, error -71
[ 1489.162890][  T845] usb 3-1: device descriptor read/8, error -71
[ 1489.281588][T23686] usb 6-1: Using ep0 maxpacket: 16
[ 1489.288949][T23686] usb 6-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1489.300836][T23686] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1489.312970][T23686] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1489.322529][T23686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.330651][T23686] usb 6-1: Product: syz
[ 1489.341192][T23686] usb 6-1: Manufacturer: syz
[ 1489.346732][T23686] usb 6-1: SerialNumber: syz
[ 1489.451531][  T845] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[ 1489.493673][  T845] usb 3-1: device descriptor read/8, error -71
[ 1489.524070][ T2759] overlayfs: failed to resolve './file0': -2
[ 1489.610201][T23686] usb 6-1: 0:2 : does not exist
[ 1489.620927][T23686] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1489.642885][  T845] usb 3-1: device descriptor read/8, error -71
[ 1489.672092][T23686] usb 6-1: USB disconnect, device number 32
[ 1489.781710][  T845] usb usb3-port1: unable to enumerate USB device
[ 1490.481594][  T845] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1490.571130][  T703] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1490.615055][ T2794] overlayfs: missing 'workdir'
[ 1490.621296][ T2795] overlayfs: missing 'workdir'
[ 1490.624426][   T28] audit: type=1400 audit(1700216403.317:16129): avc:  denied  { audit_write } for  pid=2793 comm="syz.3.9278" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1490.661501][  T845] usb 3-1: Using ep0 maxpacket: 16
[ 1490.669046][  T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1490.681333][  T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1490.692407][  T845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1490.705956][  T845] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1490.715449][  T845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.733202][  T845] usb 3-1: config 0 descriptor??
[ 1490.771522][  T703] usb 7-1: Using ep0 maxpacket: 16
[ 1490.777956][  T703] usb 7-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1490.798052][  T703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1490.823862][  T703] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1490.833131][  T703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.841268][ T2811] x_tables: duplicate underflow at hook 2
[ 1490.843919][  T703] usb 7-1: Product: syz
[ 1490.851330][  T703] usb 7-1: Manufacturer: syz
[ 1490.857610][  T703] usb 7-1: SerialNumber: syz
[ 1490.958383][ T2818] xt_hashlimit: size too large, truncated to 1048576
[ 1491.076760][  T703] usb 7-1: 0:2 : does not exist
[ 1491.085911][  T703] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1491.135754][  T703] usb 7-1: USB disconnect, device number 40
[ 1491.166542][ T2822] xt_hashlimit: size too large, truncated to 1048576
[ 1491.221911][ T2823] FAULT_INJECTION: forcing a failure.
[ 1491.221911][ T2823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1491.244039][  T845] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002E/input/input56
[ 1491.264893][ T2823] CPU: 0 PID: 2823 Comm: syz.5.9283 Tainted: G        W          syzkaller #0
[ 1491.273805][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1491.283870][ T2823] Call Trace:
[ 1491.287245][ T2823]  <TASK>
[ 1491.290193][ T2823]  __dump_stack+0x21/0x24
[ 1491.294548][ T2823]  dump_stack_lvl+0x110/0x170
[ 1491.299259][ T2823]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1491.304329][ T2823]  dump_stack+0x15/0x24
[ 1491.308502][ T2823]  should_fail_ex+0x3bf/0x510
[ 1491.313191][ T2823]  should_fail+0xb/0x10
[ 1491.317359][ T2823]  should_fail_usercopy+0x1a/0x20
[ 1491.322394][ T2823]  _copy_from_user+0x1e/0xc0
[ 1491.327001][ T2823]  __sys_bpf+0x2a0/0x850
[ 1491.331248][ T2823]  ? bpf_link_show_fdinfo+0x330/0x330
[ 1491.336632][ T2823]  ? __cfi_ksys_write+0x10/0x10
[ 1491.341495][ T2823]  ? debug_smp_processor_id+0x17/0x20
[ 1491.346891][ T2823]  __x64_sys_bpf+0x7c/0x90
[ 1491.351310][ T2823]  x64_sys_call+0x488/0x9a0
[ 1491.355821][ T2823]  do_syscall_64+0x4c/0xa0
[ 1491.360248][ T2823]  ? clear_bhb_loop+0x30/0x80
[ 1491.364937][ T2823]  ? clear_bhb_loop+0x30/0x80
[ 1491.369628][ T2823]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1491.376493][ T2823] RIP: 0033:0x7f8653d9e159
[ 1491.380921][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1491.400553][ T2823] RSP: 002b:00007f86527f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1491.408977][ T2823] RAX: ffffffffffffffda RBX: 00007f8654026090 RCX: 00007f8653d9e159
[ 1491.417062][ T2823] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1491.425067][ T2823] RBP: 00007f86527f7090 R08: 0000000000000000 R09: 0000000000000000
[ 1491.433047][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1491.441036][ T2823] R13: 00007f8654026128 R14: 00007f8654026090 R15: 00007fffd07d4ac8
[ 1491.449027][ T2823]  </TASK>
[ 1491.468812][  T845] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1491.490455][  T845] usb 3-1: USB disconnect, device number 109
[ 1491.533778][ T2828] fido_id[2828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1491.596139][ T2833] xt_hashlimit: size too large, truncated to 1048576
[ 1491.679414][ T2837] xt_hashlimit: size too large, truncated to 1048576
[ 1491.787543][ T2840] xt_hashlimit: size too large, truncated to 1048576
[ 1492.000349][ T2848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9292'.
[ 1492.010431][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9291'.
[ 1492.019602][ T2848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9292'.
[ 1492.040413][ T2849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9291'.
[ 1492.082016][ T2851] netlink: 'syz.3.9293': attribute type 13 has an invalid length.
[ 1492.099751][ T2851] netlink: 'syz.3.9293': attribute type 17 has an invalid length.
[ 1492.186992][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1492.209883][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1492.944541][ T2881] xt_hashlimit: size too large, truncated to 1048576
[ 1493.023922][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9293'.
[ 1493.203722][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9305'.
[ 1493.213609][ T2891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9305'.
[ 1493.661626][  T845] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1494.751140][ T2910] sch_tbf: burst 2208 is lower than device lo mtu (65550) !
[ 1494.811658][  T845] usb 6-1: Using ep0 maxpacket: 16
[ 1494.818167][  T845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1494.829885][  T845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1494.843884][  T845] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1494.853526][  T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.880644][  T845] usb 6-1: config 0 descriptor??
[ 1495.223536][ T2920] fuse: Bad value for 'user_id'
[ 1495.426385][  T845] HID 045e:07da: Invalid code 65791 type 1
[ 1495.460761][  T845] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002F/input/input57
[ 1495.475931][  T845] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 1495.981198][ T2930] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9319'.
[ 1496.214810][ T2902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1496.242148][ T2902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1496.257888][ T2942] xt_hashlimit: size too large, truncated to 1048576
[ 1496.267621][T32491] usb 6-1: USB disconnect, device number 33
[ 1497.510463][   T28] audit: type=1400 audit(1700216410.207:16130): avc:  denied  { execute } for  pid=2955 comm="syz.3.9328" path="/file1" dev="ramfs" ino=142560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[ 1498.021837][T23943] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1498.241564][T23943] usb 7-1: Using ep0 maxpacket: 16
[ 1498.249329][T23943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1498.303336][T23943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1498.313541][T23943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1498.340633][T23943] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1498.350065][T23943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.360261][T23943] usb 7-1: config 0 descriptor??
[ 1498.384925][ T2982] binfmt_misc: register: failed to install interpreter file ./file0/file0
[ 1498.560776][ T2994] xt_hashlimit: size too large, truncated to 1048576
[ 1498.658125][ T2997] overlayfs: failed to resolve './bus': -2
[ 1498.778579][T23943] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0030/input/input58
[ 1498.816230][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1498.829097][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[ 1498.838415][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1498.846790][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[ 1498.855506][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1498.864616][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1498.864637][T23943] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 1498.873959][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1498.893661][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1498.912304][T29400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1498.977056][ T1408] usb 7-1: USB disconnect, device number 41
[ 1499.097219][ T3008] FAULT_INJECTION: forcing a failure.
[ 1499.097219][ T3008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1499.110334][ T3008] CPU: 0 PID: 3008 Comm: syz.5.9344 Tainted: G        W          syzkaller #0
[ 1499.119191][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1499.129254][ T3008] Call Trace:
[ 1499.132552][ T3008]  <TASK>
[ 1499.135480][ T3008]  __dump_stack+0x21/0x24
[ 1499.139814][ T3008]  dump_stack_lvl+0x110/0x170
[ 1499.144518][ T3008]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1499.149564][ T3008]  dump_stack+0x15/0x24
[ 1499.153744][ T3008]  should_fail_ex+0x3bf/0x510
[ 1499.158433][ T3008]  should_fail+0xb/0x10
[ 1499.162587][ T3008]  should_fail_usercopy+0x1a/0x20
[ 1499.167639][ T3008]  _copy_to_user+0x1e/0x90
[ 1499.172065][ T3008]  simple_read_from_buffer+0xe9/0x160
[ 1499.177464][ T3008]  proc_fail_nth_read+0x1a6/0x220
[ 1499.182491][ T3008]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 1499.188049][ T3008]  ? security_file_permission+0x94/0xb0
[ 1499.193621][ T3008]  ? __cfi_proc_fail_nth_read+0x10/0x10
[ 1499.199187][ T3008]  vfs_read+0x286/0x930
[ 1499.203533][ T3008]  ? __cfi_vfs_read+0x10/0x10
[ 1499.208204][ T3008]  ? __kasan_check_write+0x14/0x20
[ 1499.213322][ T3008]  ? mutex_lock+0x93/0x1b0
[ 1499.217760][ T3008]  ? __cfi_mutex_lock+0x10/0x10
[ 1499.222638][ T3008]  ? __fdget_pos+0x2cd/0x380
[ 1499.227222][ T3008]  ? ksys_read+0x70/0x260
[ 1499.231554][ T3008]  ksys_read+0x14a/0x260
[ 1499.235825][ T3008]  ? __cfi_ksys_read+0x10/0x10
[ 1499.240600][ T3008]  ? debug_smp_processor_id+0x17/0x20
[ 1499.246083][ T3008]  __x64_sys_read+0x7b/0x90
[ 1499.250582][ T3008]  x64_sys_call+0x2f/0x9a0
[ 1499.254997][ T3008]  do_syscall_64+0x4c/0xa0
[ 1499.259436][ T3008]  ? clear_bhb_loop+0x30/0x80
[ 1499.264113][ T3008]  ? clear_bhb_loop+0x30/0x80
[ 1499.268828][ T3008]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1499.274720][ T3008] RIP: 0033:0x7f8653d5e98e
[ 1499.279172][ T3008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1499.298796][ T3008] RSP: 002b:00007f8654b98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1499.307209][ T3008] RAX: ffffffffffffffda RBX: 00007f8654b996c0 RCX: 00007f8653d5e98e
[ 1499.315182][ T3008] RDX: 000000000000000f RSI: 00007f8654b990a0 RDI: 0000000000000004
[ 1499.323149][ T3008] RBP: 00007f8654b99090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.331111][ T3008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1499.339078][ T3008] R13: 00007f8654026038 R14: 00007f8654025fa0 R15: 00007fffd07d4ac8
[ 1499.347062][ T3008]  </TASK>
[ 1499.381418][ T3020] xt_hashlimit: size too large, truncated to 1048576
[ 1499.465680][ T3027] xt_hashlimit: size too large, truncated to 1048576
[ 1499.537347][ T3031] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3)
[ 1499.841529][T32491] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1500.031548][T32491] usb 7-1: Using ep0 maxpacket: 16
[ 1500.051908][T32491] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1500.068651][ T3051] overlayfs: failed to clone upperpath
[ 1500.069537][T32491] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1500.118741][T32491] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1500.135565][T32491] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.153967][T32491] usb 7-1: Product: syz
[ 1500.162737][T32491] usb 7-1: Manufacturer: syz
[ 1500.172888][T32491] usb 7-1: SerialNumber: syz
[ 1500.386703][T32491] usb 7-1: Audio class v2/v3 interfaces need an interface association
[ 1500.395246][T32491] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[ 1500.475830][ T3072] xt_hashlimit: size too large, truncated to 1048576
[ 1500.514599][ T3073] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9365'.
[ 1500.800736][T32491] usb 7-1: USB disconnect, device number 42
[ 1500.816803][ T2827] udevd[2827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1501.014406][ T3087] overlayfs: failed to resolve './bus': -2
[ 1501.471549][  T703] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[ 1501.491445][ T3102] xt_hashlimit: size too large, truncated to 1048576
[ 1501.545943][ T3103] overlayfs: failed to clone upperpath
[ 1501.674005][  T703] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[ 1501.691641][  T703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.705457][  T703] usb 3-1: Product: syz
[ 1501.713399][  T703] usb 3-1: Manufacturer: syz
[ 1501.718053][  T703] usb 3-1: SerialNumber: syz
[ 1501.871527][ T1408] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1501.939274][  T703] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[ 1501.967780][  T703] usb 3-1: USB disconnect, device number 110
[ 1502.062643][ T1408] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1502.081197][ T1408] usb 6-1: config 0 has no interfaces?
[ 1502.098704][ T1408] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1502.125017][ T1408] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1502.150637][ T1408] usb 6-1: Product: syz
[ 1502.163083][ T1408] usb 6-1: Manufacturer: syz
[ 1502.178566][ T1408] usb 6-1: config 0 descriptor??
[ 1502.468627][ T3121] device-mapper: ioctl: name not supplied when creating device
[ 1502.709385][ T3125] FAULT_INJECTION: forcing a failure.
[ 1502.709385][ T3125] name failslab, interval 1, probability 0, space 0, times 0
[ 1502.722116][ T3125] CPU: 1 PID: 3125 Comm: syz.9.9384 Tainted: G        W          syzkaller #0
[ 1502.731004][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1502.741066][ T3125] Call Trace:
[ 1502.744356][ T3125]  <TASK>
[ 1502.747300][ T3125]  __dump_stack+0x21/0x24
[ 1502.751665][ T3125]  dump_stack_lvl+0x110/0x170
[ 1502.756370][ T3125]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1502.761421][ T3125]  ? preempt_schedule_irq+0xca/0x120
[ 1502.766720][ T3125]  ? __cfi_preempt_schedule_irq+0x10/0x10
[ 1502.772465][ T3125]  dump_stack+0x15/0x24
[ 1502.776663][ T3125]  should_fail_ex+0x3bf/0x510
[ 1502.781353][ T3125]  __should_failslab+0xac/0xf0
[ 1502.786168][ T3125]  should_failslab+0x9/0x20
[ 1502.790681][ T3125]  __kmem_cache_alloc_node+0x3d/0x2d0
[ 1502.796074][ T3125]  ? io_wq_create+0x38d/0xb70
[ 1502.800772][ T3125]  ? io_wq_create+0x38d/0xb70
[ 1502.805466][ T3125]  kmalloc_node_trace+0x26/0xb0
[ 1502.810359][ T3125]  ? __cfi_io_wq_submit_work+0x10/0x10
[ 1502.815861][ T3125]  io_wq_create+0x38d/0xb70
[ 1502.820391][ T3125]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 1502.826315][ T3125]  ? __cfi_io_wq_create+0x10/0x10
[ 1502.831369][ T3125]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 1502.837199][ T3125]  io_uring_alloc_task_context+0x296/0x540
[ 1502.843024][ T3125]  ? __cfi_io_uring_alloc_task_context+0x8/0x8
[ 1502.849185][ T3125]  ? __cfi_io_wq_submit_work+0x10/0x10
[ 1502.854667][ T3125]  ? __cfi_io_wq_free_work+0x10/0x10
[ 1502.859986][ T3125]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1502.865200][ T3125]  ? security_inode_init_security_anon+0x95/0xc0
[ 1502.871537][ T3125]  __io_uring_add_tctx_node+0x349/0x4f0
[ 1502.877085][ T3125]  ? __cfi___io_uring_add_tctx_node+0x10/0x10
[ 1502.883166][ T3125]  io_uring_install_fd+0x35/0x80
[ 1502.888113][ T3125]  io_uring_create+0x935/0xde1
[ 1502.892897][ T3125]  __x64_sys_io_uring_setup+0x21b/0x230
[ 1502.898461][ T3125]  ? __cfi___x64_sys_io_uring_setup+0x10/0x10
[ 1502.904550][ T3125]  ? __kasan_check_write+0x14/0x20
[ 1502.909675][ T3125]  ? fpregs_restore_userregs+0x128/0x260
[ 1502.915321][ T3125]  ? switch_fpu_return+0xe/0x10
[ 1502.920177][ T3125]  x64_sys_call+0x4ab/0x9a0
[ 1502.924683][ T3125]  do_syscall_64+0x4c/0xa0
[ 1502.929107][ T3125]  ? clear_bhb_loop+0x30/0x80
[ 1502.933811][ T3125]  ? clear_bhb_loop+0x30/0x80
[ 1502.938520][ T3125]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1502.944422][ T3125] RIP: 0033:0x7f2ad599e159
[ 1502.948860][ T3125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1502.968473][ T3125] RSP: 002b:00007f2ad686b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 1502.976894][ T3125] RAX: ffffffffffffffda RBX: 00007f2ad5c26180 RCX: 00007f2ad599e159
[ 1502.984884][ T3125] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc
[ 1502.992864][ T3125] RBP: 00007f2ad5a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1503.000842][ T3125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1503.008825][ T3125] R13: 00007f2ad5c26218 R14: 00007f2ad5c26180 R15: 00007ffdeb574678
[ 1503.016823][ T3125]  </TASK>
[ 1503.491353][  T845] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1503.681910][  T845] usb 3-1: Using ep0 maxpacket: 16
[ 1503.763494][  T845] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1503.777501][  T845] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1503.797268][  T845] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1503.806922][T23686] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1503.815388][  T845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.824357][  T845] usb 3-1: Product: syz
[ 1503.828681][  T845] usb 3-1: Manufacturer: syz
[ 1503.834970][  T845] usb 3-1: SerialNumber: syz
[ 1504.068664][  T845] usb 3-1: Audio class v2/v3 interfaces need an interface association
[ 1504.077237][  T845] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[ 1504.141592][T23686] usb 7-1: Using ep0 maxpacket: 32
[ 1504.148875][T23686] usb 7-1: config 2 has an invalid interface number: 88 but max is 0
[ 1504.158703][T23686] usb 7-1: config 2 has no interface number 0
[ 1504.165505][T23686] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1504.176493][T23686] usb 7-1: config 2 interface 88 has no altsetting 0
[ 1504.186777][T23686] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1504.200420][T23686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1504.208507][T23686] usb 7-1: Product: syz
[ 1504.212768][T23686] usb 7-1: Manufacturer: syz
[ 1504.217404][T23686] usb 7-1: SerialNumber: syz
[ 1504.223229][ T3129] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1504.433453][T23686] asix: probe of 7-1:2.88 failed with error -71
[ 1504.443028][T23686] usb 7-1: USB disconnect, device number 43
[ 1504.471582][  T845] usb 3-1: USB disconnect, device number 111
[ 1504.598867][T23943] usb 6-1: USB disconnect, device number 34
[ 1504.855942][ T2702] udevd[2702]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1505.427475][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1505.464267][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1505.496746][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[ 1505.510959][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[ 1505.519752][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[ 1505.542065][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[ 1505.562258][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[ 1505.582031][ T3174] base or size exceeds the MTRR width
[ 1505.651525][T23943] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1505.811542][T31039] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1505.841543][T23943] usb 3-1: Using ep0 maxpacket: 16
[ 1505.847899][T23943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1505.871524][  T845] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1505.879472][T23943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1505.889462][T23943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1505.921586][T23943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1505.932711][T23943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.956368][T23943] usb 3-1: config 0 descriptor??
[ 1506.001554][T31039] usb 10-1: Using ep0 maxpacket: 16
[ 1506.008040][T31039] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1506.019067][T31039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1506.030330][T31039] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1506.040309][T31039] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1506.053653][T31039] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1506.064806][T31039] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1506.080672][T31039] usb 10-1: config 0 descriptor??
[ 1506.091542][  T845] usb 6-1: Using ep0 maxpacket: 16
[ 1506.101598][  T845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1506.111837][  T845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1506.122374][  T845] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1506.131692][  T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1506.139962][  T845] usb 6-1: SerialNumber: syz
[ 1506.206055][  T845] usb 6-1: 0:2 : does not exist
[ 1506.458742][T23943] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0031/input/input59
[ 1506.593904][T23943] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1506.606738][   T28] audit: type=1400 audit(1700249701.307:16131): avc:  denied  { getopt } for  pid=3171 comm="syz.5.9398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1506.642659][T23943] usb 3-1: USB disconnect, device number 112
[ 1506.675415][ T3182] fido_id[3182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1507.032566][ T3174] netlink: 'syz.5.9398': attribute type 13 has an invalid length.
[ 1507.040646][ T3174] netlink: 'syz.5.9398': attribute type 17 has an invalid length.
[ 1507.137676][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1508.418953][ T3174] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9398'.
[ 1508.444982][  T845] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1508.470492][  T845] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1508.494615][  T845] usb 6-1: USB disconnect, device number 35
[ 1508.569554][T31039] usbhid 10-1:0.0: can't add hid device: -71
[ 1508.577534][T31039] usbhid: probe of 10-1:0.0 failed with error -71
[ 1508.586200][   T28] audit: type=1326 audit(1700249703.287:16132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.590552][T31039] usb 10-1: USB disconnect, device number 14
[ 1508.627754][   T28] audit: type=1326 audit(1700249703.317:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.654084][   T28] audit: type=1326 audit(1700249703.327:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.680253][   T28] audit: type=1326 audit(1700249703.327:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.710409][   T28] audit: type=1326 audit(1700249703.327:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.737809][   T28] audit: type=1326 audit(1700249703.327:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.765691][   T28] audit: type=1326 audit(1700249703.327:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.801591][   T19] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1508.809513][   T28] audit: type=1326 audit(1700249703.327:16139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.836242][   T28] audit: type=1326 audit(1700249703.327:16140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3228 comm="syz.9.9415" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad599e159 code=0x7ffc0000
[ 1508.983134][   T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1509.016296][   T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1509.027135][   T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1509.038031][ T3241] random: crng reseeded on system resumption
[ 1509.040906][   T19] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1509.056411][   T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.057972][ T3242] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1509.077868][   T19] usb 7-1: config 0 descriptor??
[ 1509.136682][ T3245] FAULT_INJECTION: forcing a failure.
[ 1509.136682][ T3245] name failslab, interval 1, probability 0, space 0, times 0
[ 1509.149472][ T3245] CPU: 0 PID: 3245 Comm: syz.9.9420 Tainted: G        W          syzkaller #0
[ 1509.158361][ T3245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1509.168440][ T3245] Call Trace:
[ 1509.171728][ T3245]  <TASK>
[ 1509.174676][ T3245]  __dump_stack+0x21/0x24
[ 1509.179040][ T3245]  dump_stack_lvl+0x110/0x170
[ 1509.183741][ T3245]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1509.188809][ T3245]  ? kasan_save_alloc_info+0x1f/0x30
[ 1509.194109][ T3245]  dump_stack+0x15/0x24
[ 1509.198294][ T3245]  should_fail_ex+0x3bf/0x510
[ 1509.202997][ T3245]  __should_failslab+0xac/0xf0
[ 1509.207795][ T3245]  should_failslab+0x9/0x20
[ 1509.212320][ T3245]  __kmem_cache_alloc_node+0x3d/0x2d0
[ 1509.217708][ T3245]  ? __se_sys_fspick+0x206/0x3a0
[ 1509.222656][ T3245]  ? __se_sys_fspick+0x206/0x3a0
[ 1509.227601][ T3245]  kmalloc_trace+0x29/0xb0
[ 1509.232041][ T3245]  __se_sys_fspick+0x206/0x3a0
[ 1509.236815][ T3245]  ? __x64_sys_fspick+0x90/0x90
[ 1509.241675][ T3245]  ? fpregs_restore_userregs+0x128/0x260
[ 1509.247329][ T3245]  __x64_sys_fspick+0x7b/0x90
[ 1509.252017][ T3245]  x64_sys_call+0x522/0x9a0
[ 1509.256538][ T3245]  do_syscall_64+0x4c/0xa0
[ 1509.260975][ T3245]  ? clear_bhb_loop+0x30/0x80
[ 1509.265668][ T3245]  ? clear_bhb_loop+0x30/0x80
[ 1509.270359][ T3245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1509.276266][ T3245] RIP: 0033:0x7f2ad599e159
[ 1509.280693][ T3245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1509.300309][ T3245] RSP: 002b:00007f2ad68ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[ 1509.308760][ T3245] RAX: ffffffffffffffda RBX: 00007f2ad5c25fa0 RCX: 00007f2ad599e159
[ 1509.316748][ T3245] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1509.324730][ T3245] RBP: 00007f2ad5a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1509.332716][ T3245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1509.340700][ T3245] R13: 00007f2ad5c26038 R14: 00007f2ad5c25fa0 R15: 00007ffdeb574678
[ 1509.348690][ T3245]  </TASK>
[ 1509.441561][T32491] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1509.564108][   T19] plantronics 0003:047F:FFFF.0032: unknown main item tag 0xd
[ 1509.577454][   T19] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving
[ 1509.597472][   T19] plantronics 0003:047F:FFFF.0032: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1509.651564][T31719] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1509.660144][T32491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.680538][T32491] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1509.710789][T32491] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1509.724454][T32491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.741324][T32491] usb 3-1: Product: syz
[ 1509.750130][T32491] usb 3-1: Manufacturer: syz
[ 1509.760339][T32491] usb 3-1: SerialNumber: syz
[ 1509.821556][T31719] usb 6-1: device descriptor read/64, error -71
[ 1509.994562][ T3239] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9418'.
[ 1510.008714][T32491] usb 7-1: USB disconnect, device number 44
[ 1510.050914][  T845] usb 3-1: USB disconnect, device number 113
[ 1510.091530][T31719] usb 6-1: device descriptor read/64, error -71
[ 1510.264447][ T3262] xt_hashlimit: size too large, truncated to 1048576
[ 1510.301635][   T19] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1510.361512][T31719] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1510.491555][   T19] usb 10-1: Using ep0 maxpacket: 16
[ 1510.498021][   T19] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1510.508960][   T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1510.519957][   T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1510.530089][   T19] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1510.543279][T31719] usb 6-1: device descriptor read/64, error -71
[ 1510.549567][   T19] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[ 1510.559453][   T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.571721][   T19] usb 10-1: config 0 descriptor??
[ 1510.584580][ T3267] xt_hashlimit: size too large, truncated to 1048576
[ 1510.841551][T31719] usb 6-1: device descriptor read/64, error -71
[ 1510.961616][T31719] usb usb6-port1: attempt power cycle
[ 1511.269201][ T3286] can0: slcan on ptm0.
[ 1511.467911][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.475026][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.481813][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.488524][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.525914][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.533042][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.539885][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.546811][T31719] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1511.554652][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.561439][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.568475][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.575396][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.589443][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.597469][T31719] usb 6-1: device descriptor read/8, error -71
[ 1511.607876][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.619864][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.628644][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.635655][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.642524][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.652418][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.668628][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.685364][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.696425][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.717835][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.736368][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.746865][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.754819][T31719] usb 6-1: device descriptor read/8, error -71
[ 1511.766267][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.780412][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.794537][   T28] kauditd_printk_skb: 31 callbacks suppressed
[ 1511.794552][   T28] audit: type=1400 audit(1700249706.497:16172): avc:  denied  { write } for  pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1511.826063][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.839263][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.853695][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.866715][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.875787][   T28] audit: type=1400 audit(1700249706.497:16173): avc:  denied  { add_name } for  pid=3288 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1511.905861][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.918014][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.934307][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.941080][T29986] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready
[ 1511.948977][   T28] audit: type=1400 audit(1700249706.497:16174): avc:  denied  { create } for  pid=3288 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1511.972000][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.978974][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.987158][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1511.994169][   T28] audit: type=1400 audit(1700249706.497:16175): avc:  denied  { write } for  pid=3288 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=9738 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1512.025826][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.032715][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.039593][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.046596][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.053665][T31719] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1512.061442][   T28] audit: type=1400 audit(1700249706.527:16176): avc:  denied  { append } for  pid=3288 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=9738 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1512.086036][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.093025][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.100046][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.107180][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.114123][   T28] audit: type=1400 audit(1700249706.607:16177): avc:  denied  { remove_name } for  pid=3304 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=9738 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1512.137841][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.144884][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.151841][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.158636][   T28] audit: type=1400 audit(1700249706.607:16178): avc:  denied  { unlink } for  pid=3304 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=9738 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1512.182012][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.188869][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.195820][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.202701][T31719] usb 6-1: device descriptor read/8, error -71
[ 1512.209590][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.216837][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.223717][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.230483][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.237412][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.244634][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.252176][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.264845][   T19] kye 0003:0458:5013.0033: unknown main item tag 0x0
[ 1512.273428][   T19] kye 0003:0458:5013.0033: collection stack underflow
[ 1512.281798][   T19] kye 0003:0458:5013.0033: item 0 1 0 12 parsing failed
[ 1512.301852][   T19] kye 0003:0458:5013.0033: parse failed
[ 1512.315749][   T19] kye: probe of 0003:0458:5013.0033 failed with error -22
[ 1512.335675][ T3313] xt_hashlimit: size too large, truncated to 1048576
[ 1512.372167][T31719] usb 6-1: device descriptor read/8, error -71
[ 1512.501629][T31719] usb usb6-port1: unable to enumerate USB device
[ 1512.567545][ T3330] FAULT_INJECTION: forcing a failure.
[ 1512.567545][ T3330] name failslab, interval 1, probability 0, space 0, times 0
[ 1512.612226][ T3330] CPU: 0 PID: 3330 Comm: syz.2.9442 Tainted: G        W          syzkaller #0
[ 1512.621158][ T3330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1512.631256][ T3330] Call Trace:
[ 1512.634554][ T3330]  <TASK>
[ 1512.637498][ T3330]  __dump_stack+0x21/0x24
[ 1512.641890][ T3330]  dump_stack_lvl+0x110/0x170
[ 1512.646601][ T3330]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1512.651650][ T3330]  ? _raw_spin_lock+0x94/0xf0
[ 1512.656356][ T3330]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1512.661594][ T3330]  dump_stack+0x15/0x24
[ 1512.665783][ T3330]  should_fail_ex+0x3bf/0x510
[ 1512.670491][ T3330]  ? __alloc_file+0x28/0x2a0
[ 1512.675132][ T3330]  __should_failslab+0xac/0xf0
[ 1512.679942][ T3330]  should_failslab+0x9/0x20
[ 1512.684470][ T3330]  kmem_cache_alloc+0x3b/0x320
[ 1512.689265][ T3330]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1512.694532][ T3330]  __alloc_file+0x28/0x2a0
[ 1512.698971][ T3330]  alloc_empty_file+0x97/0x180
[ 1512.703766][ T3330]  alloc_file+0x59/0x600
[ 1512.708141][ T3330]  ? _raw_spin_unlock+0x4c/0x70
[ 1512.713023][ T3330]  alloc_file_pseudo+0x180/0x200
[ 1512.718002][ T3330]  ? __cfi_alloc_file_pseudo+0x10/0x10
[ 1512.723500][ T3330]  ? __kasan_check_write+0x14/0x20
[ 1512.728628][ T3330]  ? clear_nlink+0x8a/0xe0
[ 1512.733075][ T3330]  __shmem_file_setup+0x1df/0x2b0
[ 1512.738220][ T3330]  shmem_file_setup+0x2f/0x40
[ 1512.742920][ T3330]  __se_sys_memfd_create+0x1de/0x3c0
[ 1512.748248][ T3330]  __x64_sys_memfd_create+0x5b/0x70
[ 1512.753507][ T3330]  x64_sys_call+0x235/0x9a0
[ 1512.758044][ T3330]  do_syscall_64+0x4c/0xa0
[ 1512.762498][ T3330]  ? clear_bhb_loop+0x30/0x80
[ 1512.767200][ T3330]  ? clear_bhb_loop+0x30/0x80
[ 1512.771917][ T3330]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1512.777845][ T3330] RIP: 0033:0x7fcd2099e159
[ 1512.782278][ T3330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.801907][ T3330] RSP: 002b:00007fcd218e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1512.810346][ T3330] RAX: ffffffffffffffda RBX: 00000000000001e1 RCX: 00007fcd2099e159
[ 1512.818347][ T3330] RDX: 00007fcd218e6ee0 RSI: 0000000000000000 RDI: 00007fcd20a3524b
[ 1512.826344][ T3330] RBP: 00002000000003c0 R08: 00000000ffffffff R09: 0000000000000000
[ 1512.834352][ T3330] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140
[ 1512.842350][ T3330] R13: 00007fcd218e6ee0 R14: 00007fcd218e6ea0 R15: 0000200000000000
[ 1512.850351][ T3330]  </TASK>
[ 1512.965952][ T3337] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9445'.
[ 1513.092183][ T3286] can0 (unregistered): slcan off ptm0.
[ 1513.126573][T31719] usb 10-1: USB disconnect, device number 15
[ 1513.541623][  T845] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1513.551518][T31719] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1513.577247][ T3367] FAULT_INJECTION: forcing a failure.
[ 1513.577247][ T3367] name failslab, interval 1, probability 0, space 0, times 0
[ 1513.606517][ T3367] CPU: 0 PID: 3367 Comm: syz.6.9453 Tainted: G        W          syzkaller #0
[ 1513.615546][ T3367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1513.625637][ T3367] Call Trace:
[ 1513.628938][ T3367]  <TASK>
[ 1513.631895][ T3367]  __dump_stack+0x21/0x24
[ 1513.636287][ T3367]  dump_stack_lvl+0x110/0x170
[ 1513.641010][ T3367]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1513.646108][ T3367]  dump_stack+0x15/0x24
[ 1513.650323][ T3367]  should_fail_ex+0x3bf/0x510
[ 1513.655077][ T3367]  __should_failslab+0xac/0xf0
[ 1513.659906][ T3367]  should_failslab+0x9/0x20
[ 1513.664473][ T3367]  __kmem_cache_alloc_node+0x3d/0x2d0
[ 1513.669897][ T3367]  ? p9_client_create+0x2c3/0x10e0
[ 1513.675173][ T3367]  ? p9_client_create+0x2c3/0x10e0
[ 1513.680349][ T3367]  __kmalloc_node_track_caller+0xa1/0x1e0
[ 1513.686113][ T3367]  kstrdup+0x3b/0x80
[ 1513.690050][ T3367]  p9_client_create+0x2c3/0x10e0
[ 1513.695122][ T3367]  ? __cfi_p9_client_create+0x10/0x10
[ 1513.700543][ T3367]  ? memset+0x35/0x40
[ 1513.704566][ T3367]  v9fs_session_init+0x1c2/0x16e0
[ 1513.709715][ T3367]  ? __cfi_v9fs_session_init+0x10/0x10
[ 1513.715228][ T3367]  ? kasan_save_alloc_info+0x1f/0x30
[ 1513.720555][ T3367]  ? __kasan_kmalloc+0x95/0xb0
[ 1513.725375][ T3367]  ? v9fs_mount+0xb6/0xa90
[ 1513.729947][ T3367]  ? kmalloc_trace+0x40/0xb0
[ 1513.734592][ T3367]  v9fs_mount+0xcc/0xa90
[ 1513.738898][ T3367]  ? __cfi_v9fs_mount+0x10/0x10
[ 1513.743813][ T3367]  ? cap_capable+0x1a6/0x230
[ 1513.746127][  T845] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1513.748441][ T3367]  legacy_get_tree+0xfe/0x1a0
[ 1513.762171][ T3367]  ? __cfi_v9fs_mount+0x10/0x10
[ 1513.767070][ T3367]  vfs_get_tree+0x9a/0x270
[ 1513.771640][  T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.771648][ T3367]  do_new_mount+0x251/0xb40
[ 1513.784152][ T3367]  ? security_capable+0x99/0xc0
[ 1513.789047][ T3367]  path_mount+0x640/0xfd0
[ 1513.793431][ T3367]  __se_sys_mount+0x320/0x390
[ 1513.798140][ T3367]  ? __x64_sys_mount+0xd0/0xd0
[ 1513.798510][  T845] usb 6-1: Product: syz
[ 1513.802949][ T3367]  ? __kasan_check_write+0x14/0x20
[ 1513.802975][ T3367]  ? fpregs_restore_userregs+0x128/0x260
[ 1513.803001][ T3367]  __x64_sys_mount+0xbf/0xd0
[ 1513.803020][ T3367]  x64_sys_call+0x65d/0x9a0
[ 1513.816844][  T845] usb 6-1: Manufacturer: syz
[ 1513.817905][ T3367]  do_syscall_64+0x4c/0xa0
[ 1513.817948][ T3367]  ? clear_bhb_loop+0x30/0x80
[ 1513.835544][  T845] usb 6-1: SerialNumber: syz
[ 1513.836041][ T3367]  ? clear_bhb_loop+0x30/0x80
[ 1513.849998][ T3367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1513.855934][ T3367] RIP: 0033:0x7f1db0d9e159
[ 1513.860376][ T3367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1513.880092][ T3367] RSP: 002b:00007f1daf7f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1513.888543][ T3367] RAX: ffffffffffffffda RBX: 00007f1db1025fa0 RCX: 00007f1db0d9e159
[ 1513.896544][ T3367] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[ 1513.903631][  T845] usb 6-1: config 0 descriptor??
[ 1513.904538][ T3367] RBP: 00007f1db0e3506b R08: 0000200000000180 R09: 0000000000000000
[ 1513.904555][ T3367] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1513.904569][ T3367] R13: 00007f1db1026038 R14: 00007f1db1025fa0 R15: 00007ffe1809a8b8
[ 1513.933489][ T3367]  </TASK>
[ 1514.126014][  T845] usb 6-1: USB disconnect, device number 40
[ 1514.393959][T31719] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.411912][T31719] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1514.424852][ T3322] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9439'.
[ 1514.436108][T31719] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1514.451152][T31719] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.459449][T31719] usb 10-1: Product: syz
[ 1514.463878][T31719] usb 10-1: Manufacturer: syz
[ 1514.468593][T31719] usb 10-1: SerialNumber: syz
[ 1515.180567][ T3347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1515.199019][ T3347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1515.230278][T31719] cdc_ether: probe of 10-1:1.0 failed with error -22
[ 1515.240528][T31719] usb 10-1: USB disconnect, device number 16
[ 1515.317974][   T28] audit: type=1400 audit(1700249709.987:16179): avc:  denied  { module_load } for  pid=3402 comm="syz.5.9461" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=5571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1515.851556][T31719] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1516.041506][T31719] usb 10-1: Using ep0 maxpacket: 8
[ 1516.047973][T31719] usb 10-1: config index 0 descriptor too short (expected 301, got 72)
[ 1516.056328][T31719] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.066743][T31719] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1516.076657][T31719] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1516.086599][T31719] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1516.091704][  T845] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1516.096898][T31719] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1516.115514][T31719] usb 10-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1516.128634][T31719] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1516.137853][T31719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.291540][  T845] usb 7-1: Using ep0 maxpacket: 8
[ 1516.308184][  T845] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1516.327543][  T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.403696][  T845] usb 7-1: Product: syz
[ 1516.407916][  T845] usb 7-1: Manufacturer: syz
[ 1516.414042][  T845] usb 7-1: SerialNumber: syz
[ 1516.423242][  T845] usb 7-1: config 0 descriptor??
[ 1516.733617][   T28] audit: type=1400 audit(1700249711.437:16180): avc:  denied  { map } for  pid=3444 comm="syz.2.9476" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1518.208094][  T845] usb 10-1: USB disconnect, device number 17
[ 1518.254368][   T28] audit: type=1326 audit(1700249712.957:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3478 comm="syz.5.9488" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8653d9e159 code=0x7fc00000
[ 1518.279548][T23943] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1518.531535][T23943] usb 3-1: Using ep0 maxpacket: 8
[ 1518.539491][T23943] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1518.549226][T23943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.557451][T23943] usb 3-1: Product: syz
[ 1518.561921][T23943] usb 3-1: Manufacturer: syz
[ 1518.566597][T23943] usb 3-1: SerialNumber: syz
[ 1518.576290][T23943] usb 3-1: config 0 descriptor??
[ 1518.854678][   T19] usb 7-1: USB disconnect, device number 45
[ 1520.291642][   T28] audit: type=1400 audit(1700249714.947:16182): avc:  denied  { mount } for  pid=3554 comm="syz.3.9517" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1520.452721][ T3571] netlink: 168 bytes leftover after parsing attributes in process `syz.9.9521'.
[ 1520.537443][ T3585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9527'.
[ 1520.554644][ T3585] bridge3: port 1(erspan0) entered blocking state
[ 1520.562074][ T3585] bridge3: port 1(erspan0) entered disabled state
[ 1520.569181][ T3585] device erspan0 entered promiscuous mode
[ 1520.577101][ T3585] bridge3: port 1(erspan0) entered blocking state
[ 1520.583599][ T3585] bridge3: port 1(erspan0) entered forwarding state
[ 1520.791190][ T3594] xt_hashlimit: overflow, try lower: 1125899906842624/134217732
[ 1520.864043][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9531'.
[ 1520.991649][   T19] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1521.019150][T23943] usb 3-1: USB disconnect, device number 114
[ 1521.706171][   T19] usb 6-1: Using ep0 maxpacket: 8
[ 1521.712830][   T19] usb 6-1: config 6 has an invalid interface number: 240 but max is 0
[ 1521.721039][   T19] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.751914][   T28] audit: type=1326 audit(1700249716.457:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1521.777278][   T19] usb 6-1: config 6 has no interface number 0
[ 1521.784406][   T19] usb 6-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1521.797831][   T28] audit: type=1326 audit(1700249716.477:16184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1521.822968][   T19] usb 6-1: config 6 interface 240 has no altsetting 0
[ 1521.830357][   T28] audit: type=1326 audit(1700249716.487:16185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1521.856904][   T19] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32
[ 1521.867916][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.877163][   T19] usb 6-1: Product: syz
[ 1521.944563][   T28] audit: type=1326 audit(1700249716.487:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1522.230727][   T28] audit: type=1326 audit(1700249716.487:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1522.311533][   T28] audit: type=1326 audit(1700249716.487:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1522.407315][   T28] audit: type=1326 audit(1700249716.487:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1522.482895][   T28] audit: type=1326 audit(1700249716.487:16190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.6.9542" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d9e159 code=0x7ffc0000
[ 1522.651522][T23943] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1522.822010][   T19] usb 6-1: Manufacturer: syz
[ 1522.828987][   T19] usb 6-1: SerialNumber: syz
[ 1522.841549][T23943] usb 7-1: Using ep0 maxpacket: 32
[ 1522.853509][T23943] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1522.875181][T23943] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1522.885809][T23943] usb 7-1: config 0 has no interface number 0
[ 1522.892087][  T704] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1522.899886][T23943] usb 7-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1522.914939][T23943] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1522.924249][T23943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.932426][T23943] usb 7-1: Product: syz
[ 1522.936681][T23943] usb 7-1: Manufacturer: syz
[ 1522.941291][T23943] usb 7-1: SerialNumber: syz
[ 1522.946877][T23943] usb 7-1: config 0 descriptor??
[ 1522.952780][T23943] hub 7-1:0.89: bad descriptor, ignoring hub
[ 1522.960076][T23943] hub: probe of 7-1:0.89 failed with error -5
[ 1523.151551][  T704] usb 3-1: Using ep0 maxpacket: 8
[ 1523.163454][  T704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1523.175024][  T704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1523.185404][  T704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1523.195834][  T704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1523.209197][  T704] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1523.218438][  T704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.261653][T23943] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1523.271814][  T704] usb 7-1: USB disconnect, device number 46
[ 1523.443026][T23943] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1523.451352][T23943] usb 10-1: not running at top speed; connect to a high speed hub
[ 1523.460272][T23943] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1523.470798][T23943] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1523.481586][T23943] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1523.490883][T23943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.499252][T23943] usb 10-1: Product: syz
[ 1523.503723][T23943] usb 10-1: Manufacturer: syz
[ 1523.508444][T23943] usb 10-1: SerialNumber: syz
[ 1523.623547][   T19] cdc_ether 6-1:6.240: skipping garbage
[ 1523.629430][   T19] cdc_ether 6-1:6.240: skipping garbage
[ 1523.635450][   T19] usb 6-1: bad CDC descriptors
[ 1523.640552][   T19] usb 6-1: unsupported MDLM descriptors
[ 1523.646421][   T19] cdc_acm 6-1:6.240: skipping garbage
[ 1523.651943][   T19] cdc_acm 6-1:6.240: skipping garbage
[ 1523.658567][   T19] usb 6-1: USB disconnect, device number 41
[ 1523.722342][T23943] usb 10-1: 0:1 : does not exist
[ 1523.821555][T23943] usb 10-1: unit 254 not found!
[ 1523.829267][T23943] usb 10-1: USB disconnect, device number 18
[ 1524.373528][ T2736] udevd[2736]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1525.079331][ T3684] block device autoloading is deprecated and will be removed.
[ 1525.089586][   T28] audit: type=1400 audit(1700249719.787:16191): avc:  denied  { ioctl } for  pid=3683 comm="syz.5.9563" path="/63/file0" dev="tmpfs" ino=368 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1525.121359][   T28] audit: type=1400 audit(1700249719.817:16192): avc:  denied  { setattr } for  pid=3686 comm="syz.9.9566" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1525.146949][   T28] audit: type=1400 audit(1700249719.847:16193): avc:  denied  { unmount } for  pid=2629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1525.358678][   T28] audit: type=1400 audit(1700249720.057:16194): avc:  denied  { accept } for  pid=3693 comm="syz.5.9568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1525.667529][T31039] usb 3-1: USB disconnect, device number 115
[ 1525.771577][T23943] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1525.971495][T23943] usb 10-1: Using ep0 maxpacket: 32
[ 1525.977941][T23943] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1525.997077][T23943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.031232][T23943] usb 10-1: config 0 has no interface number 0
[ 1526.037696][T23943] usb 10-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1526.067407][T23943] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1526.088288][T23943] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1526.108386][T23943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.119258][T23943] usb 10-1: Product: syz
[ 1526.197057][T23943] usb 10-1: Manufacturer: syz
[ 1526.204069][T23943] usb 10-1: SerialNumber: syz
[ 1526.223018][T23943] usb 10-1: config 0 descriptor??
[ 1526.310363][ T3728] ip_tables: iptables: counters copy to user failed while replacing table
[ 1526.833297][ T3704] netlink: 165 bytes leftover after parsing attributes in process `syz.5.9572'.
[ 1526.844522][T23943] usb 10-1: USB disconnect, device number 19
[ 1527.429218][T23943] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1527.641530][T23943] usb 10-1: Using ep0 maxpacket: 32
[ 1527.648090][T23943] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1527.691290][  T704] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1527.699074][T23943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.711586][T23943] usb 10-1: config 0 has no interface number 0
[ 1527.717863][T23943] usb 10-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1527.734196][T23943] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1527.750026][T23943] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1527.760503][T23943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.768832][T23943] usb 10-1: Product: syz
[ 1527.773309][T23943] usb 10-1: Manufacturer: syz
[ 1527.778259][T23943] usb 10-1: SerialNumber: syz
[ 1527.795229][T23943] usb 10-1: config 0 descriptor??
[ 1527.882249][  T704] usb 3-1: Using ep0 maxpacket: 32
[ 1527.888753][  T704] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[ 1527.897210][  T704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.907637][  T704] usb 3-1: config 0 has no interface number 0
[ 1527.916793][  T704] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[ 1527.926107][  T704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.934315][  T704] usb 3-1: Product: syz
[ 1527.938579][  T704] usb 3-1: Manufacturer: syz
[ 1527.943413][  T704] usb 3-1: SerialNumber: syz
[ 1527.948986][  T704] usb 3-1: config 0 descriptor??
[ 1528.157228][   T19] usb 3-1: USB disconnect, device number 116
[ 1528.211195][T23943] usb 10-1: USB disconnect, device number 20
[ 1528.789045][ T3794] FAULT_INJECTION: forcing a failure.
[ 1528.789045][ T3794] name failslab, interval 1, probability 0, space 0, times 0
[ 1528.801927][ T3794] CPU: 1 PID: 3794 Comm: syz.2.9611 Tainted: G        W          syzkaller #0
[ 1528.810813][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1528.820893][ T3794] Call Trace:
[ 1528.824217][ T3794]  <TASK>
[ 1528.827164][ T3794]  __dump_stack+0x21/0x24
[ 1528.831537][ T3794]  dump_stack_lvl+0x110/0x170
[ 1528.836274][ T3794]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1528.841351][ T3794]  dump_stack+0x15/0x24
[ 1528.845541][ T3794]  should_fail_ex+0x3bf/0x510
[ 1528.850251][ T3794]  __should_failslab+0xac/0xf0
[ 1528.855044][ T3794]  should_failslab+0x9/0x20
[ 1528.859567][ T3794]  __kmem_cache_alloc_node+0x3d/0x2d0
[ 1528.864974][ T3794]  ? ovl_fill_super+0x32b/0x4790
[ 1528.869946][ T3794]  ? selinux_cred_prepare+0x74/0x80
[ 1528.875200][ T3794]  ? ovl_fill_super+0x32b/0x4790
[ 1528.880171][ T3794]  __kmalloc_node_track_caller+0xa1/0x1e0
[ 1528.885916][ T3794]  kstrdup+0x3b/0x80
[ 1528.889829][ T3794]  ovl_fill_super+0x32b/0x4790
[ 1528.894618][ T3794]  ? xas_store+0xb65/0x17d0
[ 1528.899156][ T3794]  ? xas_nomem+0x6b/0x1f0
[ 1528.903520][ T3794]  ? ida_alloc_range+0x808/0x840
[ 1528.908629][ T3794]  ? __cfi_ovl_fill_super+0x10/0x10
[ 1528.913851][ T3794]  ? rwsem_write_trylock+0x136/0x300
[ 1528.919165][ T3794]  ? __cfi_ida_alloc_range+0x10/0x10
[ 1528.924495][ T3794]  ? clear_nonspinnable+0x60/0x60
[ 1528.929556][ T3794]  ? up_write+0x7b/0x290
[ 1528.933834][ T3794]  ? register_shrinker_prepared+0xd7/0x100
[ 1528.939674][ T3794]  ? __cfi_set_anon_super+0x10/0x10
[ 1528.944926][ T3794]  ? __cfi_ovl_fill_super+0x10/0x10
[ 1528.950165][ T3794]  mount_nodev+0x6a/0x100
[ 1528.954522][ T3794]  ovl_mount+0x2c/0x40
[ 1528.958622][ T3794]  legacy_get_tree+0xfe/0x1a0
[ 1528.963335][ T3794]  ? __cfi_ovl_mount+0x10/0x10
[ 1528.968130][ T3794]  vfs_get_tree+0x9a/0x270
[ 1528.972586][ T3794]  do_new_mount+0x251/0xb40
[ 1528.977125][ T3794]  ? security_capable+0x99/0xc0
[ 1528.982007][ T3794]  path_mount+0x640/0xfd0
[ 1528.986392][ T3794]  __se_sys_mount+0x320/0x390
[ 1528.991096][ T3794]  ? __this_cpu_preempt_check+0x13/0x20
[ 1528.996679][ T3794]  ? __x64_sys_mount+0xd0/0xd0
[ 1529.001492][ T3794]  ? __kasan_check_write+0x14/0x20
[ 1529.006715][ T3794]  ? fpregs_restore_userregs+0x128/0x260
[ 1529.012381][ T3794]  __x64_sys_mount+0xbf/0xd0
[ 1529.017002][ T3794]  x64_sys_call+0x65d/0x9a0
[ 1529.021551][ T3794]  do_syscall_64+0x4c/0xa0
[ 1529.026001][ T3794]  ? clear_bhb_loop+0x30/0x80
[ 1529.030701][ T3794]  ? clear_bhb_loop+0x30/0x80
[ 1529.035415][ T3794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1529.041429][ T3794] RIP: 0033:0x7fcd2099e159
[ 1529.045876][ T3794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1529.065512][ T3794] RSP: 002b:00007fcd218e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1529.073987][ T3794] RAX: ffffffffffffffda RBX: 00007fcd20c25fa0 RCX: 00007fcd2099e159
[ 1529.082024][ T3794] RDX: 0000200000000440 RSI: 0000200000000200 RDI: 0000000000000000
[ 1529.090037][ T3794] RBP: 00007fcd20a3506b R08: 00002000000000c0 R09: 0000000000000000
[ 1529.098036][ T3794] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 1529.106029][ T3794] R13: 00007fcd20c26038 R14: 00007fcd20c25fa0 R15: 00007ffe47722c48
[ 1529.114027][ T3794]  </TASK>
[ 1529.209520][ T3807] futex_wake_op: syz.2.9615 tries to shift op by 144; fix this program
[ 1529.228060][ T3807] futex_wake_op: syz.2.9615 tries to shift op by 144; fix this program
[ 1529.491628][T23943] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1529.711526][T23943] usb 7-1: Using ep0 maxpacket: 32
[ 1529.717118][ T3822] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9620'.
[ 1529.727129][T23943] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1529.742652][T23943] usb 7-1: config 0 has no interface number 0
[ 1529.757888][T23943] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1529.774251][T23943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.791791][T23943] usb 7-1: Product: syz
[ 1529.800409][T23943] usb 7-1: Manufacturer: syz
[ 1529.821575][T23943] usb 7-1: SerialNumber: syz
[ 1529.872201][T23943] usb 7-1: config 0 descriptor??
[ 1530.132613][T23943] smsc95xx v2.0.0
[ 1530.201507][T31039] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1530.240186][ T3831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9623'.
[ 1530.381764][T31039] usb 3-1: Using ep0 maxpacket: 32
[ 1530.389491][T31039] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[ 1530.404593][T31039] usb 3-1: config 0 has no interface number 0
[ 1530.410884][T31039] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1530.421522][T31039] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1530.431981][T31039] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1530.452937][T31039] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1530.466336][T31039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.483825][T31039] usb 3-1: Product: syz
[ 1530.488190][   T28] audit: type=1400 audit(1700249725.187:16195): avc:  denied  { relabelfrom } for  pid=3842 comm="syz.9.9629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1530.508520][T31039] usb 3-1: Manufacturer: syz
[ 1530.513506][T31039] usb 3-1: SerialNumber: syz
[ 1530.519748][T31039] usb 3-1: config 0 descriptor??
[ 1530.525111][   T28] audit: type=1400 audit(1700249725.187:16196): avc:  denied  { relabelto } for  pid=3842 comm="syz.9.9629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1530.547450][ T3818] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1530.609377][T23686] usb 6-1: new low-speed USB device number 42 using dummy_hcd
[ 1530.758216][T23943] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[ 1530.769837][T31039] usb-storage 3-1:0.20: USB Mass Storage device detected
[ 1530.777076][T23943] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1530.787310][T23943] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1530.812113][T31039] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1530.820937][T23943] smsc95xx: probe of 7-1:0.67 failed with error -71
[ 1530.834349][T23943] usb 7-1: USB disconnect, device number 47
[ 1530.841642][T31039] scsi host1: usb-storage 3-1:0.20
[ 1530.852583][T31039] usb 3-1: USB disconnect, device number 117
[ 1530.863480][T23686] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1530.887681][T23686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt
[ 1530.904072][T23686] usb 6-1: string descriptor 0 read error: -22
[ 1530.941092][T23686] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[ 1531.006552][T23686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.083961][ T3839] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1531.329191][ T3866] FAULT_INJECTION: forcing a failure.
[ 1531.329191][ T3866] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1531.342227][ T3866] CPU: 1 PID: 3866 Comm: syz.6.9634 Tainted: G        W          syzkaller #0
[ 1531.351122][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1531.361211][ T3866] Call Trace:
[ 1531.364529][ T3866]  <TASK>
[ 1531.367499][ T3866]  __dump_stack+0x21/0x24
[ 1531.371887][ T3866]  dump_stack_lvl+0x110/0x170
[ 1531.376607][ T3866]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1531.381672][ T3866]  ? sock_write_iter+0x320/0x3f0
[ 1531.386666][ T3866]  dump_stack+0x15/0x24
[ 1531.390854][ T3866]  should_fail_ex+0x3bf/0x510
[ 1531.395586][ T3866]  should_fail+0xb/0x10
[ 1531.399768][ T3866]  get_futex_key+0x143/0xb10
[ 1531.404414][ T3866]  ? fsnotify_perm+0x67/0x5b0
[ 1531.407162][ T3839] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1531.409140][ T3866]  ? security_file_permission+0x8a/0xb0
[ 1531.421810][ T3866]  ? __cfi_get_futex_key+0x10/0x10
[ 1531.426968][ T3866]  ? do_iter_write+0x87f/0xb30
[ 1531.431762][ T3866]  ? _copy_from_user+0x8f/0xc0
[ 1531.436576][ T3866]  futex_wake+0x150/0x8e0
[ 1531.440929][ T3866]  ? vfs_iter_write+0xa0/0xa0
[ 1531.445635][ T3866]  ? __cfi_futex_wake+0x10/0x10
[ 1531.450540][ T3866]  ? do_writev+0x2c0/0x2c0
[ 1531.455008][ T3866]  ? vfs_write+0xa51/0xd00
[ 1531.459446][ T3866]  do_futex+0x2bf/0x430
[ 1531.463650][ T3866]  ? __cfi_do_futex+0x10/0x10
[ 1531.468375][ T3866]  __se_sys_futex+0x136/0x310
[ 1531.473094][ T3866]  ? __x64_sys_futex+0x100/0x100
[ 1531.478060][ T3866]  ? do_writev+0x20c/0x2c0
[ 1531.482515][ T3866]  ? do_readv+0x450/0x450
[ 1531.486873][ T3866]  __x64_sys_futex+0xe5/0x100
[ 1531.491580][ T3866]  x64_sys_call+0x7ec/0x9a0
[ 1531.496116][ T3866]  do_syscall_64+0x4c/0xa0
[ 1531.500583][ T3866]  ? clear_bhb_loop+0x30/0x80
[ 1531.505306][ T3866]  ? clear_bhb_loop+0x30/0x80
[ 1531.510025][ T3866]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1531.515935][ T3866] RIP: 0033:0x7f1db0d9e159
[ 1531.520371][ T3866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1531.540018][ T3866] RSP: 002b:00007f1daf7f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1531.548504][ T3866] RAX: ffffffffffffffda RBX: 00007f1db1025fa8 RCX: 00007f1db0d9e159
[ 1531.556503][ T3866] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1db1025fac
[ 1531.564513][ T3866] RBP: 00007f1db1025fa0 R08: 0011daebeafd7bb4 R09: 0000000000000000
[ 1531.572519][ T3866] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1531.580561][ T3866] R13: 00007f1db1026038 R14: 00007ffe1809a7d0 R15: 00007ffe1809a8b8
[ 1531.588569][ T3866]  </TASK>
[ 1531.691048][ T3873] ip_tables: iptables: counters copy to user failed while replacing table
[ 1531.820501][T23686] usb 6-1: USB disconnect, device number 42
[ 1532.682409][ T3889] ==================================================================
[ 1532.690520][ T3889] BUG: KASAN: use-after-free in kobject_get+0x113/0x120
[ 1532.697470][ T3889] Read of size 1 at addr ffff8881318c983c by task syz.2.9641/3889
[ 1532.705290][ T3889] 
[ 1532.707621][ T3889] CPU: 1 PID: 3889 Comm: syz.2.9641 Tainted: G        W          syzkaller #0
[ 1532.716464][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1532.726537][ T3889] Call Trace:
[ 1532.729821][ T3889]  <TASK>
[ 1532.732768][ T3889]  __dump_stack+0x21/0x24
[ 1532.737140][ T3889]  dump_stack_lvl+0x110/0x170
[ 1532.741832][ T3889]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 1532.746873][ T3889]  ? __cfi__printk+0x8/0x8
[ 1532.751398][ T3889]  ? kobject_get+0x113/0x120
[ 1532.756008][ T3889]  print_address_description+0x71/0x200
[ 1532.761567][ T3889]  print_report+0x4a/0x60
[ 1532.765915][ T3889]  kasan_report+0x122/0x150
[ 1532.770454][ T3889]  ? kobject_get+0x113/0x120
[ 1532.775054][ T3889]  ? kasan_save_alloc_info+0x1f/0x30
[ 1532.780353][ T3889]  __asan_report_load1_noabort+0x14/0x20
[ 1532.785992][ T3889]  kobject_get+0x113/0x120
[ 1532.790418][ T3889]  device_add+0x2f0/0xec0
[ 1532.794845][ T3889]  device_create+0x26c/0x300
[ 1532.799456][ T3889]  ? __cfi_device_create+0x10/0x10
[ 1532.804599][ T3889]  create_function_device+0x60/0x70
[ 1532.809872][ T3889]  f_midi_alloc_inst+0x1a8/0x380
[ 1532.814887][ T3889]  usb_get_function_instance+0xf3/0x310
[ 1532.820489][ T3889]  function_make+0x118/0x360
[ 1532.825096][ T3889]  ? __cfi_function_make+0x10/0x10
[ 1532.830229][ T3889]  ? __cfi_mutex_lock+0x10/0x10
[ 1532.835102][ T3889]  ? __kasan_kmalloc+0x95/0xb0
[ 1532.839885][ T3889]  ? configfs_mkdir+0x444/0x9e0
[ 1532.844810][ T3889]  ? __kmalloc+0xb4/0x1e0
[ 1532.849159][ T3889]  configfs_mkdir+0x518/0x9e0
[ 1532.853858][ T3889]  vfs_mkdir+0x39c/0x580
[ 1532.858126][ T3889]  do_mkdirat+0x174/0x4d0
[ 1532.862479][ T3889]  __x64_sys_mkdirat+0x89/0xa0
[ 1532.867266][ T3889]  x64_sys_call+0x73d/0x9a0
[ 1532.871821][ T3889]  do_syscall_64+0x4c/0xa0
[ 1532.876278][ T3889]  ? clear_bhb_loop+0x30/0x80
[ 1532.880998][ T3889]  ? clear_bhb_loop+0x30/0x80
[ 1532.885698][ T3889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1532.891626][ T3889] RIP: 0033:0x7fcd2099e159
[ 1532.896060][ T3889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1532.915681][ T3889] RSP: 002b:00007fcd218a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1532.924140][ T3889] RAX: ffffffffffffffda RBX: 00007fcd20c26180 RCX: 00007fcd2099e159
[ 1532.932150][ T3889] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c
[ 1532.940140][ T3889] RBP: 00007fcd20a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1532.948122][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1532.956109][ T3889] R13: 00007fcd20c26218 R14: 00007fcd20c26180 R15: 00007ffe47722c48
[ 1532.964094][ T3889]  </TASK>
[ 1532.967120][ T3889] 
[ 1532.969455][ T3889] Allocated by task 91:
[ 1532.973612][ T3889]  kasan_set_track+0x4b/0x70
[ 1532.978225][ T3889]  kasan_save_alloc_info+0x1f/0x30
[ 1532.983351][ T3889]  __kasan_kmalloc+0x95/0xb0
[ 1532.987967][ T3889]  kmalloc_trace+0x40/0xb0
[ 1532.992388][ T3889]  syslog_print+0x11f/0x600
[ 1532.996980][ T3889]  do_syslog+0x6e1/0x7a0
[ 1533.001234][ T3889]  __x64_sys_syslog+0x7c/0x90
[ 1533.005940][ T3889]  x64_sys_call+0x610/0x9a0
[ 1533.010465][ T3889]  do_syscall_64+0x4c/0xa0
[ 1533.014979][ T3889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1533.020906][ T3889] 
[ 1533.023254][ T3889] Freed by task 91:
[ 1533.027061][ T3889]  kasan_set_track+0x4b/0x70
[ 1533.031668][ T3889]  kasan_save_free_info+0x2b/0x40
[ 1533.036721][ T3889]  ____kasan_slab_free+0x132/0x180
[ 1533.041946][ T3889]  __kasan_slab_free+0x11/0x20
[ 1533.046740][ T3889]  slab_free_freelist_hook+0xc2/0x190
[ 1533.052132][ T3889]  __kmem_cache_free+0xb7/0x1b0
[ 1533.057004][ T3889]  kfree+0x6f/0xf0
[ 1533.060741][ T3889]  syslog_print+0x568/0x600
[ 1533.065255][ T3889]  do_syslog+0x6e1/0x7a0
[ 1533.069611][ T3889]  __x64_sys_syslog+0x7c/0x90
[ 1533.074302][ T3889]  x64_sys_call+0x610/0x9a0
[ 1533.078842][ T3889]  do_syscall_64+0x4c/0xa0
[ 1533.083279][ T3889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1533.089211][ T3889] 
[ 1533.091558][ T3889] The buggy address belongs to the object at ffff8881318c9800
[ 1533.091558][ T3889]  which belongs to the cache kmalloc-1k of size 1024
[ 1533.105621][ T3889] The buggy address is located 60 bytes inside of
[ 1533.105621][ T3889]  1024-byte region [ffff8881318c9800, ffff8881318c9c00)
[ 1533.118927][ T3889] 
[ 1533.121282][ T3889] The buggy address belongs to the physical page:
[ 1533.127760][ T3889] page:ffffea0004c63200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1318c8
[ 1533.138005][ T3889] head:ffffea0004c63200 order:3 compound_mapcount:0 compound_pincount:0
[ 1533.146337][ T3889] flags: 0x4000000000010200(slab|head|zone=1)
[ 1533.152427][ T3889] raw: 4000000000010200 ffffea0004228000 dead000000000002 ffff888100043080
[ 1533.161019][ T3889] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 1533.169629][ T3889] page dumped because: kasan: bad access detected
[ 1533.176065][ T3889] page_owner tracks the page as allocated
[ 1533.181828][ T3889] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 30462658857, free_ts 0
[ 1533.201544][ T3889]  post_alloc_hook+0x1f5/0x210
[ 1533.206333][ T3889]  prep_new_page+0x1c/0x110
[ 1533.210882][ T3889]  get_page_from_freelist+0x2ca9/0x2d20
[ 1533.216440][ T3889]  __alloc_pages+0x1fa/0x610
[ 1533.221042][ T3889]  alloc_slab_page+0x6e/0xf0
[ 1533.225637][ T3889]  new_slab+0x98/0x3e0
[ 1533.229709][ T3889]  ___slab_alloc+0x70f/0xb70
[ 1533.234323][ T3889]  __slab_alloc+0x5e/0xa0
[ 1533.238674][ T3889]  __kmem_cache_alloc_node+0x204/0x2d0
[ 1533.244166][ T3889]  __kmalloc_node_track_caller+0xa1/0x1e0
[ 1533.249891][ T3889]  __alloc_skb+0x226/0x4a0
[ 1533.254325][ T3889]  __neigh_notify+0x84/0x130
[ 1533.258931][ T3889]  neigh_cleanup_and_release+0x2c/0x1a0
[ 1533.264487][ T3889]  neigh_flush_dev+0x79a/0x950
[ 1533.269278][ T3889]  neigh_changeaddr+0x30/0x40
[ 1533.273981][ T3889]  ndisc_netdev_event+0x1fc/0x630
[ 1533.279023][ T3889] page_owner free stack trace missing
[ 1533.284397][ T3889] 
[ 1533.286730][ T3889] Memory state around the buggy address:
[ 1533.292380][ T3889]  ffff8881318c9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1533.300450][ T3889]  ffff8881318c9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1533.308604][ T3889] >ffff8881318c9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1533.316666][ T3889]                                         ^
[ 1533.322559][ T3889]  ffff8881318c9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1533.330638][ T3889]  ffff8881318c9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1533.338705][ T3889] ==================================================================
[ 1533.346885][ T3889] Disabling lock debugging due to kernel taint
[ 1533.354951][ T3889] general protection fault, probably for non-canonical address 0xecadc9cdec6e6d2f: 0000 [#1] PREEMPT SMP KASAN
[ 1533.366748][ T3889] KASAN: maybe wild-memory-access in range [0x656e6e6f63736978-0x656e6e6f6373697f]
[ 1533.376040][ T3889] CPU: 1 PID: 3889 Comm: syz.2.9641 Tainted: G    B   W          syzkaller #0
[ 1533.384897][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1533.394976][ T3889] RIP: 0010:kobject_add_internal+0x58f/0xc20
[ 1533.400973][ T3889] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 b8 91 c8 fc 4d 8b 3f 4d 85 ff 0f 84 cc 00 00 00 49 83 c7 18 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 92 91 c8 fc 49 8b 07 48 85 c0 0f
[ 1533.420599][ T3889] RSP: 0018:ffffc90003c178b8 EFLAGS: 00010203
[ 1533.426676][ T3889] RAX: 0cadcdcdec6e6d2f RBX: ffff88813c917a00 RCX: ffffffff84ee6328
[ 1533.434661][ T3889] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881318c9828
[ 1533.442658][ T3889] RBP: ffffc90003c17910 R08: 0000000000000003 R09: 0000000000000004
[ 1533.450635][ T3889] R10: dffffc0000000000 R11: fffff52000782f08 R12: dffffc0000000000
[ 1533.458620][ T3889] R13: 1ffff11027922f45 R14: ffffffff8747fb00 R15: 656e6e6f6373697c
[ 1533.466628][ T3889] FS:  00007fcd218a56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1533.475571][ T3889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1533.482168][ T3889] CR2: 0000001b2fd19ff8 CR3: 00000001393d0000 CR4: 00000000003506a0
[ 1533.490154][ T3889] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1533.498142][ T3889] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1533.506125][ T3889] Call Trace:
[ 1533.509414][ T3889]  <TASK>
[ 1533.512387][ T3889]  kobject_add+0x165/0x230
[ 1533.516818][ T3889]  ? irqentry_exit+0x37/0x40
[ 1533.521428][ T3889]  ? sysvec_call_function_single+0x61/0xc0
[ 1533.527255][ T3889]  ? __cfi_kobject_add+0x10/0x10
[ 1533.532212][ T3889]  ? kobject_init+0x83/0x1d0
[ 1533.536838][ T3889]  get_device_parent+0x3a6/0x410
[ 1533.541795][ T3889]  device_add+0x308/0xec0
[ 1533.546144][ T3889]  device_create+0x26c/0x300
[ 1533.550753][ T3889]  ? __cfi_device_create+0x10/0x10
[ 1533.555886][ T3889]  create_function_device+0x60/0x70
[ 1533.561094][ T3889]  f_midi_alloc_inst+0x1a8/0x380
[ 1533.566047][ T3889]  usb_get_function_instance+0xf3/0x310
[ 1533.571621][ T3889]  function_make+0x118/0x360
[ 1533.576225][ T3889]  ? __cfi_function_make+0x10/0x10
[ 1533.581346][ T3889]  ? __cfi_mutex_lock+0x10/0x10
[ 1533.586217][ T3889]  ? __kasan_kmalloc+0x95/0xb0
[ 1533.591017][ T3889]  ? configfs_mkdir+0x444/0x9e0
[ 1533.595921][ T3889]  ? __kmalloc+0xb4/0x1e0
[ 1533.600261][ T3889]  configfs_mkdir+0x518/0x9e0
[ 1533.604972][ T3889]  vfs_mkdir+0x39c/0x580
[ 1533.609245][ T3889]  do_mkdirat+0x174/0x4d0
[ 1533.613595][ T3889]  __x64_sys_mkdirat+0x89/0xa0
[ 1533.618372][ T3889]  x64_sys_call+0x73d/0x9a0
[ 1533.622913][ T3889]  do_syscall_64+0x4c/0xa0
[ 1533.627371][ T3889]  ? clear_bhb_loop+0x30/0x80
[ 1533.632062][ T3889]  ? clear_bhb_loop+0x30/0x80
[ 1533.636775][ T3889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1533.642675][ T3889] RIP: 0033:0x7fcd2099e159
[ 1533.647098][ T3889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1533.666742][ T3889] RSP: 002b:00007fcd218a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1533.675169][ T3889] RAX: ffffffffffffffda RBX: 00007fcd20c26180 RCX: 00007fcd2099e159
[ 1533.683152][ T3889] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c
[ 1533.691147][ T3889] RBP: 00007fcd20a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1533.699130][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1533.707116][ T3889] R13: 00007fcd20c26218 R14: 00007fcd20c26180 R15: 00007ffe47722c48
[ 1533.715102][ T3889]  </TASK>
[ 1533.718152][ T3889] Modules linked in:
[ 1533.722155][ T3889] ---[ end trace 0000000000000000 ]---
[ 1533.727775][ T3889] RIP: 0010:kobject_add_internal+0x58f/0xc20
[ 1533.734072][ T3889] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 b8 91 c8 fc 4d 8b 3f 4d 85 ff 0f 84 cc 00 00 00 49 83 c7 18 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 92 91 c8 fc 49 8b 07 48 85 c0 0f
[ 1533.753845][ T3889] RSP: 0018:ffffc90003c178b8 EFLAGS: 00010203
[ 1533.760170][ T3889] RAX: 0cadcdcdec6e6d2f RBX: ffff88813c917a00 RCX: ffffffff84ee6328
[ 1533.768321][ T3889] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881318c9828
[ 1533.776498][ T3889] RBP: ffffc90003c17910 R08: 0000000000000003 R09: 0000000000000004
[ 1533.784743][ T3889] R10: dffffc0000000000 R11: fffff52000782f08 R12: dffffc0000000000
[ 1533.792837][ T3889] R13: 1ffff11027922f45 R14: ffffffff8747fb00 R15: 656e6e6f6373697c
[ 1533.800911][ T3889] FS:  00007fcd218a56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1533.810227][ T3889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1533.817013][ T3889] CR2: 0000001b2fd19ff8 CR3: 00000001393d0000 CR4: 00000000003506a0
[ 1533.825558][ T3889] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1533.833635][ T3889] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1533.842190][ T3889] Kernel panic - not syncing: Fatal exception
[ 1533.848856][ T3889] Kernel Offset: disabled
[ 1533.853186][ T3889] Rebooting in 86400 seconds..