last executing test programs:

1m37.093179122s ago: executing program 3 (id=17):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x501c01, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x10, 0x6, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCGSID(r2, 0x5429, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff0001)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f0000000700)={[{@jqfmt_vfsv1}]}, 0x1, 0x55a, &(0x7f0000000100)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

1m36.69720927s ago: executing program 3 (id=19):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@errors_remount}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x3, 0x4c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48)
write$binfmt_elf32(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x34, 0x5, 0x7f, 0x100000001, 0x2, 0x6, 0x8, 0x147, 0x38, 0x227, 0x9, 0xfff, 0x20, 0x1, 0x7ff, 0x2000, 0x2a}, [{0x5, 0x2, 0x10001, 0x9ee1, 0x1, 0x1, 0xd8, 0x3}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x458)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_INIT(r1, &(0x7f0000006480)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xf439, 0x18270002, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42402, 0x54)

1m36.285668339s ago: executing program 3 (id=21):
syz_emit_ethernet(0x56, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d068994114ee6097436700008800fe88001e000000000000000000000001fe8000"/107], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_adjtime(0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa0}, 0xa)
close(r4)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121503, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xfff})
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000040)=r7)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@multicast2, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x40000, 0x1000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x350a, 0x4, 0x2, 0x2}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)

1m34.460689168s ago: executing program 3 (id=27):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x3af, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x201, 0x28f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8804, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
clock_settime(0x1ed5d7403, &(0x7f0000000000))
syz_usb_connect$uac3(0x3, 0xb3, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3d, 0xa}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x101, 0x1, 0x2, 0x50, 0x7ff, 0x7, 0x9, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x206, 0x5, 0x7, 0xb, 0x3, 0x6, 0x2, 0x1ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, <r10=>0x0}, &(0x7f0000000040)=0x5)
setresuid(0x0, 0x0, r10)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000180)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32, @ANYBLOB="d9b2de1a2f7d06000000000000f0955139afd5c85d409cd57977db7b7c40ade28a33a6a4636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f396d0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9000000000000000000ce8d0113cc8e073fc339e82352bcdc64195fe94d66d7", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES8, @ANYRESHEX], 0xff, 0x1508, &(0x7f0000000a00)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r12, 0x0, 0x0}, 0x10)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setns(r1, 0x24020000)
r13 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r14 = syz_pidfd_open(r13, 0x0)
setns(r14, 0x24020000)

1m30.440277343s ago: executing program 3 (id=43):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1000)
mremap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0xffffffffffffffff)

1m29.572248771s ago: executing program 3 (id=51):
mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c636f6e74657874b6"])
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
write$P9_RREADDIR(r2, &(0x7f0000000100)={0xe4, 0x29, 0x2, {0x0, [{{0x1, 0x0, 0x1}, 0x2, 0xf9, 0x7, './file0'}, {{0x80, 0x3, 0x4}, 0x7ba, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x0, 0x22, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x7, 0x9, 0x7, './file0'}, {{0x8, 0x0, 0x4}, 0x7ff, 0x7, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x55, 0x8, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0x7fffffff, 0xf3, 0x7, './file0'}]}}, 0xe4)

1m29.545476012s ago: executing program 32 (id=51):
mount$bpf(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x320c8d4, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030342c636f6e74657874b6"])
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
write$P9_RREADDIR(r2, &(0x7f0000000100)={0xe4, 0x29, 0x2, {0x0, [{{0x1, 0x0, 0x1}, 0x2, 0xf9, 0x7, './file0'}, {{0x80, 0x3, 0x4}, 0x7ba, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x0, 0x22, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x7, 0x9, 0x7, './file0'}, {{0x8, 0x0, 0x4}, 0x7ff, 0x7, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x55, 0x8, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0x7fffffff, 0xf3, 0x7, './file0'}]}}, 0xe4)

7.297145355s ago: executing program 4 (id=462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd22, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

7.296081415s ago: executing program 4 (id=463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0)

7.272140426s ago: executing program 4 (id=465):
syz_emit_ethernet(0xd81, &(0x7f0000000380)=ANY=[], 0x0)

7.174153217s ago: executing program 5 (id=467):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000002c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
write$P9_RVERSION(r0, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1d1f, 0x8, '9P2000.L'}, 0x15)

7.122915059s ago: executing program 4 (id=468):
syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x71, 0x10, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x2, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x7, 0x26, 0x10}, [@processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x0, 0x3, 0x3, 0x2, 0x3, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x4f7, 0x7, 0x2, 0x6, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x3, 0x9, {0x8, 0x25, 0x1, 0x81, 0x30, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0x45, 0x33, {0x8, 0x25, 0x1, 0x0, 0x36, 0xcb}}}}}}}}]}}, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r0, 0x5, 0x0, 0x2}, 0x50)
unshare(0x6020400)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/245, 0xf5}], 0x3, &(0x7f0000000440)=""/167, 0xa7}, 0x2)

6.185987299s ago: executing program 2 (id=480):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@nombcache}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x10000003, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2cf, 0x100, 0x1000000, 0x14000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x2, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x3c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,rodir,iocharset=maccaelic,shortname=lower,check=relaxed,shortname=winnt,rodir,shortname=lower,nonumtail=0,utf8=0,rodir,shortname=win95,iocharset=macturkish,uni_xlate=0,\x00'], 0x1, 0x354, &(0x7f0000000900)="$eJzs3U9om2UYAPAn+9KkG8z2IAwF4dOboGWbeNBTx+hgmItK8M9BDK5TaeqgweB2WFYv4lHwqCdvHvTgYWcRFPHmwasTZCoedLeBw1eSfG2+NGnXCdks/n6H8PR9nyfv+zYfzdev/d68uhxr5+bi/I0b12N+vhLV5dPLcbMSi5HFlisppV6MqwUAcFDdTCn+TEP7LKnMeEoAwIwN3v9fP1pqeffrvfKTd38AOPCK3/8P75Uzv1vHhZlMCQCYsYnr/4+MddfG/9RfLf1XAABwUD3/0svPnGpEPJfn8xHr73Wb3WY8Peo/dT7ejHasxvFYiFsRwxOF/kNl8HjmbGPleJ7nvfhlMZr9im4zYr3XbQ7PFE5lg/p6nIiFWCzqi7ONlFJ25ovGyol8ICKu9Abjx3ql25yLI8X4Px6J1TgZedw/UR9xtrFyMi+eoLm+Vd+L2Bxdt+jPfykW4vvX4kK041z0a7dOaxorl0/k+enUGKvvNuuDvKFdr4AAAAAAAAAAAAAAAAAAAAAAAMC/spRvW9ze/yaN9u9ZWprSP9gfZ1hf7A+0OdwfKNVTpPTHO483389ibH+gnfvzdJvVOHRvlw4AAAAAAAAAAAAAAAAAAAD/GZ2LtWi126sbnYuX1spBb6Nz8VBE9Fve+vazrw7HZM5tgmoxRqkrL5ourbVStpWcsrGcIsj6g7dTGrR8enV7xuWc+vYqpk6jvntXu3304Z8/GrU8lG0989+jnCymLzDbMY1ysH7fcEp38o3aDk7eJudaSmm38suvTFZFJaJ65y/c3kHqB99cf+OBJzrHnhy0fJmGHn1s4YVrH37y21qr3R85Bq9gbaNzK621iq+nH2y7B1np+KnEMKiUj4TqXuWb4y2t7IffX3zwg+/2N3oqt7w9JScbLufznV21YdCf5o6uw9PGmpty8M8gOPbxcuvq5Z9+3W9V6YeEjToAAAAAAAAAAAAAAAAAAOCuKN0rXihu9p3bq+qpZ2c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e0af/18KNida9hP81YvJrvrqRieidq+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA//9CsnMc")
lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280))
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4e)

5.472355184s ago: executing program 2 (id=485):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

5.472085764s ago: executing program 2 (id=486):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x8, &(0x7f00000002c0)="fdff000000000200", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x50)

5.470892114s ago: executing program 2 (id=487):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000303a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (fail_nth: 1)

5.016530893s ago: executing program 2 (id=490):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)

5.011417723s ago: executing program 1 (id=491):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x87, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e20, 0x4, 'ovf\x00', 0x8, 0x8000, 0xfffffffe}, {@loopback, 0x4e21, 0x1, 0x7ffff2d2, 0x7, 0x1}}, 0x44)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
socket(0x10, 0x80002, 0x4)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
fcntl$dupfd(r5, 0x406, r5)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

1.937938509s ago: executing program 5 (id=492):
ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000240)={0x0, 0xffff, 0x40, &(0x7f00000001c0)=@ublk_ctrl_dev_info_existing})

1.923958889s ago: executing program 4 (id=493):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000f0100000f000f00"}}}]}, 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
utime(0x0, 0x0)
munlockall()
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554320000000000000014569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341e70ba0d6fd562489dad595712a4051bb6cf826ab757193fe093b8b3353fbbb278d190000000061805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed02000000e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd66844d4d23cc738ee5b36c71d2c010b089251d5806000b1a84f4e26cb0331c6e7c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea64cc1fd1f06a980fcf3a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543cd8dfd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b13661516723b6b3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0b8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e16283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b5781bc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000e4965fcb6c0749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a9d5d8cf3e5a959e6bfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b3c0add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c0fcada974254bc5feda6cee9a0803b2a0b81f440202ed5f278e4cf06565370893e7481efdfbc49b118eb17ba0104000000000000b342fd22ba139b03b7fc83ac49f2dfc9152fc193adac8dc2a6ba72e6bdd423b3555b6e1bd4896b4c946a4500e0a42340700b93bca902e02f744ceb51534f1fb9fa87f850a6c6eed76f7376e2a7e72d3a64a80720ded8f0ce31b1de3561362e975ed32a7167d9e0ad3f2a77f7a10c1614a9ba938a98da2976cb1a0d049446e67073c9a1a38ecc881c693a524c5291f89677de9fe904c752e450eba71d2f32805501d0df5b4a41123233554bdc35b562d9f5a2a026a3b40fc7c9a8546fc8d8310a9876114ffd7dfb909656d54c31bbb655af54bbeeb0174e451ceb7b35e5bd1ac15792ff474abcde8353fe0de700b110a00305ff77c133181688a62a49cff6db4cb4a5a90d40d35e927d216435df804b8bd6033a7ce49f11491f752fefa99e9c54428b725486291490d311b13eb02d14a0ae56733141a8dc6d51e3510000000000000000000000000000002708cac64111287c9f384a63b97d0000000000000000000000000000000068772d994fe9c45e54b97e0b3510cf945907545ebb92ddcd49aa5440b9d0d72d084a213c788b745ecd5bdddfc184483f7ba09966bd8f5c6fae19f3cfe093ef4061d89276628c1464faa485363c732e976fd1c9e2bed0ca75040e8cc73b088c50d6f887b5bc28964421090c133b268d8e848fd384903571d27502f9d17fa0dafc9fe15a97787e809cd7f7cb9345ce157eb073ee18a58239a4e0b8e075eb420e44451ef8b94ad1362ff3469e1ce699645b675866bb270691223ac42fa7be4ad109ddaedc0d5e03132131fec77243adcf90e694c5a98400"/3594], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x3a, 0x9f, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xfffffffffffffe85, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x25)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xd81, &(0x7f0000000380)=ANY=[], 0x0)

1.86980968s ago: executing program 1 (id=495):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x220, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x401, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x4, r4, r5, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}, {{0x3, 0x3, 0x10001, 0x200, 0xfefffc5b, 0x8, {0x0, 0x5, 0xedd, 0xff, 0x0, 0x4, 0xfff, 0x0, 0xb, 0xa000, 0xf8e8, 0x0, r5, 0x8}}, {0x1, 0x1, 0x1, 0x20, '\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r6, &(0x7f0000000100)=""/134, 0x86)

1.824943191s ago: executing program 5 (id=496):
rmdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
unlink(&(0x7f0000000140)='./cgroup\x00')
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5})

1.713488533s ago: executing program 0 (id=498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800cde163ee00000000000e00000000b7080000000000007b8af8ff00001400b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70201258163000800000018230000", @ANYRESDEC=r0, @ANYBLOB="000000000000006b090500000849c8025a000000a50000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r0, 0x0, 0x21c0, 0x0, 0x3, 0x0, &(0x7f0000000340)=0xfffffffa})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.712516253s ago: executing program 5 (id=499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff, 0x0, 0x6859}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x4008894)

1.662785585s ago: executing program 5 (id=500):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff3, 0xffff}, {0x8, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)

1.540594857s ago: executing program 0 (id=501):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x24)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, &(0x7f0000002080), r2, 0x0, 0x4, 0xa)
sched_rr_get_interval(r0, &(0x7f0000000000))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
r4 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdefb}, 0x94)
getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket$inet(0x2, 0x1, 0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.517463708s ago: executing program 0 (id=502):
rmdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
unlink(&(0x7f0000000140)='./cgroup\x00')
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5})

1.516424277s ago: executing program 4 (id=503):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000002c0)="$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")
r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
write$P9_RVERSION(r0, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1d1f, 0x8, '9P2000.L'}, 0x15)

277.676144ms ago: executing program 2 (id=504):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000f0100000f000f00"}}}]}, 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
munlockall()

231.159125ms ago: executing program 5 (id=505):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000f0100000f000f00"}}}]}, 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002})
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
munlockall()

144.737817ms ago: executing program 0 (id=506):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000200)=[@acquire, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})

74.873428ms ago: executing program 0 (id=507):
rmdir(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
unlink(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, 0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x8000000, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5})

74.641908ms ago: executing program 1 (id=508):
rmdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
unlink(&(0x7f0000000140)='./cgroup\x00')
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5})

74.263778ms ago: executing program 1 (id=509):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

59.875878ms ago: executing program 1 (id=510):
rmdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
unlink(&(0x7f0000000140)='./cgroup\x00')
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fc})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x5})

36.309419ms ago: executing program 0 (id=511):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = eventfd2(0x101800, 0x80001) (async)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r3=>0x0) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
timer_getoverrun(r3) (async)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r11, 0x0) (async)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xdd5, r2, &(0x7f0000000000)="16961892a45a68e5f2bb572de3dfad75441f958e353532f2405663e41fc0ff7dc44c11443930417651e556c0e5581af85868ca67057452b50a78a3df5d99ff104436e9947ee4b9cf36d6430edef448b6f144d0465dfd4a061a07d45a03adb038e98c5a6cda80a7662c6eb9175018381727f856d85ea263935e4a6f7f608776e87d6483917209f9ee426564325546ba9430dbbdd13af511188ff02b22def881991edf958806d3c92a027157ca5864792ff6afed48d37b1dd88bc62e0b83ce37c7a437aa13d1fc636f50600427f5c67792065294755521e9a34eff67ce0229a112938fda0719971f4edd", 0xe9, 0x1, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r11, &(0x7f0000000140)="869e46ab805bf0982d81bf95", 0xc, 0x6, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000000340)="49bebfe8c7fa6b810707da93d8560cee29910e8230d355d7d9434a527f8313654d7321410f60ea4ed75cf3c76f4b4298abf032c47ea49503029704f3710b746070ac", 0x42, 0x2331, 0x0, 0x1, r2}])

0s ago: executing program 1 (id=512):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x24)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, &(0x7f0000002080), r2, 0x0, 0x4, 0xa)
sched_rr_get_interval(r0, &(0x7f0000000000))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
fsopen(&(0x7f0000000000)='omfs\x00', 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdefb}, 0x94)
getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socket$inet(0x2, 0x1, 0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)

0s ago: executing program 0 (id=514):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000003900), 0x34aa945a513d639, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x242, 0x145)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@deltaction={0x14, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40000)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)

kernel console output (not intermixed with test programs):

 T976] Call Trace:
[   61.530215][  T976]  <TASK>
[   61.533162][  T976]  __dump_stack+0x21/0x24
[   61.537521][  T976]  dump_stack_lvl+0x110/0x170
[   61.542216][  T976]  ? __cfi_dump_stack_lvl+0x8/0x8
[   61.547261][  T976]  dump_stack+0x15/0x24
[   61.551440][  T976]  should_fail_ex+0x3bf/0x510
[   61.556162][  T976]  should_fail+0xb/0x10
[   61.560343][  T976]  should_fail_usercopy+0x1a/0x20
[   61.565385][  T976]  _copy_to_user+0x1e/0x90
[   61.569831][  T976]  simple_read_from_buffer+0xe9/0x160
[   61.575233][  T976]  proc_fail_nth_read+0x1a6/0x220
[   61.580312][  T976]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   61.585885][  T976]  ? security_file_permission+0x94/0xb0
[   61.591478][  T976]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   61.597074][  T976]  vfs_read+0x286/0x930
[   61.601252][  T976]  ? __cfi_vfs_read+0x10/0x10
[   61.605966][  T976]  ? __kasan_check_write+0x14/0x20
[   61.611111][  T976]  ? mutex_lock+0x93/0x1b0
[   61.615622][  T976]  ? __cfi_mutex_lock+0x10/0x10
[   61.620561][  T976]  ? __fdget_pos+0x2cd/0x380
[   61.625199][  T976]  ? ksys_read+0x70/0x260
[   61.629563][  T976]  ksys_read+0x14a/0x260
[   61.633838][  T976]  ? __cfi_ksys_read+0x10/0x10
[   61.638630][  T976]  ? fput+0x154/0x1a0
[   61.642641][  T976]  ? debug_smp_processor_id+0x17/0x20
[   61.648036][  T976]  __x64_sys_read+0x7b/0x90
[   61.652566][  T976]  x64_sys_call+0x2f/0x9a0
[   61.657007][  T976]  do_syscall_64+0x4c/0xa0
[   61.661471][  T976]  ? clear_bhb_loop+0x30/0x80
[   61.666169][  T976]  ? clear_bhb_loop+0x30/0x80
[   61.670867][  T976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   61.676791][  T976] RIP: 0033:0x7f302df5e68e
[   61.681229][  T976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   61.700856][  T976] RSP: 002b:00007f302eeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   61.709294][  T976] RAX: ffffffffffffffda RBX: 00007f302eeee6c0 RCX: 00007f302df5e68e
[   61.717288][  T976] RDX: 000000000000000f RSI: 00007f302eeee0a0 RDI: 0000000000000006
[   61.725310][  T976] RBP: 00007f302eeee090 R08: 0000000000000000 R09: 0000000000000000
[   61.733303][  T976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.741289][  T976] R13: 00007f302e226038 R14: 00007f302e225fa0 R15: 00007ffddc371528
[   61.749279][  T976]  </TASK>
[   70.290351][  T290] EXT4-fs (loop4): unmounting filesystem.
[   70.436282][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   70.436298][   T28] audit: type=1400 audit(70.449:377): avc:  denied  { ioctl } for  pid=998 comm="syz.1.187" path="socket:[19608]" dev="sockfs" ino=19608 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.474921][   T28] audit: type=1400 audit(70.449:378): avc:  denied  { bind } for  pid=998 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.496885][ T1006] FAULT_INJECTION: forcing a failure.
[   70.496885][ T1006] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   70.510567][ T1006] CPU: 1 PID: 1006 Comm: syz.5.191 Not tainted syzkaller #0
[   70.517869][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   70.527939][ T1006] Call Trace:
[   70.531222][ T1006]  <TASK>
[   70.534146][ T1006]  __dump_stack+0x21/0x24
[   70.538476][ T1006]  dump_stack_lvl+0x110/0x170
[   70.543154][ T1006]  ? __cfi_dump_stack_lvl+0x8/0x8
[   70.548191][ T1006]  dump_stack+0x15/0x24
[   70.552351][ T1006]  should_fail_ex+0x3bf/0x510
[   70.557042][ T1006]  should_fail_alloc_page+0x61/0x90
[   70.562263][ T1006]  prepare_alloc_pages+0x131/0x570
[   70.567377][ T1006]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   70.572579][ T1006]  __alloc_pages+0x15b/0x610
[   70.577197][ T1006]  ? __cfi___alloc_pages+0x10/0x10
[   70.582337][ T1006]  ? __this_cpu_preempt_check+0x13/0x20
[   70.587882][ T1006]  ? xfd_validate_state+0x70/0x150
[   70.592997][ T1006]  __folio_alloc+0x12/0x40
[   70.597436][ T1006]  handle_mm_fault+0x1989/0x26b0
[   70.602372][ T1006]  ? __cfi_handle_mm_fault+0x10/0x10
[   70.607653][ T1006]  __get_user_pages+0x34b/0xdb0
[   70.612528][ T1006]  ? populate_vma_page_range+0x120/0x120
[   70.618195][ T1006]  ? internal_get_user_pages_fast+0x46b/0x800
[   70.624287][ T1006]  get_user_pages_unlocked+0x236/0x700
[   70.629767][ T1006]  ? __cfi_get_user_pages_unlocked+0x10/0x10
[   70.635782][ T1006]  hva_to_pfn+0x232/0xa50
[   70.640107][ T1006]  ? __cfi_hva_to_pfn+0x10/0x10
[   70.644955][ T1006]  ? vmx_get_mt_mask+0xad/0x110
[   70.649808][ T1006]  ? tdp_mmu_set_spte_atomic+0x200/0x580
[   70.655438][ T1006]  ? kvm_tdp_mmu_map+0xc0d/0x10d0
[   70.660458][ T1006]  __gfn_to_pfn_memslot+0x2e3/0x370
[   70.665648][ T1006]  kvm_faultin_pfn+0x363/0xb80
[   70.670411][ T1006]  ? folio_mark_accessed+0x194/0x4d0
[   70.675697][ T1006]  ? __mmu_unsync_walk+0x4a0/0x4a0
[   70.680815][ T1006]  ? __kvm_mmu_topup_memory_cache+0x27d/0x490
[   70.686917][ T1006]  direct_page_fault+0x13b9/0x1c60
[   70.692048][ T1006]  ? is_bpf_text_address+0x177/0x190
[   70.697352][ T1006]  ? kernel_text_address+0xa0/0xd0
[   70.702456][ T1006]  ? kvm_tdp_page_fault+0x1f0/0x1f0
[   70.707651][ T1006]  ? __kernel_text_address+0xd/0x30
[   70.712862][ T1006]  ? unwind_get_return_address+0x4d/0x90
[   70.718487][ T1006]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   70.724641][ T1006]  kvm_tdp_page_fault+0x1b7/0x1f0
[   70.729658][ T1006]  kvm_mmu_page_fault+0x2e6/0x910
[   70.734684][ T1006]  ? __cfi_kvm_mmu_page_fault+0x10/0x10
[   70.740230][ T1006]  ? __kasan_check_write+0x14/0x20
[   70.745341][ T1006]  handle_ept_violation+0x21d/0x4f0
[   70.750554][ T1006]  ? vmx_vcpu_run+0x1289/0x2450
[   70.755399][ T1006]  ? __cfi_handle_ept_violation+0x10/0x10
[   70.761122][ T1006]  vmx_handle_exit+0xc61/0x1b10
[   70.765964][ T1006]  ? kvm_deliver_exception_payload+0xcc/0x1e0
[   70.772038][ T1006]  ? vmx_handle_exit_irqoff+0x246/0x6a0
[   70.777619][ T1006]  vcpu_enter_guest+0x30d6/0x7050
[   70.782667][ T1006]  ? pvclock_gtod_update_fn+0x270/0x270
[   70.788226][ T1006]  ? is_bpf_text_address+0x177/0x190
[   70.793517][ T1006]  ? kernel_text_address+0xa0/0xd0
[   70.798685][ T1006]  ? __kernel_text_address+0xd/0x30
[   70.803919][ T1006]  ? unwind_get_return_address+0x4d/0x90
[   70.809572][ T1006]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   70.815727][ T1006]  ? arch_stack_walk+0xfc/0x150
[   70.820606][ T1006]  ? stack_trace_save+0xa6/0xf0
[   70.825489][ T1006]  ? vmx_vcpu_pi_load+0x14c/0x840
[   70.830523][ T1006]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[   70.835898][ T1006]  ? _parse_integer_limit+0x18e/0x1d0
[   70.841274][ T1006]  ? __asan_set_shadow_00+0xe/0x10
[   70.846426][ T1006]  ? do_vfs_ioctl+0x1b68/0x1cd0
[   70.851292][ T1006]  ? vmx_vcpu_load_vmcs+0x479/0x730
[   70.856502][ T1006]  ? __this_cpu_preempt_check+0x13/0x20
[   70.862073][ T1006]  ? xfd_validate_state+0x70/0x150
[   70.867190][ T1006]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[   70.872493][ T1006]  ? __local_bh_enable_ip+0x58/0x80
[   70.877699][ T1006]  ? fpu_swap_kvm_fpstate+0x4ef/0x5d0
[   70.883147][ T1006]  kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60
[   70.888704][ T1006]  kvm_vcpu_ioctl+0x8ed/0xc00
[   70.893393][ T1006]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.898594][ T1006]  ? selinux_file_ioctl+0x3ad/0x4c0
[   70.903807][ T1006]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   70.909354][ T1006]  ? mutex_unlock+0x8f/0x230
[   70.913952][ T1006]  ? __cfi_mutex_unlock+0x10/0x10
[   70.918994][ T1006]  ? __fget_files+0x2d1/0x330
[   70.923714][ T1006]  ? security_file_ioctl+0x95/0xc0
[   70.928873][ T1006]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.934113][ T1006]  __se_sys_ioctl+0x12f/0x1b0
[   70.938845][ T1006]  __x64_sys_ioctl+0x7b/0x90
[   70.943486][ T1006]  x64_sys_call+0x58b/0x9a0
[   70.947992][ T1006]  do_syscall_64+0x4c/0xa0
[   70.952411][ T1006]  ? clear_bhb_loop+0x30/0x80
[   70.957090][ T1006]  ? clear_bhb_loop+0x30/0x80
[   70.961765][ T1006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.967670][ T1006] RIP: 0033:0x7ff75459de59
[   70.972085][ T1006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.991725][ T1006] RSP: 002b:00007ff75542a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.000192][ T1006] RAX: ffffffffffffffda RBX: 00007ff754825fa0 RCX: 00007ff75459de59
[   71.008176][ T1006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   71.016149][ T1006] RBP: 00007ff75542a090 R08: 0000000000000000 R09: 0000000000000000
[   71.024122][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.032136][ T1006] R13: 00007ff754826038 R14: 00007ff754825fa0 R15: 00007ffdfa251818
[   71.040119][ T1006]  </TASK>
[   71.055950][   T28] audit: type=1400 audit(71.069:379): avc:  denied  { getopt } for  pid=1008 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.221778][ T1026] loop5: detected capacity change from 0 to 256
[   71.227135][  T358] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.447086][  T358] usb 3-1: Using ep0 maxpacket: 8
[   71.454488][  T358] usb 3-1: unable to get BOS descriptor or descriptor too short
[   71.462366][  T405] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   71.548701][  T358] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   71.676221][  T358] usb 3-1: config 0 has no interface number 0
[   71.685859][  T405] usb 5-1: unable to get BOS descriptor or descriptor too short
[   71.729454][  T405] usb 5-1: config index 0 descriptor too short (expected 198, got 134)
[   71.794219][  T358] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   71.857155][  T405] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.310302][  T358] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   72.324952][  T405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   72.336084][  T358] usb 3-1: config 0 interface 88 has no altsetting 0
[   72.347035][  T405] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   72.353482][   T28] audit: type=1400 audit(72.369:380): avc:  denied  { ioctl } for  pid=1033 comm="syz.1.198" path="socket:[19748]" dev="sockfs" ino=19748 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   72.361601][  T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.388257][  T405] usb 5-1: Product: syz
[   72.392532][  T405] usb 5-1: Manufacturer: syz
[   72.397344][  T358] usb 3-1: string descriptor 0 read error: -22
[   72.403552][  T358] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   72.416992][  T405] usb 5-1: SerialNumber: syz
[   72.423943][  T358] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   72.462530][  T358] usb 3-1: config 0 descriptor??
[   72.472450][  T358] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4
[   72.485095][   T28] audit: type=1400 audit(72.499:381): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=739 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.513297][   T28] audit: type=1400 audit(72.499:382): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=739 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.552624][ T1040] loop0: detected capacity change from 0 to 512
[   72.559803][ T1040] FAT-fs (loop0): Unrecognized mount option "shortn" or missing value
[   72.580355][  T322] udevd[322]: Error opening device "/dev/input/event3": Input/output error
[   72.589359][  T322] udevd[322]: Unable to EVIOCGABS device "/dev/input/event3"
[   72.596786][  T322] udevd[322]: Unable to EVIOCGABS device "/dev/input/event3"
[   72.636268][ T1042] xt_hashlimit: size too large, truncated to 1048576
[   72.671841][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.690272][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.701551][  T405] usb 5-1: 0:1 : does not exist
[   72.706821][  T405] usb 5-1: unit 0 not found!
[   72.734439][  T405] usb 5-1: USB disconnect, device number 3
[   72.740493][  T571] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   72.748991][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.764014][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.551294][  T571] usb 6-1: unable to get BOS descriptor or descriptor too short
[   74.817100][  T443] usb 3-1: USB disconnect, device number 2
[   74.817522][ T1048] syz.0.200 (1048) used greatest stack depth: 19464 bytes left
[   74.836946][  T571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.861903][  T571] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   74.883703][  T571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.923913][  T571] usb 6-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   75.062527][   T28] audit: type=1326 audit(75.079:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.0.205" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65d9de59 code=0x7ffc0000
[   75.090148][   T28] audit: type=1326 audit(75.109:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.0.205" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65d9de59 code=0x7ffc0000
[   75.184100][ T1066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'.
[   75.708462][   T28] audit: type=1326 audit(75.539:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.0.205" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e65d9de59 code=0x7ffc0000
[   76.304427][   T28] audit: type=1326 audit(75.549:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.0.205" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65d9de59 code=0x7ffc0000
[   76.310786][  T571] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[   76.341741][  T571] usb 6-1: USB disconnect, device number 5
[   76.355240][   T28] audit: type=1326 audit(75.549:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1059 comm="syz.0.205" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65d9de59 code=0x7ffc0000
[   76.646979][  T405] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   76.838542][  T405] usb 3-1: unable to get BOS descriptor or descriptor too short
[   76.847441][  T405] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.863773][  T405] usb 3-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   76.873360][  T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.881578][  T405] usb 3-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   76.979196][ T1082] FAULT_INJECTION: forcing a failure.
[   76.979196][ T1082] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.993321][ T1082] CPU: 1 PID: 1082 Comm: syz.5.210 Not tainted syzkaller #0
[   77.000679][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   77.010759][ T1082] Call Trace:
[   77.014073][ T1082]  <TASK>
[   77.017026][ T1082]  __dump_stack+0x21/0x24
[   77.021425][ T1082]  dump_stack_lvl+0x110/0x170
[   77.026139][ T1082]  ? __cfi_dump_stack_lvl+0x8/0x8
[   77.031200][ T1082]  ? __kasan_check_read+0x11/0x20
[   77.036262][ T1082]  ? vmx_read_guest_seg_ar+0x164/0x380
[   77.041767][ T1082]  dump_stack+0x15/0x24
[   77.045954][ T1082]  should_fail_ex+0x3bf/0x510
[   77.050664][ T1082]  should_fail+0xb/0x10
[   77.054857][ T1082]  should_fail_usercopy+0x1a/0x20
[   77.059911][ T1082]  __kvm_read_guest_page+0x14c/0x1d0
[   77.065233][ T1082]  kvm_vcpu_read_guest_page+0x31a/0x3f0
[   77.070830][ T1082]  kvm_fetch_guest_virt+0x13f/0x180
[   77.076067][ T1082]  ? __cfi_kvm_fetch_guest_virt+0x10/0x10
[   77.081818][ T1082]  __do_insn_fetch_bytes+0x2c2/0x6a0
[   77.087150][ T1082]  ? x86_decode_insn+0x4c10/0x4c10
[   77.092302][ T1082]  ? kvm_tdp_mmu_map+0xc0d/0x10d0
[   77.097407][ T1082]  x86_decode_insn+0x2f8/0x4c10
[   77.102299][ T1082]  ? __kasan_check_write+0x14/0x20
[   77.107458][ T1082]  ? __cfi_x86_decode_insn+0x10/0x10
[   77.112785][ T1082]  x86_decode_emulated_instruction+0x62/0x180
[   77.118894][ T1082]  x86_emulate_instruction+0x204/0x1cd0
[   77.124473][ T1082]  ? __kernel_text_address+0xd/0x30
[   77.129700][ T1082]  ? unwind_get_return_address+0x4d/0x90
[   77.135372][ T1082]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   77.141579][ T1082]  handle_ud+0x4c8/0x540
[   77.145868][ T1082]  ? __cfi_handle_ud+0x10/0x10
[   77.150680][ T1082]  ? __cfi_rcu_note_context_switch+0x10/0x10
[   77.156714][ T1082]  ? __kasan_check_read+0x11/0x20
[   77.161782][ T1082]  handle_exception_nmi+0x124/0xdf0
[   77.167015][ T1082]  ? __cfi_handle_exception_nmi+0x10/0x10
[   77.172763][ T1082]  vmx_handle_exit+0xc61/0x1b10
[   77.177648][ T1082]  ? irqentry_exit+0x37/0x40
[   77.182267][ T1082]  ? sysvec_apic_timer_interrupt+0x64/0xc0
[   77.188106][ T1082]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   77.194321][ T1082]  vcpu_enter_guest+0x30d6/0x7050
[   77.199396][ T1082]  ? pvclock_gtod_update_fn+0x270/0x270
[   77.204980][ T1082]  ? emulator_get_segment+0x2c5/0x5d0
[   77.210382][ T1082]  ? __kasan_check_read+0x11/0x20
[   77.215443][ T1082]  ? __cfi_emulator_get_segment+0x10/0x10
[   77.221203][ T1082]  ? vmx_get_segment_base+0x8e/0xd0
[   77.226427][ T1082]  ? 0xffffffffa0000948
[   77.230609][ T1082]  ? linearize+0x475/0x8f0
[   77.235074][ T1082]  ? read_prepare+0x89/0x200
[   77.239694][ T1082]  ? emulator_read_write+0xa9/0x570
[   77.244927][ T1082]  ? push+0x6c0/0x6c0
[   77.248955][ T1082]  ? segmented_read+0x2d9/0x400
[   77.253846][ T1082]  ? memcpy+0x56/0x70
[   77.257851][ T1082]  ? segmented_read+0x2d9/0x400
[   77.262739][ T1082]  ? __kasan_check_write+0x14/0x20
[   77.267888][ T1082]  ? emulator_write_gpr+0xa8/0xd0
[   77.272945][ T1082]  ? __cfi_emulator_write_gpr+0x10/0x10
[   77.278519][ T1082]  ? x86_emulate_insn+0x43c/0x3760
[   77.283676][ T1082]  ? __kasan_check_write+0x14/0x20
[   77.288804][ T1082]  ? vmx_set_rflags+0x2a5/0x470
[   77.293819][ T1082]  ? x86_emulate_instruction+0x1639/0x1cd0
[   77.299684][ T1082]  ? complete_emulated_mmio+0x511/0x7a0
[   77.305272][ T1082]  kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60
[   77.310862][ T1082]  kvm_vcpu_ioctl+0x8ed/0xc00
[   77.315578][ T1082]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   77.320819][ T1082]  ? selinux_file_ioctl+0x3ad/0x4c0
[   77.326049][ T1082]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   77.331630][ T1082]  ? mutex_unlock+0x8f/0x230
[   77.336254][ T1082]  ? __cfi_mutex_unlock+0x10/0x10
[   77.341315][ T1082]  ? __fget_files+0x2d1/0x330
[   77.346040][ T1082]  ? security_file_ioctl+0x95/0xc0
[   77.351197][ T1082]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   77.356435][ T1082]  __se_sys_ioctl+0x12f/0x1b0
[   77.361145][ T1082]  __x64_sys_ioctl+0x7b/0x90
[   77.365773][ T1082]  x64_sys_call+0x58b/0x9a0
[   77.370330][ T1082]  do_syscall_64+0x4c/0xa0
[   77.374787][ T1082]  ? clear_bhb_loop+0x30/0x80
[   77.379490][ T1082]  ? clear_bhb_loop+0x30/0x80
[   77.384208][ T1082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   77.390136][ T1082] RIP: 0033:0x7ff75459de59
[   77.394583][ T1082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.414222][ T1082] RSP: 002b:00007ff75542a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   77.422670][ T1082] RAX: ffffffffffffffda RBX: 00007ff754825fa0 RCX: 00007ff75459de59
[   77.430722][ T1082] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   77.438986][ T1082] RBP: 00007ff75542a090 R08: 0000000000000000 R09: 0000000000000000
[   77.446981][ T1082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.454972][ T1082] R13: 00007ff754826038 R14: 00007ff754825fa0 R15: 00007ffdfa251818
[   77.463084][ T1082]  </TASK>
[   77.489480][  T405] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[   77.503786][  T405] usb 3-1: USB disconnect, device number 3
[   77.526687][  T308] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.534055][ T1090] IPv6: NLM_F_REPLACE set, but no existing node found!
[   77.684792][ T1096] fuse: Unknown parameter '0x0000000000000006'
[   77.919297][   T28] audit: type=1400 audit(77.939:388): avc:  denied  { write } for  pid=1093 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   77.944599][ T1094] binder: 1093:1094 ioctl c0306201 0 returned -14
[   77.994527][ T1101] device bridge1 entered promiscuous mode
[   78.124103][  T308] Bluetooth: hci1: Frame reassembly failed (-84)
[   78.126741][ T1106] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.417085][  T405] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   78.627020][  T405] usb 5-1: Using ep0 maxpacket: 32
[   78.634593][  T405] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[   78.681748][  T405] usb 5-1: config 0 has no interface number 0
[   78.688313][  T405] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   78.700700][  T405] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   78.709790][  T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.717850][  T405] usb 5-1: Product: syz
[   78.722041][  T405] usb 5-1: Manufacturer: syz
[   78.726657][  T405] usb 5-1: SerialNumber: syz
[   78.731952][  T405] usb 5-1: config 0 descriptor??
[   78.737253][ T1108] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   78.946065][ T1108] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   79.133676][   T28] audit: type=1400 audit(79.149:389): avc:  denied  { bind } for  pid=1122 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.172028][   T28] audit: type=1400 audit(79.189:390): avc:  denied  { connect } for  pid=1124 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.191100][   T28] audit: type=1400 audit(79.189:391): avc:  denied  { write } for  pid=1124 comm="syz.2.224" laddr=fe80::13 lport=1 faddr=fe80::aa fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   79.354435][ T1108] futex_wake_op: syz.4.219 tries to shift op by -1; fix this program
[   79.516968][    T6] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   79.567077][  T678] Bluetooth: hci0: command 0x1003 tx timeout
[   79.567104][  T859] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   79.708194][    T6] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.721181][    T6] usb 3-1: config 0 interface 0 has no altsetting 0
[   79.728027][    T6] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[   79.737275][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.746247][    T6] usb 3-1: config 0 descriptor??
[   79.806969][  T291] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   79.988085][  T291] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   79.999355][  T291] usb 6-1: config 0 interface 0 has no altsetting 0
[   80.006006][  T291] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   80.015096][  T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.024247][  T291] usb 6-1: config 0 descriptor??
[   80.029607][ T1132] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[   80.126974][  T859] Bluetooth: hci1: command 0x1003 tx timeout
[   80.133691][  T679] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   80.154701][    T6] waltop 0003:172F:0037.0003: unknown main item tag 0x2
[   80.162195][    T6] waltop 0003:172F:0037.0003: unexpected long global item
[   80.169854][    T6] waltop: probe of 0003:172F:0037.0003 failed with error -22
[   80.404815][  T292] usb 3-1: USB disconnect, device number 4
[   80.460644][  T405] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   80.495830][  T405] asix: probe of 5-1:0.188 failed with error -71
[   80.512151][  T405] usb 5-1: USB disconnect, device number 4
[   81.290628][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'.
[   81.322394][ T1142] loop2: detected capacity change from 0 to 128
[   81.346259][ T1142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   81.354688][  T291] hid-led 0003:1D34:000A.0004: unknown main item tag 0x1
[   81.361904][  T291] hid-led 0003:1D34:000A.0004: ignoring exceeding usage max
[   81.376337][  T291] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.c1 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0
[   81.438148][ T1142] tipc: Started in network mode
[   81.443173][ T1142] tipc: Node identity 522d7a0bd927, cluster identity 4711
[   81.454198][  T291] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized
[   81.463661][ T1142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.479642][ T1141] tipc: Disabling bearer <eth:syzkaller0>
[   81.522203][  T288] EXT4-fs (loop2): unmounting filesystem.
[   81.595500][ T1158] loop2: detected capacity change from 0 to 1024
[   81.610672][  T291] usb 6-1: USB disconnect, device number 6
[   81.617333][ T1158] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.234: lblock 2 mapped to illegal pblock 2 (length 1)
[   81.631479][ T1158] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   81.639804][ T1158] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.234: lblock 0 mapped to illegal pblock 48 (length 1)
[   81.654496][ T1158] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   81.663482][ T1158] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.234: Failed to acquire dquot type 0
[   81.677666][ T1158] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   81.687957][ T1158] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.234: mark_inode_dirty error
[   81.699356][ T1158] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   81.709857][ T1158] EXT4-fs (loop2): 1 orphan inode deleted
[   81.715586][ T1158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   81.727019][ T1115] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   81.736868][    T8] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.751564][    T8] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   81.760207][    T8] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0
[   81.779965][ T1158] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz.2.234: Invalid inode table block 1 in block_group 0
[   81.779986][   T28] audit: type=1400 audit(81.799:392): avc:  denied  { setattr } for  pid=1157 comm="syz.2.234" path="/42/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.793260][ T1158] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   81.832221][  T288] EXT4-fs (loop2): unmounting filesystem.
[   81.838219][  T288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0
[   81.851219][  T288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem
[   81.860766][  T288] EXT4-fs error (device loop2): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error
[   81.925357][ T1161] FAULT_INJECTION: forcing a failure.
[   81.925357][ T1161] name failslab, interval 1, probability 0, space 0, times 0
[   81.938208][ T1161] CPU: 1 PID: 1161 Comm: syz.2.235 Not tainted syzkaller #0
[   81.945541][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   81.955596][ T1161] Call Trace:
[   81.958872][ T1161]  <TASK>
[   81.961800][ T1161]  __dump_stack+0x21/0x24
[   81.966142][ T1161]  dump_stack_lvl+0x110/0x170
[   81.970860][ T1161]  ? __cfi_dump_stack_lvl+0x8/0x8
[   81.975921][ T1161]  ? is_bpf_text_address+0x177/0x190
[   81.981270][ T1161]  dump_stack+0x15/0x24
[   81.985459][ T1161]  should_fail_ex+0x3bf/0x510
[   81.990147][ T1161]  __should_failslab+0xac/0xf0
[   81.994927][ T1161]  should_failslab+0x9/0x20
[   81.999455][ T1161]  kmem_cache_alloc_node+0x42/0x330
[   82.004664][ T1161]  ? __alloc_skb+0xe8/0x4a0
[   82.009160][ T1161]  __alloc_skb+0xe8/0x4a0
[   82.013488][ T1161]  tcp_stream_alloc_skb+0x47/0x360
[   82.018608][ T1161]  tcp_sendmsg_locked+0xcb7/0x39f0
[   82.023722][ T1161]  ? _parse_integer+0x2a/0x40
[   82.028393][ T1161]  ? _raw_spin_lock_bh+0x94/0xf0
[   82.033361][ T1161]  ? __cfi_tcp_sendmsg_locked+0x10/0x10
[   82.038907][ T1161]  tcp_sendmsg+0x2f/0x50
[   82.043152][ T1161]  inet_sendmsg+0xb6/0xd0
[   82.047505][ T1161]  __sys_sendto+0x4ac/0x660
[   82.052021][ T1161]  ? __cfi___sys_sendto+0x10/0x10
[   82.057074][ T1161]  ? ksys_write+0x1fa/0x260
[   82.061574][ T1161]  ? __cfi_ksys_write+0x10/0x10
[   82.066430][ T1161]  __x64_sys_sendto+0xe5/0x100
[   82.071202][ T1161]  x64_sys_call+0x83/0x9a0
[   82.075625][ T1161]  do_syscall_64+0x4c/0xa0
[   82.080054][ T1161]  ? clear_bhb_loop+0x30/0x80
[   82.084727][ T1161]  ? clear_bhb_loop+0x30/0x80
[   82.089399][ T1161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.095329][ T1161] RIP: 0033:0x7f4d9499de59
[   82.099779][ T1161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.119409][ T1161] RSP: 002b:00007f4d933f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   82.127827][ T1161] RAX: ffffffffffffffda RBX: 00007f4d94c25fa0 RCX: 00007f4d9499de59
[   82.135798][ T1161] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000009
[   82.143789][ T1161] RBP: 00007f4d933f7090 R08: 0000000000000000 R09: 0000000000000000
[   82.151759][ T1161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.159745][ T1161] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[   82.167754][ T1161]  </TASK>
[   82.171432][ T1115] usb 5-1: Using ep0 maxpacket: 16
[   82.180127][ T1115] usb 5-1: too many configurations: 112, using maximum allowed: 8
[   82.195197][ T1115] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   82.204335][ T1115] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[   82.212736][ T1115] usb 5-1: Product: syz
[   82.217030][ T1115] usb 5-1: Manufacturer: syz
[   82.222489][ T1115] r8152-cfgselector 5-1: config 0 descriptor??
[   82.430336][ T1151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.440884][ T1151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.443206][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.457571][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.606984][  T291] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   82.788441][  T291] usb 1-1: unable to get BOS descriptor or descriptor too short
[   82.797119][  T291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.812768][  T291] usb 1-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   82.822176][  T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.830410][  T291] usb 1-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   82.893517][ T1175] loop4: detected capacity change from 0 to 512
[   82.909152][ T1151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.920905][ T1179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.929929][ T1151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.938597][ T1179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.948254][   T28] audit: type=1400 audit(82.919:393): avc:  denied  { wake_alarm } for  pid=1147 comm="syz.4.231" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   82.970874][   T28] audit: type=1400 audit(82.919:394): avc:  denied  { ioctl } for  pid=1147 comm="syz.4.231" path="/dev/input/event1" dev="devtmpfs" ino=261 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   83.006166][ T1175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   83.027225][ T1115] r8152-cfgselector 5-1: Unknown version 0x0000
[   83.033695][ T1115] r8152-cfgselector 5-1: bad CDC descriptors
[   83.047663][ T1115] r8152-cfgselector 5-1: Unknown version 0x0000
[   83.054565][ T1115] r8152-cfgselector 5-1: USB disconnect, device number 5
[   83.152488][ T1187] FAULT_INJECTION: forcing a failure.
[   83.152488][ T1187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.165648][ T1187] CPU: 0 PID: 1187 Comm: syz.2.242 Not tainted syzkaller #0
[   83.172950][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   83.183035][ T1187] Call Trace:
[   83.186331][ T1187]  <TASK>
[   83.189268][ T1187]  __dump_stack+0x21/0x24
[   83.193618][ T1187]  dump_stack_lvl+0x110/0x170
[   83.198324][ T1187]  ? __cfi_dump_stack_lvl+0x8/0x8
[   83.203370][ T1187]  dump_stack+0x15/0x24
[   83.207541][ T1187]  should_fail_ex+0x3bf/0x510
[   83.212239][ T1187]  should_fail+0xb/0x10
[   83.216409][ T1187]  should_fail_usercopy+0x1a/0x20
[   83.221484][ T1187]  _copy_from_user+0x1e/0xc0
[   83.226105][ T1187]  br_ioctl_stub+0x469/0xb70
[   83.230716][ T1187]  ? __cfi_br_ioctl_stub+0x10/0x10
[   83.235849][ T1187]  ? __schedule+0xbea/0x14b0
[   83.240469][ T1187]  ? release_firmware_map_entry+0x190/0x190
[   83.246386][ T1187]  ? __kasan_check_write+0x14/0x20
[   83.251510][ T1187]  ? mutex_lock+0x93/0x1b0
[   83.255956][ T1187]  ? __cfi_preempt_schedule_irq+0x10/0x10
[   83.261696][ T1187]  ? selinux_file_ioctl+0x3ad/0x4c0
[   83.266921][ T1187]  ? _raw_spin_unlock+0x4c/0x70
[   83.271797][ T1187]  ? __cfi_push_rt_tasks+0x10/0x10
[   83.276931][ T1187]  ? __cfi_br_ioctl_stub+0x10/0x10
[   83.282051][ T1187]  sock_ioctl+0x43e/0x700
[   83.286400][ T1187]  ? __cfi_sock_ioctl+0x10/0x10
[   83.291275][ T1187]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   83.296933][ T1187]  ? __se_sys_ioctl+0x62/0x1b0
[   83.301712][ T1187]  ? __cfi_sock_ioctl+0x10/0x10
[   83.306590][ T1187]  __se_sys_ioctl+0x12f/0x1b0
[   83.311311][ T1187]  __x64_sys_ioctl+0x7b/0x90
[   83.315917][ T1187]  x64_sys_call+0x58b/0x9a0
[   83.320432][ T1187]  do_syscall_64+0x4c/0xa0
[   83.324860][ T1187]  ? clear_bhb_loop+0x30/0x80
[   83.329557][ T1187]  ? clear_bhb_loop+0x30/0x80
[   83.334245][ T1187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.340161][ T1187] RIP: 0033:0x7f4d9499de59
[   83.344615][ T1187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.364236][ T1187] RSP: 002b:00007f4d933b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   83.372663][ T1187] RAX: ffffffffffffffda RBX: 00007f4d94c26180 RCX: 00007f4d9499de59
[   83.380664][ T1187] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000009
[   83.388658][ T1187] RBP: 00007f4d933b5090 R08: 0000000000000000 R09: 0000000000000000
[   83.396652][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.404643][ T1187] R13: 00007f4d94c26218 R14: 00007f4d94c26180 R15: 00007ffe6e7f0cf8
[   83.412646][ T1187]  </TASK>
[   83.431407][ T1189] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   83.434412][ T1189] loop5: detected capacity change from 0 to 512
[   83.497410][  T291] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[   83.538513][  T291] usb 1-1: USB disconnect, device number 2
[   83.546768][   T28] audit: type=1400 audit(83.559:395): avc:  denied  { create } for  pid=1188 comm="syz.5.244" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[   83.547709][   T28] audit: type=1400 audit(83.559:396): avc:  denied  { associate } for  pid=1188 comm="syz.5.244" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   83.635177][   T28] audit: type=1400 audit(83.569:397): avc:  denied  { mounton } for  pid=1188 comm="syz.5.244" path="/41/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   83.781602][  T321] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.982945][   T28] audit: type=1400 audit(83.989:398): avc:  denied  { write } for  pid=1188 comm="syz.5.244" name="bus" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   84.000550][  T290] EXT4-fs (loop4): unmounting filesystem.
[   84.234844][ T1210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'.
[   84.616093][ T1209] netlink: 'syz.5.251': attribute type 6 has an invalid length.
[   84.624387][  T405] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   84.737156][ T1209] netlink: 92 bytes leftover after parsing attributes in process `syz.5.251'.
[   85.378891][  T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.389944][  T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.400308][  T405] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   85.409758][  T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.420900][  T405] usb 5-1: config 0 descriptor??
[   86.263208][ T1231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'.
[   86.696628][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   86.844588][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   86.992183][ T1238] fuse: Unknown parameter 'group_iW'
[   87.000985][ T1238] loop5: detected capacity change from 0 to 512
[   87.395511][ T1248] loop4: detected capacity change from 0 to 512
[   87.421750][ T1238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[   87.430014][ T1238] System zones: 0-2, 18-18, 34-34
[   87.441992][ T1238] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.258: bg 0: block 248: padding at end of block bitmap is not set
[   87.457748][ T1238] __quota_error: 11 callbacks suppressed
[   87.457765][ T1238] Quota error (device loop5): write_blk: dquota write failed
[   87.470880][ T1238] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   87.480840][ T1238] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.258: Failed to acquire dquot type 1
[   87.493355][ T1238] EXT4-fs (loop5): 1 truncate cleaned up
[   87.499072][ T1238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   87.509214][ T1238] EXT4-fs (loop5): unmounting filesystem.
[   87.601956][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   87.609449][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   87.616777][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   87.623859][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   87.630734][  T405] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0
[   87.652173][  T405] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[   87.798594][   T28] audit: type=1400 audit(87.819:410): avc:  denied  { create } for  pid=1242 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   87.934449][  T405] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device
[   87.941994][  T405] pyra 0003:1E7D:2CF6.0005: couldn't install mouse
[   87.949154][  T405] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71
[   87.959978][  T405] usb 5-1: USB disconnect, device number 6
[   87.987911][ T1267] FAULT_INJECTION: forcing a failure.
[   87.987911][ T1267] name failslab, interval 1, probability 0, space 0, times 0
[   88.000757][ T1267] CPU: 0 PID: 1267 Comm: syz.0.264 Not tainted syzkaller #0
[   88.008078][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   88.018162][ T1267] Call Trace:
[   88.021473][ T1267]  <TASK>
[   88.024436][ T1267]  __dump_stack+0x21/0x24
[   88.028801][ T1267]  dump_stack_lvl+0x110/0x170
[   88.032848][ T1265] fido_id[1265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   88.033510][ T1267]  ? __cfi_dump_stack_lvl+0x8/0x8
[   88.052686][ T1267]  ? avc_has_perm+0x163/0x250
[   88.057389][ T1267]  ? security_file_permission+0x8a/0xb0
[   88.062953][ T1267]  dump_stack+0x15/0x24
[   88.067122][ T1267]  should_fail_ex+0x3bf/0x510
[   88.071808][ T1267]  __should_failslab+0xac/0xf0
[   88.076598][ T1267]  should_failslab+0x9/0x20
[   88.081115][ T1267]  slab_pre_alloc_hook+0x30/0x1d0
[   88.086162][ T1267]  kmem_cache_alloc_lru+0x49/0x280
[   88.091285][ T1267]  ? sock_alloc_inode+0x28/0xc0
[   88.096154][ T1267]  sock_alloc_inode+0x28/0xc0
[   88.100843][ T1267]  ? __cfi_sock_alloc_inode+0x10/0x10
[   88.106233][ T1267]  new_inode_pseudo+0x70/0x1f0
[   88.111008][ T1267]  __sock_create+0x12c/0x7c0
[   88.115652][ T1267]  ? __cfi_ksys_write+0x10/0x10
[   88.120516][ T1267]  __sys_socket+0xcd/0x1a0
[   88.124942][ T1267]  __x64_sys_socket+0x7a/0x90
[   88.129655][ T1267]  x64_sys_call+0x449/0x9a0
[   88.134173][ T1267]  do_syscall_64+0x4c/0xa0
[   88.138607][ T1267]  ? clear_bhb_loop+0x30/0x80
[   88.143317][ T1267]  ? clear_bhb_loop+0x30/0x80
[   88.148014][ T1267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.154000][ T1267] RIP: 0033:0x7f0e65d9de59
[   88.158444][ T1267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.178157][ T1267] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   88.186593][ T1267] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[   88.194591][ T1267] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a
[   88.202572][ T1267] RBP: 00007f0e66d1f090 R08: 0000000000000000 R09: 0000000000000000
[   88.210564][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.218548][ T1267] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[   88.226538][ T1267]  </TASK>
[   88.231402][ T1267] socket: no more sockets
[   88.284547][ T1271] capability: warning: `syz.4.266' uses 32-bit capabilities (legacy support in use)
[   88.464027][ T1284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'.
[   88.717049][  T405] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   88.929578][  T405] usb 2-1: unable to get BOS descriptor or descriptor too short
[   88.953258][  T405] usb 2-1: config index 0 descriptor too short (expected 198, got 134)
[   89.029937][  T405] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.441272][  T405] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.534970][  T405] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   89.667402][  T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.687198][  T405] usb 2-1: Product: syz
[   89.691452][  T405] usb 2-1: Manufacturer: syz
[   89.696076][  T405] usb 2-1: SerialNumber: syz
[   90.172843][  T358] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   90.195532][ T1282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.215201][ T1282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.239550][  T405] usb 2-1: 0:1 : does not exist
[   90.250269][  T405] usb 2-1: unit 0 not found!
[   90.339501][  T405] usb 2-1: USB disconnect, device number 6
[   90.389496][  T358] usb 6-1: unable to get BOS descriptor or descriptor too short
[   90.459690][  T358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.646721][  T358] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   90.656130][  T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.664941][  T358] usb 6-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   90.917017][    T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   90.933755][  T358] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[   90.943185][  T358] usb 6-1: USB disconnect, device number 7
[   91.039388][ T1310] FAULT_INJECTION: forcing a failure.
[   91.039388][ T1310] name failslab, interval 1, probability 0, space 0, times 0
[   91.052109][ T1310] CPU: 1 PID: 1310 Comm: syz.4.277 Not tainted syzkaller #0
[   91.059447][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   91.069635][ T1310] Call Trace:
[   91.072934][ T1310]  <TASK>
[   91.075875][ T1310]  __dump_stack+0x21/0x24
[   91.080247][ T1310]  dump_stack_lvl+0x110/0x170
[   91.084999][ T1310]  ? __cfi_dump_stack_lvl+0x8/0x8
[   91.090055][ T1310]  ? __kasan_check_read+0x11/0x20
[   91.095101][ T1310]  ? preempt_schedule_irq+0xca/0x120
[   91.100403][ T1310]  dump_stack+0x15/0x24
[   91.104578][ T1310]  should_fail_ex+0x3bf/0x510
[   91.109286][ T1310]  __should_failslab+0xac/0xf0
[   91.114082][ T1310]  should_failslab+0x9/0x20
[   91.118611][ T1310]  kmem_cache_alloc_node+0x42/0x330
[   91.123840][ T1310]  ? __alloc_skb+0xe8/0x4a0
[   91.128359][ T1310]  __alloc_skb+0xe8/0x4a0
[   91.132716][ T1310]  tcp_stream_alloc_skb+0x47/0x360
[   91.137842][ T1310]  tcp_sendmsg_locked+0xcb7/0x39f0
[   91.142967][ T1310]  ? _raw_spin_lock_bh+0x94/0xf0
[   91.147927][ T1310]  ? __cfi_tcp_sendmsg_locked+0x10/0x10
[   91.153486][ T1310]  ? __cfi_inet_sendmsg+0x10/0x10
[   91.158528][ T1310]  ? inet_send_prepare+0x60/0x4d0
[   91.163570][ T1310]  ? inet_send_prepare+0x1e0/0x4d0
[   91.168703][ T1310]  tcp_sendmsg+0x2f/0x50
[   91.172964][ T1310]  inet_sendmsg+0xb6/0xd0
[   91.177314][ T1310]  __sys_sendto+0x4ac/0x660
[   91.181829][ T1310]  ? __cfi___sys_sendto+0x10/0x10
[   91.186897][ T1310]  ? __schedule+0xbea/0x14b0
[   91.191520][ T1310]  ? release_firmware_map_entry+0x190/0x190
[   91.197439][ T1310]  ? ksys_write+0x1fa/0x260
[   91.201960][ T1310]  ? __kasan_check_write+0x14/0x20
[   91.207088][ T1310]  __x64_sys_sendto+0xe5/0x100
[   91.211870][ T1310]  x64_sys_call+0x83/0x9a0
[   91.216301][ T1310]  do_syscall_64+0x4c/0xa0
[   91.220736][ T1310]  ? clear_bhb_loop+0x30/0x80
[   91.225427][ T1310]  ? clear_bhb_loop+0x30/0x80
[   91.230112][ T1310]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.236026][ T1310] RIP: 0033:0x7f3207f9de59
[   91.240454][ T1310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.260162][ T1310] RSP: 002b:00007f3208e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   91.268605][ T1310] RAX: ffffffffffffffda RBX: 00007f3208226180 RCX: 00007f3207f9de59
[   91.276592][ T1310] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000009
[   91.284575][ T1310] RBP: 00007f3208e53090 R08: 0000000000000000 R09: 0000000000000000
[   91.292560][ T1310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.300540][ T1310] R13: 00007f3208226218 R14: 00007f3208226180 R15: 00007ffeb8132bc8
[   91.308533][ T1310]  </TASK>
[   91.333581][   T28] audit: type=1400 audit(91.349:411): avc:  denied  { mount } for  pid=1312 comm="syz.1.278" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   92.700833][   T28] audit: type=1400 audit(92.719:412): avc:  denied  { append } for  pid=1349 comm="syz.4.287" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   92.730637][    T6] usb 3-1: Using ep0 maxpacket: 32
[   92.737091][    T6] usb 3-1: device descriptor read/all, error -71
[   92.944863][   T28] audit: type=1400 audit(92.949:413): avc:  denied  { mount } for  pid=1351 comm="syz.2.288" name="/" dev="ramfs" ino=21698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   92.967049][  T358] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   93.156943][  T358] usb 2-1: Using ep0 maxpacket: 32
[   93.156948][  T291] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   93.171772][  T358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.181976][  T358] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   93.192970][  T358] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   93.207322][  T358] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   93.216399][  T358] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[   93.224667][  T358] usb 2-1: Product: syz
[   93.228899][  T358] usb 2-1: Manufacturer: syz
[   93.233525][  T358] usb 2-1: SerialNumber: syz
[   93.348153][  T291] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   93.357947][  T291] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   93.367694][  T291] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.382089][  T291] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   93.391566][  T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   93.399918][  T291] usb 5-1: Product: syz
[   93.404161][  T291] usb 5-1: Manufacturer: syz
[   93.409514][  T291] usb 5-1: SerialNumber: syz
[   93.456589][  T358] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   93.468316][  T358] usb 2-1: unit 0 not found!
[   93.489383][  T358] usb 2-1: USB disconnect, device number 7
[   93.566946][  T405] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   93.629392][  T291] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   93.651679][ T1369] FAULT_INJECTION: forcing a failure.
[   93.651679][ T1369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.665680][ T1369] CPU: 1 PID: 1369 Comm: syz.2.294 Not tainted syzkaller #0
[   93.673005][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   93.683077][ T1369] Call Trace:
[   93.686366][ T1369]  <TASK>
[   93.689299][ T1369]  __dump_stack+0x21/0x24
[   93.693644][ T1369]  dump_stack_lvl+0x110/0x170
[   93.698352][ T1369]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.703383][ T1369]  dump_stack+0x15/0x24
[   93.707546][ T1369]  should_fail_ex+0x3bf/0x510
[   93.712227][ T1369]  should_fail+0xb/0x10
[   93.716382][ T1369]  should_fail_usercopy+0x1a/0x20
[   93.721418][ T1369]  _copy_from_user+0x1e/0xc0
[   93.726019][ T1369]  iovec_from_user+0x1aa/0x2e0
[   93.730789][ T1369]  __import_iovec+0x6d/0x460
[   93.735383][ T1369]  ? kstrtoull+0x137/0x1d0
[   93.739808][ T1369]  import_iovec+0x7c/0xb0
[   93.744145][ T1369]  process_vm_rw+0x1e8/0xbe0
[   93.748746][ T1369]  ? __ia32_sys_process_vm_writev+0x100/0x100
[   93.754819][ T1369]  ? proc_fail_nth_write+0x180/0x200
[   93.760110][ T1369]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   93.765749][ T1369]  ? security_file_permission+0x8a/0xb0
[   93.771315][ T1369]  ? vfs_write+0xa51/0xd00
[   93.775737][ T1369]  ? __kasan_check_write+0x14/0x20
[   93.780847][ T1369]  ? __kasan_check_write+0x14/0x20
[   93.785980][ T1369]  ? fput+0x154/0x1a0
[   93.789972][ T1369]  ? __cfi_ksys_write+0x10/0x10
[   93.794835][ T1369]  __x64_sys_process_vm_writev+0xe7/0x100
[   93.800588][ T1369]  x64_sys_call+0x40a/0x9a0
[   93.805098][ T1369]  do_syscall_64+0x4c/0xa0
[   93.809542][ T1369]  ? clear_bhb_loop+0x30/0x80
[   93.814246][ T1369]  ? clear_bhb_loop+0x30/0x80
[   93.818923][ T1369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.824825][ T1369] RIP: 0033:0x7f4d9499de59
[   93.829247][ T1369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.848860][ T1369] RSP: 002b:00007f4d933f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[   93.857275][ T1369] RAX: ffffffffffffffda RBX: 00007f4d94c25fa0 RCX: 00007f4d9499de59
[   93.865257][ T1369] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 00000000000000a8
[   93.873231][ T1369] RBP: 00007f4d933f7090 R08: 0000000000000001 R09: 0000000000000000
[   93.881210][ T1369] R10: 0000200000002500 R11: 0000000000000246 R12: 0000000000000001
[   93.889181][ T1369] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[   93.897171][ T1369]  </TASK>
[   93.900832][  T405] usb 6-1: device descriptor read/64, error -71
[   93.940370][   T28] audit: type=1400 audit(93.959:414): avc:  denied  { read write } for  pid=1349 comm="syz.4.287" name="lp0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   93.968809][   T28] audit: type=1400 audit(93.959:415): avc:  denied  { open } for  pid=1349 comm="syz.4.287" path="/dev/usb/lp0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   94.000400][  T291] usb 5-1: USB disconnect, device number 7
[   94.011440][  T291] usblp0: removed
[   94.053410][ T1381] FAULT_INJECTION: forcing a failure.
[   94.053410][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.067895][ T1381] CPU: 0 PID: 1381 Comm: syz.0.298 Not tainted syzkaller #0
[   94.075224][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   94.085280][ T1381] Call Trace:
[   94.088562][ T1381]  <TASK>
[   94.091512][ T1381]  __dump_stack+0x21/0x24
[   94.095844][ T1381]  dump_stack_lvl+0x110/0x170
[   94.100519][ T1381]  ? __cfi_dump_stack_lvl+0x8/0x8
[   94.105546][ T1381]  dump_stack+0x15/0x24
[   94.109712][ T1381]  should_fail_ex+0x3bf/0x510
[   94.114395][ T1381]  should_fail+0xb/0x10
[   94.118558][ T1381]  should_fail_usercopy+0x1a/0x20
[   94.123597][ T1381]  _copy_from_user+0x1e/0xc0
[   94.128192][ T1381]  __sys_sendto+0x30b/0x660
[   94.132707][ T1381]  ? __cfi___sys_sendto+0x10/0x10
[   94.137731][ T1381]  ? ksys_write+0x1fa/0x260
[   94.142228][ T1381]  ? __cfi_ksys_write+0x10/0x10
[   94.147087][ T1381]  __x64_sys_sendto+0xe5/0x100
[   94.151858][ T1381]  x64_sys_call+0x83/0x9a0
[   94.156266][ T1381]  do_syscall_64+0x4c/0xa0
[   94.160680][ T1381]  ? clear_bhb_loop+0x30/0x80
[   94.165350][ T1381]  ? clear_bhb_loop+0x30/0x80
[   94.170025][ T1381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.175948][ T1381] RIP: 0033:0x7f0e65d9de59
[   94.180373][ T1381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.200000][ T1381] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   94.208426][ T1381] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[   94.216425][ T1381] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003
[   94.224428][ T1381] RBP: 00007f0e66d1f090 R08: 0000200000000540 R09: 0000000000000014
[   94.227397][  T405] usb 6-1: device descriptor read/64, error -71
[   94.232454][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.232471][ T1381] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[   94.232489][ T1381]  </TASK>
[   94.527235][  T405] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   94.536952][ T1115] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   94.576972][    T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   94.676950][  T405] usb 6-1: device descriptor read/64, error -71
[   94.718278][ T1115] usb 1-1: unable to get BOS descriptor or descriptor too short
[   94.726662][ T1115] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.741667][ T1115] usb 1-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   94.750795][ T1115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.758852][ T1115] usb 1-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   94.759326][    T6] usb 3-1: unable to get BOS descriptor or descriptor too short
[   94.796821][    T6] usb 3-1: config index 0 descriptor too short (expected 198, got 134)
[   94.805230][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.815497][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.825959][    T6] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   94.835092][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.843170][    T6] usb 3-1: Product: syz
[   94.847380][    T6] usb 3-1: Manufacturer: syz
[   94.851995][    T6] usb 3-1: SerialNumber: syz
[   94.956936][  T405] usb 6-1: device descriptor read/64, error -71
[   95.002365][ T1115] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[   95.017547][ T1115] usb 1-1: USB disconnect, device number 3
[   95.059124][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.067732][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.076984][  T405] usb usb6-port1: attempt power cycle
[   95.082784][    T6] usb 3-1: 0:1 : does not exist
[   95.088023][    T6] usb 3-1: unit 0 not found!
[   95.104180][    T6] usb 3-1: USB disconnect, device number 7
[   95.114811][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   95.517008][  T405] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   95.558122][  T405] usb 6-1: device descriptor read/8, error -71
[   95.581379][ T1406] FAULT_INJECTION: forcing a failure.
[   95.581379][ T1406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.594925][ T1406] CPU: 0 PID: 1406 Comm: syz.0.308 Not tainted syzkaller #0
[   95.602270][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   95.612359][ T1406] Call Trace:
[   95.615656][ T1406]  <TASK>
[   95.618610][ T1406]  __dump_stack+0x21/0x24
[   95.622973][ T1406]  dump_stack_lvl+0x110/0x170
[   95.627683][ T1406]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.632737][ T1406]  dump_stack+0x15/0x24
[   95.636916][ T1406]  should_fail_ex+0x3bf/0x510
[   95.641611][ T1406]  should_fail+0xb/0x10
[   95.645784][ T1406]  should_fail_usercopy+0x1a/0x20
[   95.650825][ T1406]  _copy_from_user+0x1e/0xc0
[   95.655447][ T1406]  __sys_bpf+0x2a0/0x850
[   95.659718][ T1406]  ? bpf_link_show_fdinfo+0x330/0x330
[   95.665119][ T1406]  ? __cfi_ksys_write+0x10/0x10
[   95.669991][ T1406]  ? debug_smp_processor_id+0x17/0x20
[   95.675387][ T1406]  __x64_sys_bpf+0x7c/0x90
[   95.679826][ T1406]  x64_sys_call+0x488/0x9a0
[   95.684353][ T1406]  do_syscall_64+0x4c/0xa0
[   95.688791][ T1406]  ? clear_bhb_loop+0x30/0x80
[   95.693494][ T1406]  ? clear_bhb_loop+0x30/0x80
[   95.698194][ T1406]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.704117][ T1406] RIP: 0033:0x7f0e65d9de59
[   95.708505][  T405] usb 6-1: device descriptor read/8, error -71
[   95.708563][ T1406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.734385][ T1406] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   95.742825][ T1406] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[   95.750828][ T1406] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a
[   95.758823][ T1406] RBP: 00007f0e66d1f090 R08: 0000000000000000 R09: 0000000000000000
[   95.766812][ T1406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.774800][ T1406] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[   95.782816][ T1406]  </TASK>
[   95.880016][ T1417] netlink: 532 bytes leftover after parsing attributes in process `syz.0.312'.
[   95.916963][   T28] audit: type=1400 audit(95.929:416): avc:  denied  { bind } for  pid=1401 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.949255][   T28] audit: type=1400 audit(95.929:417): avc:  denied  { getopt } for  pid=1401 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.976964][  T405] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   96.008023][  T405] usb 6-1: device descriptor read/8, error -71
[   96.157024][ T1115] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.165588][  T405] usb 6-1: device descriptor read/8, error -71
[   96.287013][  T405] usb usb6-port1: unable to enumerate USB device
[   96.348572][ T1115] usb 1-1: unable to get BOS descriptor or descriptor too short
[   96.357080][ T1115] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.367496][ T1115] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.389287][ T1115] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   96.406959][ T1115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.414974][ T1115] usb 1-1: Product: syz
[   96.425852][ T1115] usb 1-1: Manufacturer: syz
[   96.433039][ T1115] usb 1-1: SerialNumber: syz
[   96.449945][ T1115] usb 1-1: selecting invalid altsetting 1
[   96.456389][ T1115] usb 1-1: unit 6 not found!
[   96.643102][ T1417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.680620][ T1417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.197008][  T405] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   97.252771][ T1417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.274457][ T1417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.527182][  T405] usb 2-1: Using ep0 maxpacket: 32
[   97.549356][  T405] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[   97.609569][  T405] usb 2-1: config 0 interface 0 has no altsetting 0
[   97.917027][  T443] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[   97.933955][  T405] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[   97.943311][  T405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.952449][  T405] usb 2-1: config 0 descriptor??
[   97.958093][ T1439] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[   98.068849][ T1450] FAULT_INJECTION: forcing a failure.
[   98.068849][ T1450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   98.082212][ T1450] CPU: 0 PID: 1450 Comm: syz.4.322 Not tainted syzkaller #0
[   98.089545][ T1450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   98.099615][ T1450] Call Trace:
[   98.102900][ T1450]  <TASK>
[   98.105841][ T1450]  __dump_stack+0x21/0x24
[   98.110193][ T1450]  dump_stack_lvl+0x110/0x170
[   98.114885][ T1450]  ? __cfi_dump_stack_lvl+0x8/0x8
[   98.119924][ T1450]  ? __perf_event_task_sched_in+0x2ab/0x320
[   98.125840][ T1450]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[   98.132103][ T1450]  dump_stack+0x15/0x24
[   98.136292][ T1450]  should_fail_ex+0x3bf/0x510
[   98.141179][ T1450]  should_fail+0xb/0x10
[   98.145366][ T1450]  should_fail_usercopy+0x1a/0x20
[   98.150405][ T1450]  _copy_from_user+0x1e/0xc0
[   98.155021][ T1450]  ___sys_sendmsg+0x1c3/0x360
[   98.159718][ T1450]  ? __sys_sendmsg+0x290/0x290
[   98.164511][ T1450]  __sys_sendmmsg+0x2cc/0x4e0
[   98.169198][ T1450]  ? __cfi___switch_to+0x10/0x10
[   98.174159][ T1450]  ? __cfi___sys_sendmmsg+0x10/0x10
[   98.179371][ T1450]  ? __schedule+0xbea/0x14b0
[   98.183988][ T1450]  ? fpregs_restore_userregs+0x128/0x260
[   98.189633][ T1450]  __x64_sys_sendmmsg+0xa0/0xb0
[   98.194539][ T1450]  x64_sys_call+0x3f5/0x9a0
[   98.199069][ T1450]  do_syscall_64+0x4c/0xa0
[   98.203529][ T1450]  ? clear_bhb_loop+0x30/0x80
[   98.208226][ T1450]  ? clear_bhb_loop+0x30/0x80
[   98.212938][ T1450]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.218853][ T1450] RIP: 0033:0x7f3207f9de59
[   98.223280][ T1450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.242906][ T1450] RSP: 002b:00007f3208e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   98.251330][ T1450] RAX: ffffffffffffffda RBX: 00007f3208226180 RCX: 00007f3207f9de59
[   98.259318][ T1450] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000007
[   98.267299][ T1450] RBP: 00007f3208e53090 R08: 0000000000000000 R09: 0000000000000000
[   98.275276][ T1450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.283257][ T1450] R13: 00007f3208226218 R14: 00007f3208226180 R15: 00007ffeb8132bc8
[   98.291279][ T1450]  </TASK>
[   98.295774][ T1115] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[   98.312600][ T1115] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   98.328327][  T443] usb 6-1: unable to get BOS descriptor or descriptor too short
[   98.340164][ T1115] usb 1-1: USB disconnect, device number 4
[   98.351677][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   98.354483][  T443] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.411922][  T443] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[   98.432497][  T443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.452502][  T443] usb 6-1: SerialNumber: ѵ哻䋭ᐇ腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿㝒擲䏢⣤쮽熸㗾涻侲እ鳮簁飤쬓頒ﵓ戊ʪ䍺䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺ꔐ먧䑠猦᫧l⋕ᅺʯ︉׽邝尒䰾콂됥꬀뷄뉾
[   98.500969][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.512051][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.533972][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.547783][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.555365][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.564519][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.575251][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.585428][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.593000][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.601289][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.608905][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.616369][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.623934][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.631429][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.638998][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.646468][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.654029][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.661521][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.669090][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.676542][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.684168][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.691680][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.699241][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.707395][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.715009][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.735168][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.745234][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.748613][  T443] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[   98.763937][  T443] usb 6-1: USB disconnect, device number 12
[   98.920125][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.932832][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.940670][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.948149][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   98.955619][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.031087][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.038688][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.046092][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.054315][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.062092][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.070478][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.078165][  T405] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0
[   99.174784][  T405] pantherlord 0003:0E8F:0003.0006: hidraw0: USB HID v0.01 Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0
[   99.186787][  T405] pantherlord 0003:0E8F:0003.0006: no output reports found
[   99.196625][ T1469] loop2: detected capacity change from 0 to 512
[   99.203357][ T1469] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.226817][ T1469] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   99.248024][ T1469] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   99.256721][ T1469] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.264448][ T1469] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.328: Invalid block bitmap block 0 in block_group 0
[   99.317904][ T1469] Quota error (device loop2): write_blk: dquota write failed
[   99.335705][ T1474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[   99.526352][ T1469] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   99.745961][ T1469] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.328: Failed to acquire dquot type 1
[  100.303008][  T358] usb 2-1: USB disconnect, device number 8
[  100.327307][ T1469] EXT4-fs (loop2): 1 orphan inode deleted
[  100.337239][    T8] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  100.346331][    T8] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 1
[  100.358379][ T1469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  100.414536][ T1488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.334'.
[  100.427604][  T288] EXT4-fs (loop2): unmounting filesystem.
[  100.518411][   T28] audit: type=1400 audit(100.539:418): avc:  denied  { read } for  pid=1493 comm="syz.0.337" path="socket:[21035]" dev="sockfs" ino=21035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  100.702252][ T1502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'.
[  100.950539][  T443] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  101.045429][   T28] audit: type=1400 audit(101.059:419): avc:  denied  { read append } for  pid=1505 comm="syz.0.341" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  101.718634][ T1511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'.
[  102.370379][   T28] audit: type=1400 audit(101.119:420): avc:  denied  { open } for  pid=1505 comm="syz.0.341" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  103.009828][  T443] usb 3-1: Using ep0 maxpacket: 8
[  103.027095][  T443] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  103.058234][  T443] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  103.113041][ T1529] netlink: 64 bytes leftover after parsing attributes in process `syz.4.347'.
[  103.115001][  T443] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40
[  103.131185][  T443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.139269][  T443] usb 3-1: Product: syz
[  103.143453][  T443] usb 3-1: Manufacturer: syz
[  103.148130][  T443] usb 3-1: SerialNumber: syz
[  103.212264][ T1531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[  105.126700][  T443] usb 3-1: can't set config #1, error -71
[  105.134091][  T443] usb 3-1: USB disconnect, device number 8
[  105.167144][ T1541] FAULT_INJECTION: forcing a failure.
[  105.167144][ T1541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.181476][ T1541] CPU: 0 PID: 1541 Comm: syz.0.351 Not tainted syzkaller #0
[  105.188817][ T1541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  105.198906][ T1541] Call Trace:
[  105.202204][ T1541]  <TASK>
[  105.205154][ T1541]  __dump_stack+0x21/0x24
[  105.209526][ T1541]  dump_stack_lvl+0x110/0x170
[  105.214246][ T1541]  ? __cfi_dump_stack_lvl+0x8/0x8
[  105.219315][ T1541]  ? _parse_integer+0x2a/0x40
[  105.224032][ T1541]  dump_stack+0x15/0x24
[  105.228243][ T1541]  should_fail_ex+0x3bf/0x510
[  105.232992][ T1541]  should_fail+0xb/0x10
[  105.237179][ T1541]  should_fail_usercopy+0x1a/0x20
[  105.242243][ T1541]  _copy_from_user+0x1e/0xc0
[  105.246885][ T1541]  ___sys_sendmsg+0x1c3/0x360
[  105.251608][ T1541]  ? __sys_sendmsg+0x290/0x290
[  105.256413][ T1541]  ? __kasan_check_write+0x14/0x20
[  105.261557][ T1541]  ? proc_fail_nth_write+0x180/0x200
[  105.266906][ T1541]  ? vfs_write+0xa51/0xd00
[  105.271361][ T1541]  ? __fdget+0x19c/0x220
[  105.275648][ T1541]  __x64_sys_sendmsg+0x20d/0x2e0
[  105.280625][ T1541]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  105.286135][ T1541]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  105.292244][ T1541]  x64_sys_call+0x171/0x9a0
[  105.296790][ T1541]  do_syscall_64+0x4c/0xa0
[  105.301256][ T1541]  ? clear_bhb_loop+0x30/0x80
[  105.305973][ T1541]  ? clear_bhb_loop+0x30/0x80
[  105.310687][ T1541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.316626][ T1541] RIP: 0033:0x7f0e65d9de59
[  105.321079][ T1541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.337849][ T1549] FAULT_INJECTION: forcing a failure.
[  105.337849][ T1549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.340713][ T1541] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.340740][ T1541] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[  105.340756][ T1541] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000004
[  105.340770][ T1541] RBP: 00007f0e66d1f090 R08: 0000000000000000 R09: 0000000000000000
[  105.340785][ T1541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.340798][ T1541] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[  105.340818][ T1541]  </TASK>
[  105.421998][ T1553] loop5: detected capacity change from 0 to 128
[  105.430151][ T1553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  105.440888][ T1549] CPU: 0 PID: 1549 Comm: syz.4.354 Not tainted syzkaller #0
[  105.448232][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  105.458298][ T1549] Call Trace:
[  105.461587][ T1549]  <TASK>
[  105.464544][ T1549]  __dump_stack+0x21/0x24
[  105.468898][ T1549]  dump_stack_lvl+0x110/0x170
[  105.473623][ T1549]  ? __cfi_dump_stack_lvl+0x8/0x8
[  105.478699][ T1549]  dump_stack+0x15/0x24
[  105.482881][ T1549]  should_fail_ex+0x3bf/0x510
[  105.487586][ T1549]  should_fail+0xb/0x10
[  105.491757][ T1549]  should_fail_usercopy+0x1a/0x20
[  105.496798][ T1549]  _copy_from_user+0x1e/0xc0
[  105.501447][ T1549]  iovec_from_user+0x1aa/0x2e0
[  105.506229][ T1549]  ? __kasan_check_write+0x14/0x20
[  105.511355][ T1549]  __import_iovec+0x6d/0x460
[  105.515959][ T1549]  import_iovec+0x7c/0xb0
[  105.520315][ T1549]  do_preadv+0x1f8/0x390
[  105.524588][ T1549]  ? vfs_writev+0x5f0/0x5f0
[  105.529123][ T1549]  ? __kasan_check_write+0x14/0x20
[  105.534264][ T1549]  ? fput+0x154/0x1a0
[  105.538274][ T1549]  __x64_sys_preadv+0x9e/0xb0
[  105.542966][ T1549]  x64_sys_call+0x370/0x9a0
[  105.547480][ T1549]  do_syscall_64+0x4c/0xa0
[  105.551943][ T1549]  ? clear_bhb_loop+0x30/0x80
[  105.556650][ T1549]  ? clear_bhb_loop+0x30/0x80
[  105.561336][ T1549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.567242][ T1549] RIP: 0033:0x7f3207f9de59
[  105.571667][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.591295][ T1549] RSP: 002b:00007f3208e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  105.599741][ T1549] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59
[  105.607746][ T1549] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003
[  105.615752][ T1549] RBP: 00007f3208e95090 R08: 0000000000000008 R09: 0000000000000000
[  105.623736][ T1549] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001
[  105.631895][ T1549] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffeb8132bc8
[  105.639875][ T1549]  </TASK>
[  105.668955][   T28] audit: type=1400 audit(105.689:421): avc:  denied  { mount } for  pid=1552 comm="syz.5.356" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  105.700506][ T1556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'.
[  105.808724][  T497] EXT4-fs (loop5): unmounting filesystem.
[  106.698597][ T1564] loop2: detected capacity change from 0 to 4096
[  106.777888][ T1564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  106.806397][   T28] audit: type=1400 audit(106.819:422): avc:  denied  { create } for  pid=1563 comm="syz.2.360" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  106.910330][  T288] EXT4-fs (loop2): unmounting filesystem.
[  107.043841][   T28] audit: type=1400 audit(107.059:423): avc:  denied  { watch } for  pid=1584 comm="syz.2.366" path="/proc/214/task" dev="proc" ino=22080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  107.086594][ T1587] FAULT_INJECTION: forcing a failure.
[  107.086594][ T1587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.099899][ T1587] CPU: 1 PID: 1587 Comm: syz.1.364 Not tainted syzkaller #0
[  107.107216][ T1587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  107.117290][ T1587] Call Trace:
[  107.120610][ T1587]  <TASK>
[  107.123559][ T1587]  __dump_stack+0x21/0x24
[  107.127913][ T1587]  dump_stack_lvl+0x110/0x170
[  107.132614][ T1587]  ? __cfi_dump_stack_lvl+0x8/0x8
[  107.137663][ T1587]  dump_stack+0x15/0x24
[  107.141844][ T1587]  should_fail_ex+0x3bf/0x510
[  107.146549][ T1587]  should_fail+0xb/0x10
[  107.150723][ T1587]  should_fail_usercopy+0x1a/0x20
[  107.155772][ T1587]  _copy_to_user+0x1e/0x90
[  107.160221][ T1587]  simple_read_from_buffer+0xe9/0x160
[  107.165619][ T1587]  proc_fail_nth_read+0x1a6/0x220
[  107.170677][ T1587]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  107.176278][ T1587]  ? security_file_permission+0x94/0xb0
[  107.181864][ T1587]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  107.187433][ T1587]  vfs_read+0x286/0x930
[  107.191610][ T1587]  ? __cfi_vfs_read+0x10/0x10
[  107.196285][ T1587]  ? __kasan_check_write+0x14/0x20
[  107.201390][ T1587]  ? mutex_lock+0x93/0x1b0
[  107.205805][ T1587]  ? __cfi_mutex_lock+0x10/0x10
[  107.210654][ T1587]  ? __fdget_pos+0x2cd/0x380
[  107.215245][ T1587]  ? ksys_read+0x70/0x260
[  107.219586][ T1587]  ksys_read+0x14a/0x260
[  107.223827][ T1587]  ? __cfi_ksys_read+0x10/0x10
[  107.228589][ T1587]  ? fpregs_restore_userregs+0x128/0x260
[  107.234223][ T1587]  __x64_sys_read+0x7b/0x90
[  107.238723][ T1587]  x64_sys_call+0x2f/0x9a0
[  107.243183][ T1587]  do_syscall_64+0x4c/0xa0
[  107.247630][ T1587]  ? clear_bhb_loop+0x30/0x80
[  107.252350][ T1587]  ? clear_bhb_loop+0x30/0x80
[  107.257033][ T1587]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  107.262950][ T1587] RIP: 0033:0x7f302df5e68e
[  107.267362][ T1587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  107.286964][ T1587] RSP: 002b:00007f302eeccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  107.295385][ T1587] RAX: ffffffffffffffda RBX: 00007f302eecd6c0 RCX: 00007f302df5e68e
[  107.303372][ T1587] RDX: 000000000000000f RSI: 00007f302eecd0a0 RDI: 0000000000000005
[  107.311361][ T1587] RBP: 00007f302eecd090 R08: 0000000000000000 R09: 0000000000000000
[  107.319333][ T1587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.327303][ T1587] R13: 00007f302e226128 R14: 00007f302e226090 R15: 00007ffddc371528
[  107.335325][ T1587]  </TASK>
[  107.432584][ T1602] loop2: detected capacity change from 0 to 512
[  107.448458][ T1602] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  107.458884][ T1602] EXT4-fs (loop2): 1 truncate cleaned up
[  107.464630][ T1602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  107.474123][    T6] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  107.567379][   T28] audit: type=1400 audit(107.589:424): avc:  denied  { create } for  pid=1597 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  107.590152][   T28] audit: type=1400 audit(107.589:425): avc:  denied  { setopt } for  pid=1592 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  107.609115][ T1602] ext3: Unknown parameter '1844674407370955161500000000000000000000��N�C#�n�%���eM�^���C�*"��_���Ox|ևU'��r�9���ij�gd�����41z)f�<��Z���.�+;��"����#��Z�mKn_��D�Е��늘.�W017777777777777777777770x0000000000000000��7�|�}
!4\)�OI��[�g��IUn_�'
[  107.633315][   T28] audit: type=1400 audit(107.629:426): avc:  denied  { remount } for  pid=1601 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  107.663306][   T28] audit: type=1400 audit(107.669:427): avc:  denied  { read write open } for  pid=1601 comm="syz.2.372" path=2F37322F66696C65302FFFFFFFFF72652C6E6F626C6F636B5F76616C69646974792C dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  107.695702][  T288] EXT4-fs (loop2): unmounting filesystem.
[  107.699017][    T6] usb 6-1: unable to get BOS descriptor or descriptor too short
[  107.729811][    T6] usb 6-1: config index 0 descriptor too short (expected 198, got 134)
[  107.746907][    T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.758987][    T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.761550][ T1611] FAULT_INJECTION: forcing a failure.
[  107.761550][ T1611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.781735][ T1611] CPU: 1 PID: 1611 Comm: syz.2.374 Not tainted syzkaller #0
[  107.787641][    T6] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  107.789058][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  107.789072][ T1611] Call Trace:
[  107.789078][ T1611]  <TASK>
[  107.789085][ T1611]  __dump_stack+0x21/0x24
[  107.816938][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.818731][ T1611]  dump_stack_lvl+0x110/0x170
[  107.831410][ T1611]  ? __cfi_dump_stack_lvl+0x8/0x8
[  107.836479][ T1611]  ? ioctl_has_perm+0x3a6/0x4f0
[  107.841470][ T1611]  dump_stack+0x15/0x24
[  107.845654][ T1611]  should_fail_ex+0x3bf/0x510
[  107.850355][ T1611]  should_fail+0xb/0x10
[  107.854536][ T1611]  should_fail_usercopy+0x1a/0x20
[  107.859582][ T1611]  _copy_from_user+0x1e/0xc0
[  107.864205][ T1611]  __tun_chr_ioctl+0x216/0x1ef0
[  107.869094][ T1611]  ? tun_flow_create+0x320/0x320
[  107.874069][ T1611]  ? mutex_unlock+0x8f/0x230
[  107.878700][ T1611]  tun_chr_ioctl+0x2a/0x40
[  107.883171][ T1611]  ? __cfi_tun_chr_ioctl+0x10/0x10
[  107.888319][ T1611]  __se_sys_ioctl+0x12f/0x1b0
[  107.893021][ T1611]  __x64_sys_ioctl+0x7b/0x90
[  107.897638][ T1611]  x64_sys_call+0x58b/0x9a0
[  107.902169][ T1611]  do_syscall_64+0x4c/0xa0
[  107.906606][ T1611]  ? clear_bhb_loop+0x30/0x80
[  107.911321][ T1611]  ? clear_bhb_loop+0x30/0x80
[  107.916020][ T1611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  107.921951][ T1611] RIP: 0033:0x7f4d9499de59
[  107.926383][ T1611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.946037][ T1611] RSP: 002b:00007f4d933f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  107.954480][ T1611] RAX: ffffffffffffffda RBX: 00007f4d94c25fa0 RCX: 00007f4d9499de59
[  107.962473][ T1611] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003
[  107.970468][ T1611] RBP: 00007f4d933f7090 R08: 0000000000000000 R09: 0000000000000000
[  107.978455][ T1611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.986530][ T1611] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[  107.994540][ T1611]  </TASK>
[  108.381268][    T6] usb 6-1: Product: syz
[  108.385517][    T6] usb 6-1: Manufacturer: syz
[  108.390190][    T6] usb 6-1: SerialNumber: syz
[  108.624125][ T1622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'.
[  108.882112][ T1591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.952020][ T1591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.380171][ T1632] FAULT_INJECTION: forcing a failure.
[  109.380171][ T1632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.425758][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  109.434765][ T1632] CPU: 1 PID: 1632 Comm: syz.4.382 Not tainted syzkaller #0
[  109.442075][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  109.452144][ T1632] Call Trace:
[  109.455440][ T1632]  <TASK>
[  109.458390][ T1632]  __dump_stack+0x21/0x24
[  109.462748][ T1632]  dump_stack_lvl+0x110/0x170
[  109.467706][ T1632]  ? __cfi_dump_stack_lvl+0x8/0x8
[  109.472760][ T1632]  ? _parse_integer+0x2a/0x40
[  109.477465][ T1632]  dump_stack+0x15/0x24
[  109.481648][ T1632]  should_fail_ex+0x3bf/0x510
[  109.486346][ T1632]  should_fail+0xb/0x10
[  109.490517][ T1632]  should_fail_usercopy+0x1a/0x20
[  109.495592][ T1632]  _copy_from_user+0x1e/0xc0
[  109.500212][ T1632]  ___sys_sendmsg+0x1c3/0x360
[  109.504921][ T1632]  ? __sys_sendmsg+0x290/0x290
[  109.509712][ T1632]  ? __kasan_check_write+0x14/0x20
[  109.514839][ T1632]  ? proc_fail_nth_write+0x180/0x200
[  109.520148][ T1632]  ? vfs_write+0xa51/0xd00
[  109.524588][ T1632]  ? __fdget+0x19c/0x220
[  109.528849][ T1632]  __x64_sys_sendmsg+0x20d/0x2e0
[  109.533821][ T1632]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  109.539312][ T1632]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  109.545404][ T1632]  x64_sys_call+0x171/0x9a0
[  109.549964][ T1632]  do_syscall_64+0x4c/0xa0
[  109.554405][ T1632]  ? clear_bhb_loop+0x30/0x80
[  109.559103][ T1632]  ? clear_bhb_loop+0x30/0x80
[  109.563821][ T1632]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.569742][ T1632] RIP: 0033:0x7f3207f9de59
[  109.574178][ T1632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.593888][ T1632] RSP: 002b:00007f3208e95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.602329][ T1632] RAX: ffffffffffffffda RBX: 00007f3208225fa0 RCX: 00007f3207f9de59
[  109.610322][ T1632] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000005
[  109.618310][ T1632] RBP: 00007f3208e95090 R08: 0000000000000000 R09: 0000000000000000
[  109.626297][ T1632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.634280][ T1632] R13: 00007f3208226038 R14: 00007f3208225fa0 R15: 00007ffeb8132bc8
[  109.642361][ T1632]  </TASK>
[  109.752429][    T6] usb 6-1: 0:1 : does not exist
[  109.757937][    T6] usb 6-1: unit 0 not found!
[  109.781072][    T6] usb 6-1: USB disconnect, device number 13
[  109.811678][ T1640] loop4: detected capacity change from 0 to 512
[  111.003096][ T1648] xt_ecn: cannot match TCP bits for non-tcp packets
[  111.080610][ T1653] FAULT_INJECTION: forcing a failure.
[  111.080610][ T1653] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.094003][ T1653] CPU: 1 PID: 1653 Comm: syz.2.388 Not tainted syzkaller #0
[  111.101354][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.111433][ T1653] Call Trace:
[  111.114721][ T1653]  <TASK>
[  111.117680][ T1653]  __dump_stack+0x21/0x24
[  111.122052][ T1653]  dump_stack_lvl+0x110/0x170
[  111.126789][ T1653]  ? __cfi_dump_stack_lvl+0x8/0x8
[  111.131822][ T1653]  ? ioctl_has_perm+0x3a6/0x4f0
[  111.136680][ T1653]  dump_stack+0x15/0x24
[  111.140847][ T1653]  should_fail_ex+0x3bf/0x510
[  111.145557][ T1653]  should_fail+0xb/0x10
[  111.149742][ T1653]  should_fail_usercopy+0x1a/0x20
[  111.154827][ T1653]  _copy_from_user+0x1e/0xc0
[  111.159451][ T1653]  __tun_chr_ioctl+0x216/0x1ef0
[  111.164330][ T1653]  ? tun_flow_create+0x320/0x320
[  111.169278][ T1653]  ? mutex_unlock+0x8f/0x230
[  111.173883][ T1653]  tun_chr_ioctl+0x2a/0x40
[  111.178305][ T1653]  ? __cfi_tun_chr_ioctl+0x10/0x10
[  111.183418][ T1653]  __se_sys_ioctl+0x12f/0x1b0
[  111.188121][ T1653]  __x64_sys_ioctl+0x7b/0x90
[  111.192712][ T1653]  x64_sys_call+0x58b/0x9a0
[  111.197226][ T1653]  do_syscall_64+0x4c/0xa0
[  111.201666][ T1653]  ? clear_bhb_loop+0x30/0x80
[  111.206342][ T1653]  ? clear_bhb_loop+0x30/0x80
[  111.211023][ T1653]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.216940][ T1653] RIP: 0033:0x7f4d9499de59
[  111.221357][ T1653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.240984][ T1653] RSP: 002b:00007f4d933f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.249406][ T1653] RAX: ffffffffffffffda RBX: 00007f4d94c25fa0 RCX: 00007f4d9499de59
[  111.257383][ T1653] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000003
[  111.265391][ T1653] RBP: 00007f4d933f7090 R08: 0000000000000000 R09: 0000000000000000
[  111.273379][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.281346][ T1653] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[  111.289320][ T1653]  </TASK>
[  111.335039][   T24] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  111.356083][   T28] audit: type=1400 audit(111.369:428): avc:  denied  { create } for  pid=1658 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  111.438846][ T1663] fuse: Bad value for 'fd'
[  111.444520][   T28] audit: type=1400 audit(111.399:429): avc:  denied  { write } for  pid=1657 comm="syz.5.390" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  111.547540][ T1667] FAULT_INJECTION: forcing a failure.
[  111.547540][ T1667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.560698][ T1667] CPU: 1 PID: 1667 Comm: syz.0.391 Not tainted syzkaller #0
[  111.568018][ T1667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.578148][ T1667] Call Trace:
[  111.581453][ T1667]  <TASK>
[  111.584417][ T1667]  __dump_stack+0x21/0x24
[  111.588775][ T1667]  dump_stack_lvl+0x110/0x170
[  111.593483][ T1667]  ? __cfi_dump_stack_lvl+0x8/0x8
[  111.598540][ T1667]  dump_stack+0x15/0x24
[  111.602722][ T1667]  should_fail_ex+0x3bf/0x510
[  111.607432][ T1667]  should_fail+0xb/0x10
[  111.611620][ T1667]  should_fail_usercopy+0x1a/0x20
[  111.616665][ T1667]  _copy_from_user+0x1e/0xc0
[  111.621304][ T1667]  ___sys_sendmsg+0x1c3/0x360
[  111.626009][ T1667]  ? __sys_sendmsg+0x290/0x290
[  111.630818][ T1667]  ? __fdget+0x19c/0x220
[  111.635083][ T1667]  __x64_sys_sendmsg+0x20d/0x2e0
[  111.640044][ T1667]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  111.645526][ T1667]  ? __kasan_check_write+0x14/0x20
[  111.650655][ T1667]  ? fpregs_restore_userregs+0x128/0x260
[  111.656308][ T1667]  ? switch_fpu_return+0xe/0x10
[  111.661184][ T1667]  x64_sys_call+0x171/0x9a0
[  111.665710][ T1667]  do_syscall_64+0x4c/0xa0
[  111.670152][ T1667]  ? clear_bhb_loop+0x30/0x80
[  111.674873][ T1667]  ? clear_bhb_loop+0x30/0x80
[  111.679563][ T1667]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.685483][ T1667] RIP: 0033:0x7f0e65d9de59
[  111.689911][ T1667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.709533][ T1667] RSP: 002b:00007f0e66cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.717965][ T1667] RAX: ffffffffffffffda RBX: 00007f0e66026180 RCX: 00007f0e65d9de59
[  111.725958][ T1667] RDX: 00000000000048c0 RSI: 00002000000000c0 RDI: 0000000000000006
[  111.733954][ T1667] RBP: 00007f0e66cdd090 R08: 0000000000000000 R09: 0000000000000000
[  111.741949][ T1667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.749950][ T1667] R13: 00007f0e66026218 R14: 00007f0e66026180 R15: 00007fffcc130148
[  111.757946][ T1667]  </TASK>
[  111.826977][   T24] usb 2-1: Invalid ep0 maxpacket: 32
[  111.895984][ T1670] FAULT_INJECTION: forcing a failure.
[  111.895984][ T1670] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.910673][ T1670] CPU: 0 PID: 1670 Comm: syz.2.394 Not tainted syzkaller #0
[  111.918018][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.928094][ T1670] Call Trace:
[  111.931392][ T1670]  <TASK>
[  111.934346][ T1670]  __dump_stack+0x21/0x24
[  111.938723][ T1670]  dump_stack_lvl+0x110/0x170
[  111.943425][ T1670]  ? __cfi_dump_stack_lvl+0x8/0x8
[  111.948475][ T1670]  ? sysvec_reschedule_ipi+0x78/0x80
[  111.953797][ T1670]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  111.959465][ T1670]  dump_stack+0x15/0x24
[  111.963646][ T1670]  should_fail_ex+0x3bf/0x510
[  111.968352][ T1670]  should_fail+0xb/0x10
[  111.972528][ T1670]  should_fail_usercopy+0x1a/0x20
[  111.977573][ T1670]  _copy_to_user+0x1e/0x90
[  111.982024][ T1670]  simple_read_from_buffer+0xe9/0x160
[  111.987451][ T1670]  proc_fail_nth_read+0x1a6/0x220
[  111.992532][ T1670]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  111.998101][ T1670]  ? security_file_permission+0x94/0xb0
[  112.003680][ T1670]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  112.009255][ T1670]  vfs_read+0x286/0x930
[  112.013428][ T1670]  ? __cfi_vfs_read+0x10/0x10
[  112.018126][ T1670]  ? __kasan_check_write+0x14/0x20
[  112.023268][ T1670]  ? mutex_lock+0x93/0x1b0
[  112.027726][ T1670]  ? __cfi_mutex_lock+0x10/0x10
[  112.032610][ T1670]  ? __fdget_pos+0x2cd/0x380
[  112.037225][ T1670]  ? ksys_read+0x70/0x260
[  112.041576][ T1670]  ksys_read+0x14a/0x260
[  112.045834][ T1670]  ? __cfi_ksys_read+0x10/0x10
[  112.050614][ T1670]  ? fpregs_restore_userregs+0x128/0x260
[  112.056275][ T1670]  __x64_sys_read+0x7b/0x90
[  112.060794][ T1670]  x64_sys_call+0x2f/0x9a0
[  112.065266][ T1670]  do_syscall_64+0x4c/0xa0
[  112.069712][ T1670]  ? clear_bhb_loop+0x30/0x80
[  112.074407][ T1670]  ? clear_bhb_loop+0x30/0x80
[  112.079208][ T1670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.085218][ T1670] RIP: 0033:0x7f4d9495e68e
[  112.089651][ T1670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  112.109273][ T1670] RSP: 002b:00007f4d933f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  112.117735][ T1670] RAX: ffffffffffffffda RBX: 00007f4d933f76c0 RCX: 00007f4d9495e68e
[  112.125721][ T1670] RDX: 000000000000000f RSI: 00007f4d933f70a0 RDI: 0000000000000004
[  112.133713][ T1670] RBP: 00007f4d933f7090 R08: 0000000000000000 R09: 0000000000000000
[  112.141723][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.149716][ T1670] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[  112.157719][ T1670]  </TASK>
[  112.250865][   T24] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  112.301940][ T1676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.397'.
[  112.359688][ T1678] loop4: detected capacity change from 0 to 128
[  112.376210][ T1678] EXT4-fs (loop4): Test dummy encryption mode enabled
[  112.380099][ T1660] loop5: detected capacity change from 0 to 40427
[  112.393650][ T1660] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  112.401889][ T1660] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  112.410707][ T1678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  112.431814][ T1660] F2FS-fs (loop5): invalid crc value
[  112.537774][ T1685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'.
[  112.667000][  T318] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  112.719930][ T1678] IPv6: NLM_F_REPLACE set, but no existing node found!
[  112.737225][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.768052][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.793048][ T1660] F2FS-fs (loop5): Found nat_bits in checkpoint
[  112.877089][   T24] usb 2-1: device not accepting address 10, error -71
[  112.889088][  T318] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.901604][   T24] usb usb2-port1: attempt power cycle
[  112.919781][  T318] usb 3-1: config index 0 descriptor too short (expected 198, got 134)
[  112.964203][ T1660] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  112.984503][  T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.004864][ T1660] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  113.188140][  T318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.210308][  T318] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  113.245964][  T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.269024][  T318] usb 3-1: Product: syz
[  113.273442][  T318] usb 3-1: Manufacturer: syz
[  113.285990][   T28] audit: type=1400 audit(113.299:430): avc:  denied  { mounton } for  pid=1657 comm="syz.5.390" path="/65/file0/file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.392770][  T318] usb 3-1: SerialNumber: syz
[  113.411243][   T28] audit: type=1400 audit(113.329:431): avc:  denied  { write } for  pid=1657 comm="syz.5.390" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.656100][  T318] usb 3-1: 0:1 : does not exist
[  113.702623][   T28] audit: type=1400 audit(113.329:432): avc:  denied  { add_name } for  pid=1657 comm="syz.5.390" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.717553][  T318] usb 3-1: unit 0 not found!
[  113.738900][ T1704] FAULT_INJECTION: forcing a failure.
[  113.738900][ T1704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.752053][  T318] usb 3-1: USB disconnect, device number 9
[  113.752068][   T28] audit: type=1400 audit(113.329:433): avc:  denied  { setattr } for  pid=1657 comm="syz.5.390" name="work" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.785480][ T1704] CPU: 1 PID: 1704 Comm: syz.0.404 Not tainted syzkaller #0
[  113.792831][ T1704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  113.802906][ T1704] Call Trace:
[  113.806204][ T1704]  <TASK>
[  113.808642][   T28] audit: type=1400 audit(113.329:434): avc:  denied  { remove_name } for  pid=1657 comm="syz.5.390" name="#f" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.809145][ T1704]  __dump_stack+0x21/0x24
[  113.834696][ T1704]  dump_stack_lvl+0x110/0x170
[  113.835223][   T28] audit: type=1400 audit(113.329:435): avc:  denied  { rename } for  pid=1657 comm="syz.5.390" name="#f" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  113.839405][ T1704]  ? __cfi_dump_stack_lvl+0x8/0x8
[  113.839434][ T1704]  dump_stack+0x15/0x24
[  113.839457][ T1704]  should_fail_ex+0x3bf/0x510
[  113.839476][ T1704]  should_fail+0xb/0x10
[  113.861375][   T28] audit: type=1400 audit(113.329:436): avc:  denied  { unlink } for  pid=1657 comm="syz.5.390" name="#f" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  113.865328][ T1704]  should_fail_usercopy+0x1a/0x20
[  113.869996][   T28] audit: type=1400 audit(113.409:437): avc:  denied  { unlink } for  pid=1657 comm="syz.5.390" name="#10" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  113.874171][ T1704]  _copy_from_user+0x1e/0xc0
[  113.929984][ T1704]  __sys_bpf+0x2a0/0x850
[  113.934229][ T1704]  ? bpf_link_show_fdinfo+0x330/0x330
[  113.939615][ T1704]  ? __cfi_ksys_write+0x10/0x10
[  113.944482][ T1704]  ? do_user_addr_fault+0x9a5/0x1030
[  113.949792][ T1704]  ? debug_smp_processor_id+0x17/0x20
[  113.955165][ T1704]  __x64_sys_bpf+0x7c/0x90
[  113.959576][ T1704]  x64_sys_call+0x488/0x9a0
[  113.964079][ T1704]  do_syscall_64+0x4c/0xa0
[  113.968494][ T1704]  ? clear_bhb_loop+0x30/0x80
[  113.973166][ T1704]  ? clear_bhb_loop+0x30/0x80
[  113.977836][ T1704]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.983744][ T1704] RIP: 0033:0x7f0e65d9de59
[  113.988190][ T1704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.007805][ T1704] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  114.016302][ T1704] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[  114.024270][ T1704] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000
[  114.032235][ T1704] RBP: 00007f0e66d1f090 R08: 0000000000000000 R09: 0000000000000000
[  114.040198][ T1704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.048181][ T1704] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[  114.056177][ T1704]  </TASK>
[  114.491515][ T1719] netlink: 64 bytes leftover after parsing attributes in process `syz.2.409'.
[  114.766948][  T859] Bluetooth: hci0: command 0x1003 tx timeout
[  114.766967][  T679] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  114.966797][ T1731] loop2: detected capacity change from 0 to 256
[  114.980850][ T1731] FAT-fs (loop2): Unrecognized mount option "code�age=869" or missing value
[  115.054918][ T1736] tipc: Failed to remove unknown binding: 66,0,0/0:2271353930/2271353931
[  115.157075][ T1731] fuse: Bad value for 'fd'
[  115.162915][ T1731] loop2: detected capacity change from 0 to 128
[  115.177677][ T1731] FAT-fs (loop2): Unrecognized mount option "I�]�)�Ӓ" or missing value
[  115.298164][  T290] EXT4-fs (loop4): unmounting filesystem.
[  115.795927][ T1765] loop4: detected capacity change from 0 to 4096
[  115.805098][ T1765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.846128][  T290] EXT4-fs (loop4): unmounting filesystem.
[  115.901314][ T1773] netlink: 172 bytes leftover after parsing attributes in process `syz.5.430'.
[  115.913375][ T1773] loop5: detected capacity change from 0 to 256
[  115.970856][ T1771] loop4: detected capacity change from 0 to 4096
[  115.994199][ T1771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  116.050847][  T290] EXT4-fs (loop4): unmounting filesystem.
[  116.187659][  T308] Bluetooth: hci0: Frame reassembly failed (-84)
[  116.255835][ T1793] loop4: detected capacity change from 0 to 256
[  116.291789][ T1789] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.333917][ T1793] FAT-fs (loop4): Directory bread(block 64) failed
[  116.340667][ T1793] FAT-fs (loop4): Directory bread(block 65) failed
[  116.347494][ T1793] FAT-fs (loop4): Directory bread(block 66) failed
[  116.354083][ T1793] FAT-fs (loop4): Directory bread(block 67) failed
[  116.360897][ T1793] FAT-fs (loop4): Directory bread(block 68) failed
[  116.367586][ T1793] FAT-fs (loop4): Directory bread(block 69) failed
[  116.374360][ T1793] FAT-fs (loop4): Directory bread(block 70) failed
[  116.380973][ T1793] FAT-fs (loop4): Directory bread(block 71) failed
[  116.387698][ T1793] FAT-fs (loop4): Directory bread(block 72) failed
[  116.394321][ T1793] FAT-fs (loop4): Directory bread(block 73) failed
[  116.496476][ T1793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1793 comm=syz.4.434
[  116.687444][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  116.687461][   T28] audit: type=1400 audit(116.699:440): avc:  denied  { ioctl } for  pid=1772 comm="syz.5.430" path="socket:[22599]" dev="sockfs" ino=22599 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.881683][ T1813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'.
[  118.207114][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  118.286933][  T679] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  118.297058][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  118.478384][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  118.487018][   T24] usb 3-1: config index 0 descriptor too short (expected 198, got 134)
[  118.495387][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.505577][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.516082][   T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  118.525229][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.533325][   T24] usb 3-1: Product: syz
[  118.537549][   T24] usb 3-1: Manufacturer: syz
[  118.542176][   T24] usb 3-1: SerialNumber: syz
[  118.751243][   T24] usb 3-1: 0:1 : does not exist
[  118.756468][   T24] usb 3-1: unit 0 not found!
[  118.763448][   T24] usb 3-1: USB disconnect, device number 10
[  118.904326][ T1864] FAULT_INJECTION: forcing a failure.
[  118.904326][ T1864] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.922427][ T1864] CPU: 0 PID: 1864 Comm: syz.1.464 Not tainted syzkaller #0
[  118.929764][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  118.939842][ T1864] Call Trace:
[  118.943140][ T1864]  <TASK>
[  118.946080][ T1864]  __dump_stack+0x21/0x24
[  118.950431][ T1864]  dump_stack_lvl+0x110/0x170
[  118.955132][ T1864]  ? __cfi_dump_stack_lvl+0x8/0x8
[  118.960187][ T1864]  ? hva_to_pfn+0x2fe/0xa50
[  118.964710][ T1864]  dump_stack+0x15/0x24
[  118.968881][ T1864]  should_fail_ex+0x3bf/0x510
[  118.973583][ T1864]  should_fail+0xb/0x10
[  118.977763][ T1864]  should_fail_usercopy+0x1a/0x20
[  118.982799][ T1864]  kvm_write_guest_offset_cached+0x1cf/0x2b0
[  118.988083][  T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.988796][ T1864]  kvm_write_guest_cached+0x2f/0x40
[  119.009665][ T1864]  kvm_lapic_sync_to_vapic+0x66b/0x890
[  119.015167][ T1864]  ? __cfi_kvm_lapic_sync_to_vapic+0x10/0x10
[  119.021190][ T1864]  ? vmx_update_cr8_intercept+0xa5/0x250
[  119.026858][ T1864]  vcpu_enter_guest+0x24c8/0x7050
[  119.031916][ T1864]  ? __cfi_avc_has_perm+0x10/0x10
[  119.036962][ T1864]  ? pvclock_gtod_update_fn+0x270/0x270
[  119.042537][ T1864]  ? 0xffffffffa0003f40
[  119.046709][ T1864]  ? is_bpf_text_address+0x177/0x190
[  119.052022][ T1864]  ? kernel_text_address+0xa0/0xd0
[  119.057165][ T1864]  ? __kernel_text_address+0xd/0x30
[  119.062392][ T1864]  ? unwind_get_return_address+0x4d/0x90
[  119.068061][ T1864]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  119.074250][ T1864]  ? arch_stack_walk+0xfc/0x150
[  119.079139][ T1864]  ? stack_trace_save+0xa6/0xf0
[  119.084052][ T1864]  ? vmx_vcpu_pi_load+0x14c/0x840
[  119.089109][ T1864]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[  119.094533][ T1864]  ? _parse_integer_limit+0x18e/0x1d0
[  119.099938][ T1864]  ? __asan_set_shadow_00+0xe/0x10
[  119.105092][ T1864]  ? do_vfs_ioctl+0x1b68/0x1cd0
[  119.106997][ T1871] loop5: detected capacity change from 0 to 128
[  119.109970][ T1864]  ? vmx_vcpu_load_vmcs+0x479/0x730
[  119.110001][ T1864]  ? __this_cpu_preempt_check+0x13/0x20
[  119.126978][ T1864]  ? xfd_validate_state+0x70/0x150
[  119.132120][ T1864]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[  119.137414][ T1864]  ? __local_bh_enable_ip+0x58/0x80
[  119.142623][ T1864]  kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60
[  119.148178][ T1864]  kvm_vcpu_ioctl+0x8ed/0xc00
[  119.152870][ T1864]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  119.158082][ T1864]  ? selinux_file_ioctl+0x3ad/0x4c0
[  119.163293][ T1864]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  119.168877][ T1864]  ? mutex_unlock+0x8f/0x230
[  119.173484][ T1864]  ? __cfi_mutex_unlock+0x10/0x10
[  119.178515][ T1864]  ? __fget_files+0x2d1/0x330
[  119.183203][ T1864]  ? security_file_ioctl+0x95/0xc0
[  119.188382][ T1864]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  119.193616][ T1864]  __se_sys_ioctl+0x12f/0x1b0
[  119.198304][ T1864]  __x64_sys_ioctl+0x7b/0x90
[  119.202899][ T1864]  x64_sys_call+0x58b/0x9a0
[  119.207410][ T1864]  do_syscall_64+0x4c/0xa0
[  119.211835][ T1864]  ? clear_bhb_loop+0x30/0x80
[  119.216508][ T1864]  ? clear_bhb_loop+0x30/0x80
[  119.221191][ T1864]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  119.227205][ T1864] RIP: 0033:0x7f302df9de59
[  119.231635][ T1864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.251353][ T1864] RSP: 002b:00007f302eeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.259802][ T1864] RAX: ffffffffffffffda RBX: 00007f302e225fa0 RCX: 00007f302df9de59
[  119.267779][ T1864] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  119.275756][ T1864] RBP: 00007f302eeee090 R08: 0000000000000000 R09: 0000000000000000
[  119.283748][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.291722][ T1864] R13: 00007f302e226038 R14: 00007f302e225fa0 R15: 00007ffddc371528
[  119.299707][ T1864]  </TASK>
[  119.305730][ T1871] EXT4-fs (loop5): Test dummy encryption mode enabled
[  119.317859][ T1871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  119.334115][  T484] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.335849][ T1871] IPv6: NLM_F_REPLACE set, but no existing node found!
[  119.476981][   T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  119.688675][   T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  119.736078][   T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  119.794879][   T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  119.812697][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.840608][   T24] usb 5-1: Product: syz
[  119.848076][   T24] usb 5-1: Manufacturer: syz
[  119.853303][   T24] usb 5-1: SerialNumber: syz
[  119.868947][ T1900] loop2: detected capacity change from 0 to 4096
[  119.885756][ T1900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  119.955232][  T288] EXT4-fs (loop2): unmounting filesystem.
[  119.977608][ T1907] loop2: detected capacity change from 0 to 512
[  119.984338][ T1907] EXT4-fs: Ignoring removed orlov option
[  119.990691][ T1907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.002985][ T1907] EXT4-fs (loop2): 1 truncate cleaned up
[  120.009101][ T1907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.022589][   T28] audit: type=1400 audit(120.039:441): avc:  denied  { create } for  pid=1906 comm="syz.2.480" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  120.070852][   T28] audit: type=1400 audit(120.039:442): avc:  denied  { unlink } for  pid=1906 comm="syz.2.480" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  120.113689][   T28] audit: type=1400 audit(120.039:443): avc:  denied  { rename } for  pid=1906 comm="syz.2.480" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  120.606937][  T443] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.675867][  T288] EXT4-fs (loop2): unmounting filesystem.
[  120.720518][ T1927] FAULT_INJECTION: forcing a failure.
[  120.720518][ T1927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.733789][ T1927] CPU: 1 PID: 1927 Comm: syz.2.487 Not tainted syzkaller #0
[  120.741095][ T1927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  120.751196][ T1927] Call Trace:
[  120.754494][ T1927]  <TASK>
[  120.757418][ T1927]  __dump_stack+0x21/0x24
[  120.761749][ T1927]  dump_stack_lvl+0x110/0x170
[  120.766427][ T1927]  ? __cfi_dump_stack_lvl+0x8/0x8
[  120.771455][ T1927]  dump_stack+0x15/0x24
[  120.775617][ T1927]  should_fail_ex+0x3bf/0x510
[  120.780307][ T1927]  should_fail+0xb/0x10
[  120.784502][ T1927]  should_fail_usercopy+0x1a/0x20
[  120.789550][ T1927]  _copy_from_iter+0x18a/0xfe0
[  120.794320][ T1927]  ? arch_stack_walk+0xfc/0x150
[  120.799180][ T1927]  ? __cfi__copy_from_iter+0x10/0x10
[  120.804467][ T1927]  ? stack_trace_save+0xa6/0xf0
[  120.809330][ T1927]  ? __stack_depot_save+0x36/0x490
[  120.814445][ T1927]  tun_get_user+0x1fb/0x32f0
[  120.819038][ T1927]  ? _parse_integer+0x2a/0x40
[  120.823718][ T1927]  ? tun_do_read+0x1d70/0x1d70
[  120.828495][ T1927]  ? __kasan_check_write+0x14/0x20
[  120.829013][  T443] usb 1-1: unable to get BOS descriptor or descriptor too short
[  120.833635][ T1927]  ? ref_tracker_alloc+0x319/0x4a0
[  120.842715][  T443] usb 1-1: config index 0 descriptor too short (expected 198, got 134)
[  120.846402][ T1927]  ? __cfi_ref_tracker_alloc+0x10/0x10
[  120.854971][  T443] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.860113][ T1927]  ? avc_policy_seqno+0x1b/0x70
[  120.860138][ T1927]  ? selinux_file_permission+0x2a5/0x510
[  120.870491][  T443] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.875053][ T1927]  tun_chr_write_iter+0x1f9/0x300
[  120.894620][ T1927]  vfs_write+0x5ef/0xd00
[  120.898875][ T1927]  ? __cfi_vfs_write+0x10/0x10
[  120.903652][ T1927]  ? __fget_files+0x2d1/0x330
[  120.908360][ T1927]  ? __fdget_pos+0x1f2/0x380
[  120.912962][ T1927]  ? ksys_write+0x70/0x260
[  120.917400][ T1927]  ksys_write+0x14a/0x260
[  120.921735][ T1927]  ? __cfi_ksys_write+0x10/0x10
[  120.926595][ T1927]  ? debug_smp_processor_id+0x17/0x20
[  120.931979][ T1927]  __x64_sys_write+0x7b/0x90
[  120.936578][ T1927]  x64_sys_call+0x27b/0x9a0
[  120.941092][ T1927]  do_syscall_64+0x4c/0xa0
[  120.945521][ T1927]  ? clear_bhb_loop+0x30/0x80
[  120.950210][ T1927]  ? clear_bhb_loop+0x30/0x80
[  120.954906][ T1927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.960811][ T1927] RIP: 0033:0x7f4d9499de59
[  120.965235][ T1927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.984857][ T1927] RSP: 002b:00007f4d933f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  120.993304][ T1927] RAX: ffffffffffffffda RBX: 00007f4d94c25fa0 RCX: 00007f4d9499de59
[  121.001280][ T1927] RDX: 0000000000000ffe RSI: 0000200000000240 RDI: 0000000000000003
[  121.009252][ T1927] RBP: 00007f4d933f7090 R08: 0000000000000000 R09: 0000000000000000
[  121.017227][ T1927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.025195][ T1927] R13: 00007f4d94c26038 R14: 00007f4d94c25fa0 R15: 00007ffe6e7f0cf8
[  121.033177][ T1927]  </TASK>
[  121.047219][  T443] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  121.056325][  T443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.064414][  T443] usb 1-1: Product: syz
[  121.068646][  T443] usb 1-1: Manufacturer: syz
[  121.073265][  T443] usb 1-1: SerialNumber: syz
[  121.292480][ T1938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'.
[  124.043617][  T679] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  124.087080][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  124.218414][ T1871] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  124.245738][  T497] EXT4-fs (loop5): unmounting filesystem.
[  124.284395][  T443] usb 1-1: 0:1 : does not exist
[  124.289837][  T443] usb 1-1: unit 0 not found!
[  124.298626][   T24] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  124.306565][  T443] usb 1-1: USB disconnect, device number 5
[  124.321902][   T24] usb 5-1: unit 6 not found!
[  124.334391][  T945] udevd[945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  124.364485][   T24] usb 5-1: USB disconnect, device number 8
[  124.394580][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  124.428617][ T1958] fuse: Invalid rootmode
[  124.512030][ T1944] loop4: detected capacity change from 0 to 4096
[  124.529167][ T1944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  124.666810][  T290] EXT4-fs (loop4): unmounting filesystem.
[  124.747260][ T1977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.500'.
[  124.912603][ T1976] loop4: detected capacity change from 0 to 128
[  125.007686][ T1976] EXT4-fs (loop4): Test dummy encryption mode enabled
[  125.117825][ T1976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  125.967775][  T484] Bluetooth: hci0: Frame reassembly failed (-84)
[  125.977547][ T1976] IPv6: NLM_F_REPLACE set, but no existing node found!
[  126.176132][ T1983] loop2: detected capacity change from 0 to 4096
[  126.190289][ T1985] loop5: detected capacity change from 0 to 4096
[  126.208332][ T1983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  126.286910][    C1] ==================================================================
[  126.295047][    C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[  126.302143][    C1] Write of size 8 at addr ffff888113468a00 by task syz.0.514/2012
[  126.309966][    C1] 
[  126.312324][    C1] CPU: 1 PID: 2012 Comm: syz.0.514 Not tainted syzkaller #0
[  126.319633][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  126.329712][    C1] Call Trace:
[  126.333041][    C1]  <IRQ>
[  126.335906][    C1]  __dump_stack+0x21/0x24
[  126.340286][    C1]  dump_stack_lvl+0x110/0x170
[  126.345002][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[  126.350075][    C1]  ? __cfi_trigger_load_balance+0x10/0x10
[  126.355834][    C1]  ? __run_timers+0x341/0x9b0
[  126.360556][    C1]  print_address_description+0x71/0x200
[  126.366137][    C1]  print_report+0x4a/0x60
[  126.370512][    C1]  kasan_report+0x122/0x150
[  126.375044][    C1]  ? __run_timers+0x341/0x9b0
[  126.379754][    C1]  __asan_report_store8_noabort+0x17/0x20
[  126.385506][    C1]  __run_timers+0x341/0x9b0
[  126.390044][    C1]  ? sched_clock_cpu+0x6e/0x260
[  126.394926][    C1]  ? calc_index+0x200/0x200
[  126.399464][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  126.404706][    C1]  run_timer_softirq+0x6a/0xf0
[  126.409503][    C1]  handle_softirqs+0x1d7/0x600
[  126.414298][    C1]  __irq_exit_rcu+0x52/0xf0
[  126.418831][    C1]  irq_exit_rcu+0x9/0x10
[  126.423099][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  126.428773][    C1]  </IRQ>
[  126.431718][    C1]  <TASK>
[  126.434689][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  126.440704][    C1] RIP: 0010:xas_load+0x184/0x3c0
[  126.445669][    C1] Code: 4c 8b 65 b8 74 08 4c 89 e7 e8 58 e8 c2 fc 4d 89 2c 24 45 89 fc 41 83 e4 03 bf 02 00 00 00 4c 89 e6 e8 60 61 7d fc 49 83 fc 02 <0f> 94 c0 49 81 ff fe 00 00 00 0f 92 c1 84 c1 0f 84 0e 01 00 00 4d
[  126.452498][ T1985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  126.465298][    C1] RSP: 0018:ffffc9000e567450 EFLAGS: 00000246
[  126.465322][    C1] RAX: ffffffff84f40790 RBX: 1ffff110269954d0 RCX: ffff88811840d100
[  126.465338][    C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000002
[  126.465351][    C1] RBP: ffffc9000e5674b0 R08: ffffc9000e567577 R09: ffffc9000e567560
[  126.504251][    C1] R10: dffffc0000000000 R11: fffff52001caceaf R12: 0000000000000002
[  126.512254][    C1] R13: ffff888134caa680 R14: 0000000000000023 R15: ffff888134d2c002
[  126.520260][    C1]  ? xas_load+0x180/0x3c0
[  126.524636][    C1]  __filemap_get_folio+0x151/0xa70
[  126.529771][    C1]  ? __cfi___filemap_get_folio+0x10/0x10
[  126.535428][    C1]  shmem_get_folio_gfp+0x2fb/0x20f0
[  126.540653][    C1]  ? xas_find+0x6ec/0x820
[  126.545020][    C1]  shmem_fault+0x1ab/0x670
[  126.549469][    C1]  ? __cfi_shmem_fault+0x10/0x10
[  126.554531][    C1]  ? __kasan_check_write+0x14/0x20
[  126.559666][    C1]  ? vma_data_pages+0xfc/0x130
[  126.564465][    C1]  do_fault+0x19de/0x1e30
[  126.568822][    C1]  ? pte_marker_clear+0x220/0x220
[  126.573872][    C1]  ? check_preemption_disabled+0x71/0x120
[  126.579616][    C1]  ? memcg_rstat_updated+0x56/0x110
[  126.584862][    C1]  handle_mm_fault+0x1363/0x26b0
[  126.589834][    C1]  ? __cfi_handle_mm_fault+0x10/0x10
[  126.595152][    C1]  __get_user_pages+0x34b/0xdb0
[  126.600045][    C1]  ? populate_vma_page_range+0x120/0x120
[  126.605718][    C1]  ? do_mmap+0x8bd/0xdd0
[  126.610007][    C1]  ? userfaultfd_unmap_complete+0x28f/0x310
[  126.615936][    C1]  __mm_populate+0x2ea/0x430
[  126.620556][    C1]  ? __cfi___mm_populate+0x10/0x10
[  126.625699][    C1]  vm_mmap_pgoff+0x271/0x3f0
[  126.630313][    C1]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  126.635450][    C1]  ? __x64_sys_futex+0x100/0x100
[  126.640411][    C1]  ksys_mmap_pgoff+0xf6/0x1d0
[  126.645129][    C1]  ? __kasan_check_write+0x14/0x20
[  126.650279][    C1]  __x64_sys_mmap+0xfa/0x110
[  126.654913][    C1]  x64_sys_call+0x8fd/0x9a0
[  126.659449][    C1]  do_syscall_64+0x4c/0xa0
[  126.663903][    C1]  ? clear_bhb_loop+0x30/0x80
[  126.668610][    C1]  ? clear_bhb_loop+0x30/0x80
[  126.673310][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.679235][    C1] RIP: 0033:0x7f0e65d9de59
[  126.683673][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.703300][    C1] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  126.711741][    C1] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[  126.719740][    C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  126.727742][    C1] RBP: 00007f0e65e33e6f R08: ffffffffffffffff R09: 0000000000000000
[  126.735735][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  126.743727][    C1] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[  126.751742][    C1]  </TASK>
[  126.754778][    C1] 
[  126.757114][    C1] Allocated by task 1871:
[  126.761481][    C1]  kasan_set_track+0x4b/0x70
[  126.766114][    C1]  kasan_save_alloc_info+0x1f/0x30
[  126.771245][    C1]  __kasan_kmalloc+0x95/0xb0
[  126.775867][    C1]  __kmalloc+0xb4/0x1e0
[  126.780049][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[  126.785106][    C1]  hci_uart_tty_ioctl+0x3c4/0xa40
[  126.790162][    C1]  tty_ioctl+0x8ef/0xc60
[  126.794444][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  126.799153][    C1]  __x64_sys_ioctl+0x7b/0x90
[  126.803773][    C1]  x64_sys_call+0x58b/0x9a0
[  126.808304][    C1]  do_syscall_64+0x4c/0xa0
[  126.812753][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.818677][    C1] 
[  126.821012][    C1] Freed by task 1871:
[  126.825007][    C1]  kasan_set_track+0x4b/0x70
[  126.829627][    C1]  kasan_save_free_info+0x2b/0x40
[  126.834680][    C1]  ____kasan_slab_free+0x132/0x180
[  126.839820][    C1]  __kasan_slab_free+0x11/0x20
[  126.844610][    C1]  slab_free_freelist_hook+0xc2/0x190
[  126.850013][    C1]  __kmem_cache_free+0xb7/0x1b0
[  126.854898][    C1]  kfree+0x6f/0xf0
[  126.858641][    C1]  hci_release_dev+0x12a3/0x13b0
[  126.863605][    C1]  bt_host_release+0x82/0x90
[  126.868230][    C1]  device_release+0xa4/0x1d0
[  126.872852][    C1]  kobject_put+0x19d/0x280
[  126.877309][    C1]  put_device+0x1f/0x30
[  126.881489][    C1]  hci_dev_cmd+0x279/0x740
[  126.885925][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  126.890632][    C1]  sock_do_ioctl+0x114/0x330
[  126.895277][    C1]  sock_ioctl+0x475/0x700
[  126.899729][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  126.904433][    C1]  __x64_sys_ioctl+0x7b/0x90
[  126.909046][    C1]  x64_sys_call+0x58b/0x9a0
[  126.913610][    C1]  do_syscall_64+0x4c/0xa0
[  126.918050][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.923978][    C1] 
[  126.926319][    C1] Last potentially related work creation:
[  126.932042][    C1]  kasan_save_stack+0x3a/0x60
[  126.936747][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  126.942234][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  126.948075][    C1]  insert_work+0x51/0x300
[  126.952435][    C1]  __queue_work+0x9d0/0xd50
[  126.956970][    C1]  queue_work_on+0xde/0x150
[  126.961503][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[  126.966466][    C1]  hci_cmd_sync_status+0x53/0x120
[  126.971518][    C1]  hci_dev_cmd+0x357/0x740
[  126.975958][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  126.980661][    C1]  sock_do_ioctl+0x114/0x330
[  126.985270][    C1]  sock_ioctl+0x475/0x700
[  126.989631][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  126.994330][    C1]  __x64_sys_ioctl+0x7b/0x90
[  126.998949][    C1]  x64_sys_call+0x58b/0x9a0
[  127.003475][    C1]  do_syscall_64+0x4c/0xa0
[  127.007921][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  127.013851][    C1] 
[  127.016208][    C1] Second to last potentially related work creation:
[  127.022801][    C1]  kasan_save_stack+0x3a/0x60
[  127.027506][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  127.032899][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  127.038733][    C1]  insert_work+0x51/0x300
[  127.043080][    C1]  __queue_work+0x9d0/0xd50
[  127.047601][    C1]  queue_work_on+0xde/0x150
[  127.052128][    C1]  hci_cmd_timeout+0x191/0x200
[  127.056918][    C1]  process_one_work+0x717/0xc30
[  127.061789][    C1]  worker_thread+0xa4d/0x11d0
[  127.066491][    C1]  kthread+0x281/0x320
[  127.070586][    C1]  ret_from_fork+0x1f/0x30
[  127.075028][    C1] 
[  127.077365][    C1] The buggy address belongs to the object at ffff888113468000
[  127.077365][    C1]  which belongs to the cache kmalloc-8k of size 8192
[  127.091431][    C1] The buggy address is located 2560 bytes inside of
[  127.091431][    C1]  8192-byte region [ffff888113468000, ffff88811346a000)
[  127.104897][    C1] 
[  127.107237][    C1] The buggy address belongs to the physical page:
[  127.113704][    C1] page:ffffea00044d1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113468
[  127.123971][    C1] head:ffffea00044d1a00 order:3 compound_mapcount:0 compound_pincount:0
[  127.132312][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  127.138437][    C1] raw: 4000000000010200 ffffea00044bae00 dead000000000002 ffff888100043500
[  127.147061][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  127.155707][    C1] page dumped because: kasan: bad access detected
[  127.162138][    C1] page_owner tracks the page as allocated
[  127.167842][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 325, tgid 315 (syz.3.4), ts 27130544638, free_ts 27065178049
[  127.187887][    C1]  post_alloc_hook+0x1f5/0x210
[  127.192645][    C1]  prep_new_page+0x1c/0x110
[  127.197154][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[  127.202692][    C1]  __alloc_pages+0x1fa/0x610
[  127.207300][    C1]  alloc_slab_page+0x6e/0xf0
[  127.211875][    C1]  new_slab+0x98/0x3e0
[  127.215935][    C1]  ___slab_alloc+0x70f/0xb70
[  127.220520][    C1]  __slab_alloc+0x5e/0xa0
[  127.224844][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[  127.230303][    C1]  kmalloc_trace+0x29/0xb0
[  127.234706][    C1]  audit_log_d_path+0xc6/0x240
[  127.239464][    C1]  common_lsm_audit+0x330/0x1730
[  127.244413][    C1]  slow_avc_audit+0x1c4/0x240
[  127.249257][    C1]  avc_has_perm+0x1fb/0x250
[  127.253751][    C1]  file_has_perm+0x52d/0x700
[  127.258333][    C1]  file_map_prot_check+0x218/0x270
[  127.263450][    C1] page last free stack trace:
[  127.268123][    C1]  free_unref_page_prepare+0x80c/0x820
[  127.273578][    C1]  free_unref_page+0x93/0x530
[  127.278249][    C1]  __free_pages+0x67/0x100
[  127.282655][    C1]  __free_slab+0xc7/0x1a0
[  127.287075][    C1]  __unfreeze_partials+0x15a/0x190
[  127.292178][    C1]  put_cpu_partial+0xa9/0x100
[  127.296860][    C1]  __slab_free+0x1c4/0x280
[  127.301277][    C1]  ___cache_free+0xbf/0xd0
[  127.305692][    C1]  qlist_free_all+0xc6/0x140
[  127.310272][    C1]  kasan_quarantine_reduce+0x14a/0x170
[  127.315725][    C1]  __kasan_slab_alloc+0x24/0x80
[  127.320571][    C1]  slab_post_alloc_hook+0x4f/0x2d0
[  127.325680][    C1]  __kmem_cache_alloc_node+0x194/0x2d0
[  127.331133][    C1]  __kmalloc+0xa4/0x1e0
[  127.335282][    C1]  fib6_info_alloc+0x34/0xe0
[  127.339865][    C1]  ip6_route_info_create+0x51b/0x14d0
[  127.345235][    C1] 
[  127.347550][    C1] Memory state around the buggy address:
[  127.353185][    C1]  ffff888113468900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.361241][    C1]  ffff888113468980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.369293][    C1] >ffff888113468a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.377341][    C1]                    ^
[  127.381399][    C1]  ffff888113468a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.389494][    C1]  ffff888113468b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.397562][    C1] ==================================================================
[  127.405606][    C1] Disabling lock debugging due to kernel taint
[  127.411942][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  127.423672][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  127.432111][    C1] CPU: 1 PID: 2012 Comm: syz.0.514 Tainted: G    B              syzkaller #0
[  127.440889][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  127.451005][    C1] RIP: 0010:__queue_work+0x582/0xd50
[  127.456331][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03
[  127.475960][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  127.482056][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811840d100
[  127.490057][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  127.498054][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[  127.506046][    C1] R10: dffffc0000000000 R11: ffffed102268d139 R12: ffff8881134689c8
[  127.514044][    C1] R13: ffff888130bea800 R14: 0000000000000000 R15: 000000007fffffff
[  127.522039][    C1] FS:  00007f0e66d1f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  127.530994][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  127.537606][    C1] CR2: 00007faea6ba3000 CR3: 000000011568b000 CR4: 00000000003506a0
[  127.545612][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  127.553617][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  127.561620][    C1] Call Trace:
[  127.564926][    C1]  <IRQ>
[  127.567794][    C1]  delayed_work_timer_fn+0x61/0x80
[  127.572936][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  127.578775][    C1]  call_timer_fn+0x46/0x2a0
[  127.583331][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  127.589188][    C1]  __run_timers+0x672/0x9b0
[  127.593732][    C1]  ? calc_index+0x200/0x200
[  127.598269][    C1]  ? kvm_sched_clock_read+0x18/0x40
[  127.603503][    C1]  run_timer_softirq+0x6a/0xf0
[  127.608295][    C1]  handle_softirqs+0x1d7/0x600
[  127.613090][    C1]  __irq_exit_rcu+0x52/0xf0
[  127.617613][    C1]  irq_exit_rcu+0x9/0x10
[  127.621884][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  127.627551][    C1]  </IRQ>
[  127.630499][    C1]  <TASK>
[  127.633444][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  127.639457][    C1] RIP: 0010:xas_load+0x184/0x3c0
[  127.644432][    C1] Code: 4c 8b 65 b8 74 08 4c 89 e7 e8 58 e8 c2 fc 4d 89 2c 24 45 89 fc 41 83 e4 03 bf 02 00 00 00 4c 89 e6 e8 60 61 7d fc 49 83 fc 02 <0f> 94 c0 49 81 ff fe 00 00 00 0f 92 c1 84 c1 0f 84 0e 01 00 00 4d
[  127.664060][    C1] RSP: 0018:ffffc9000e567450 EFLAGS: 00000246
[  127.670181][    C1] RAX: ffffffff84f40790 RBX: 1ffff110269954d0 RCX: ffff88811840d100
[  127.678174][    C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000002
[  127.686157][    C1] RBP: ffffc9000e5674b0 R08: ffffc9000e567577 R09: ffffc9000e567560
[  127.694148][    C1] R10: dffffc0000000000 R11: fffff52001caceaf R12: 0000000000000002
[  127.702140][    C1] R13: ffff888134caa680 R14: 0000000000000023 R15: ffff888134d2c002
[  127.710138][    C1]  ? xas_load+0x180/0x3c0
[  127.714512][    C1]  __filemap_get_folio+0x151/0xa70
[  127.719651][    C1]  ? __cfi___filemap_get_folio+0x10/0x10
[  127.725320][    C1]  shmem_get_folio_gfp+0x2fb/0x20f0
[  127.730546][    C1]  ? xas_find+0x6ec/0x820
[  127.734917][    C1]  shmem_fault+0x1ab/0x670
[  127.739364][    C1]  ? __cfi_shmem_fault+0x10/0x10
[  127.744335][    C1]  ? __kasan_check_write+0x14/0x20
[  127.749468][    C1]  ? vma_data_pages+0xfc/0x130
[  127.754354][    C1]  do_fault+0x19de/0x1e30
[  127.758716][    C1]  ? pte_marker_clear+0x220/0x220
[  127.763770][    C1]  ? check_preemption_disabled+0x71/0x120
[  127.769526][    C1]  ? memcg_rstat_updated+0x56/0x110
[  127.774759][    C1]  handle_mm_fault+0x1363/0x26b0
[  127.779718][    C1]  ? __cfi_handle_mm_fault+0x10/0x10
[  127.785037][    C1]  __get_user_pages+0x34b/0xdb0
[  127.789919][    C1]  ? populate_vma_page_range+0x120/0x120
[  127.795577][    C1]  ? do_mmap+0x8bd/0xdd0
[  127.799846][    C1]  ? userfaultfd_unmap_complete+0x28f/0x310
[  127.805770][    C1]  __mm_populate+0x2ea/0x430
[  127.810392][    C1]  ? __cfi___mm_populate+0x10/0x10
[  127.815538][    C1]  vm_mmap_pgoff+0x271/0x3f0
[  127.820153][    C1]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  127.825291][    C1]  ? __x64_sys_futex+0x100/0x100
[  127.830257][    C1]  ksys_mmap_pgoff+0xf6/0x1d0
[  127.834969][    C1]  ? __kasan_check_write+0x14/0x20
[  127.840111][    C1]  __x64_sys_mmap+0xfa/0x110
[  127.844724][    C1]  x64_sys_call+0x8fd/0x9a0
[  127.849261][    C1]  do_syscall_64+0x4c/0xa0
[  127.853703][    C1]  ? clear_bhb_loop+0x30/0x80
[  127.858413][    C1]  ? clear_bhb_loop+0x30/0x80
[  127.863114][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  127.869038][    C1] RIP: 0033:0x7f0e65d9de59
[  127.873503][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.893158][    C1] RSP: 002b:00007f0e66d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  127.901600][    C1] RAX: ffffffffffffffda RBX: 00007f0e66025fa0 RCX: 00007f0e65d9de59
[  127.909609][    C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  127.917642][    C1] RBP: 00007f0e65e33e6f R08: ffffffffffffffff R09: 0000000000000000
[  127.925635][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  127.933629][    C1] R13: 00007f0e66026038 R14: 00007f0e66025fa0 R15: 00007fffcc130148
[  127.941634][    C1]  </TASK>
[  127.944701][    C1] Modules linked in:
[  127.948641][    C1] ---[ end trace 0000000000000000 ]---
[  127.954110][    C1] RIP: 0010:__queue_work+0x582/0xd50
[  127.959427][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03
[  127.979056][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  127.985151][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811840d100
[  127.993146][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  128.001138][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[  128.009218][    C1] R10: dffffc0000000000 R11: ffffed102268d139 R12: ffff8881134689c8
[  128.017300][    C1] R13: ffff888130bea800 R14: 0000000000000000 R15: 000000007fffffff
[  128.025295][    C1] FS:  00007f0e66d1f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  128.034253][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.040860][    C1] CR2: 00007faea6ba3000 CR3: 000000011568b000 CR4: 00000000003506a0
[  128.048862][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  128.056854][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  128.064872][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  128.072650][    C1] Kernel Offset: disabled
[  128.076986][    C1] Rebooting in 86400 seconds..