last executing test programs:

7.540655776s ago: executing program 0 (id=5204):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)

6.824627618s ago: executing program 0 (id=5216):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000320000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x268, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x8, 0x4)
connect$inet6(r8, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, 0x0)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x2)

5.997719273s ago: executing program 2 (id=5228):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000000c0)='./file1\x00', 0x84000614)
rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00')
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0xa4, 0x0, &(0x7f0000002300)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000020c0)={@fda={0x66646185, 0x9, 0x1, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000001040)=""/4096, 0x1000, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000002040)=""/81, 0x51, 0x1, 0x37}}, &(0x7f0000002140)={0x0, 0x20, 0x48}}}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002240)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000002180)=""/181, 0xb5, 0x1, 0x35}}, &(0x7f00000022c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000002000010000000000000000000a804000000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001b9cb277fd0192120eff1e184674e25b2230884d1e123e9eff298dc2583dbc72faa8e608daafa015d5ed22021900021c7c734a15fe937d6904c7d054eb6cb7448a8c0bbb765546e9eec27631c73cf294c75358e2b2cc0e6eb5943574bd267b398148fa6978db7db252ec301891df2a863d7cd5f0b5c875905ab65994521c6fe19771d1a326ee741b004a8"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x60bf, 0x8, 0x3ff}})
socket$nl_route(0x10, 0x3, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0xb})

5.924153486s ago: executing program 0 (id=5229):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4)
recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) (fail_nth: 1)
sendto(r0, &(0x7f00000007c0)='[', 0x1, 0x8010, 0x0, 0x0)

5.201896178s ago: executing program 0 (id=5234):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000640)=""/240, 0xf0)

5.201630108s ago: executing program 0 (id=5235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))

5.188693329s ago: executing program 0 (id=5236):
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f00000005c0)="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", &(0x7f0000002600)="3679655aff2d0737dac4c64e1472e3434e911d22e870a45168c07ea4bd00fd14250bff25778007910fd681322d6e09cb12da1d149c98c9f8c53e3666005cab54514d7f7eed969ddc7bec91ba70d03dbb9726c9919bf3a00d372fd57d048923935a914471afb6e22ad14268828594fd7ab6054d96a1b6f61c5e7a242984c0394f3855beb85124ca45dcda16d979c28ff14f09538fa4edc2e6b0f53cdd327a6ee530540b74febe10b225d1ff5754b78702f94e46ee4e9f3ab882b273b6371df3f3cf15fd55b3c2c8dcb7085e8a7bebfd33c79aec8053b0dd465d6364"}}, &(0x7f0000bbdffc))
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
ftruncate(r0, 0x81fd)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x62020600)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
socket$nl_xfrm(0x10, 0x3, 0x6)
clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x1000000, 0x4100, 0xd, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x80, 0x0, 0x9f, 0x2, 0x4000000000014, 0x9, 0x2ffffffffffd, 0xd, 0x8001, 0x1, 0x2, 0x6, 0xc5e3, 0xe})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r5 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6)
fallocate(r5, 0x8, 0x0, 0x10000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x1, 0x8ffff)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r7, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

3.926285738s ago: executing program 3 (id=5244):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x3, "0c8ac4"}, 0x0, 0x0, 0x0, 0x0})

3.20665574s ago: executing program 3 (id=5249):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x100000000000000c, 0x1, [0x0, 0x0, 0x3, 0x401, 0x1], [0x9, 0x101, 0x7, 0x1, 0xd, 0x2, 0x10, 0x7, 0xfffffffffffff7f7, 0xffffffff, 0x10000, 0x1, 0x9, 0x5, 0x2, 0x3d2, 0x9, 0x10, 0x402, 0x5de, 0x9, 0x7, 0x3, 0x8001, 0x40000000000009, 0x2, 0x9, 0x547, 0xca66, 0x46, 0x8, 0xa694, 0x0, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffe, 0x4, 0x6, 0x5, 0x5, 0x8, 0xfffffffffffffffd, 0x1, 0x400000000, 0x6, 0x8, 0x4, 0x4, 0x3, 0x1, 0xd, 0x2, 0x8, 0xf, 0x8000003, 0x1f1, 0x1, 0x2, 0xbba, 0x701bf6c6, 0xf9, 0x8, 0x8, 0xf, 0x8000000000000000, 0xfffffffffffffffb, 0xb, 0x66fe, 0x6, 0x7, 0x1, 0x1, 0x8, 0x544b, 0x2, 0x5, 0x1000, 0x4, 0x1b12, 0x8001, 0x2262, 0x0, 0xfff, 0x9, 0x6, 0x0, 0x4, 0xb554, 0xfff, 0x4, 0x805, 0x10001, 0x8, 0x100000000, 0x2cf, 0x5, 0x400000000000, 0x5, 0x44, 0x565a, 0x8001, 0xb40, 0x81, 0x9, 0x100000001, 0x7fff, 0x8, 0x9, 0x8000000000000001, 0x9, 0x3, 0x3ff, 0x3fd, 0x2, 0xb, 0xfc, 0x0, 0x0, 0x1]})
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x80000000, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x3, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000003, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x1b9b, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x3, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x4, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3.183842541s ago: executing program 3 (id=5251):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inoB, \x00\x00\x00\x00'])
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003780)={0x0, [{0x5, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x97, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x10000561, 0x0}, {0x5, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x95b, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x3, 0x8, 0x1, &(0x7f0000002780)='E'}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x8})
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f0000000340)=ANY=[], 0x200002e6)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x141202, 0x0, 0x8}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x2c, 0x28, 0x220, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0xa, 0xfff3}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4800)
mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)

3.126203173s ago: executing program 4 (id=5252):

3.125460053s ago: executing program 4 (id=5253):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000320000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x268, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x8, 0x4)
connect$inet6(r8, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, 0x0)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x2)

2.771634413s ago: executing program 2 (id=5254):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x158, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0xd8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

2.756092624s ago: executing program 2 (id=5255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x4, 0x0, &(0x7f0000000200)=0xd9c990bae94e58c1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x1c, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.534015191s ago: executing program 1 (id=5261):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x200)
write$tun(r3, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62000000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000240)={'filter\x00', 0x0, [0x9, 0x1, 0x2, 0xff, 0x3ff]}, &(0x7f0000000080)=0x54)

2.197818242s ago: executing program 4 (id=5262):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x100000000000000c, 0x1, [0x0, 0x0, 0x3, 0x401, 0x1], [0x9, 0x101, 0x7, 0x1, 0xd, 0x2, 0x10, 0x7, 0xfffffffffffff7f7, 0xffffffff, 0x10000, 0x1, 0x9, 0x5, 0x2, 0x3d2, 0x9, 0x10, 0x402, 0x5de, 0x9, 0x7, 0x3, 0x8001, 0x40000000000009, 0x2, 0x9, 0x547, 0xca66, 0x46, 0x8, 0xa694, 0x0, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffe, 0x4, 0x6, 0x5, 0x5, 0x8, 0xfffffffffffffffd, 0x1, 0x400000000, 0x6, 0x8, 0x4, 0x4, 0x3, 0x1, 0xd, 0x2, 0x8, 0xf, 0x8000003, 0x1f1, 0x1, 0x2, 0xbba, 0x701bf6c6, 0xf9, 0x8, 0x8, 0xf, 0x8000000000000000, 0xfffffffffffffffb, 0xb, 0x66fe, 0x6, 0x7, 0x1, 0x1, 0x8, 0x544b, 0x2, 0x5, 0x1000, 0x4, 0x1b12, 0x8001, 0x2262, 0x0, 0xfff, 0x9, 0x6, 0x0, 0x4, 0xb554, 0xfff, 0x4, 0x805, 0x10001, 0x8, 0x100000000, 0x2cf, 0x5, 0x400000000000, 0x5, 0x44, 0x565a, 0x8001, 0xb40, 0x81, 0x9, 0x100000001, 0x7fff, 0x8, 0x9, 0x8000000000000001, 0x9, 0x3, 0x3ff, 0x3fd, 0x2, 0xb, 0xfc, 0x0, 0x0, 0x1]})
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x80000000, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x3, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000003, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x1b9b, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x3, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x4, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.115422544s ago: executing program 4 (id=5263):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000340))

2.092899544s ago: executing program 4 (id=5264):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x60040000)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073114bb587ba8821ff0056d2ba0e394d34b9a0ade1b9ac"], 0x58)
r6 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r6, &(0x7f0000000240), 0xb375)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x3000)=nil)
socket(0x10, 0x3, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000000)={0x4000004})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x803, 0x0, 0x0, 0x9}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0xffbfffc3, 0x4e)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002340)={0x1, 'veth1_macvtap\x00', {}, 0x96})

2.001789937s ago: executing program 3 (id=5265):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x0, 0x10000})
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48)
syz_clone(0x10000000, &(0x7f0000001380)="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", 0x1000, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="7bc3d1390f74400228e2ed99ec64")
sendmsg$nl_route(r5, 0x0, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'pimreg\x00'})
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, 0x0, 0x0)
readv(r1, &(0x7f0000001340)=[{0x0}, {&(0x7f00000011c0)=""/15, 0xf}], 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x63, 0x0, 0x8}]}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x65)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0)

1.118929985s ago: executing program 1 (id=5266):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x158, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0xd8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

1.117974795s ago: executing program 3 (id=5267):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'filter\x00', 0x0, [0x9, 0x1, 0x2, 0xff, 0x3ff]}, &(0x7f0000000080)=0x54)

1.074831406s ago: executing program 2 (id=5268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.073203636s ago: executing program 3 (id=5269):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34)
fcntl$lock(r9, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700})
close(r0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = accept$nfc_llcp(r2, 0x0, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFPFLAGS(r11, 0x8934, &(0x7f0000000480)={'nr0\x00'})
write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x0, 0x4, 0x6}}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x58da}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x94)

1.069671726s ago: executing program 1 (id=5270):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x1050c2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

838.930584ms ago: executing program 1 (id=5271):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000320000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x268, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x8, 0x4)
connect$inet6(r8, 0x0, 0x0)
sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, 0x0)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x2)

491.783124ms ago: executing program 4 (id=5272):
pipe2$9p(&(0x7f0000000080), 0x84880)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006)
write$char_usb(r4, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x50)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

322.49152ms ago: executing program 2 (id=5273):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @none, 0x101, 0x1}, 0xe)
syz_btf_id_by_name$bpf_lsm(&(0x7f00000000c0)='bpf_lsm_unix_stream_connect\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x4, [@struct={0xa, 0x2, 0x0, 0x4, 0x0, 0xfffffffb, [{0xf, 0x4, 0x100}, {0x7, 0x2, 0xffff}]}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x7}, {0x3, 0x5, 0x4}, {0x1, 0x6, 0xffff}, {0x1, 0x8b, 0x8}], ',M'}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000100)=""/158, 0x80, 0x9e, 0x1, 0x3}, 0x28)

99.024916ms ago: executing program 1 (id=5274):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x100000000000000c, 0x1, [0x0, 0x0, 0x3, 0x401, 0x1], [0x9, 0x101, 0x7, 0x1, 0xd, 0x2, 0x10, 0x7, 0xfffffffffffff7f7, 0xffffffff, 0x10000, 0x1, 0x9, 0x5, 0x2, 0x3d2, 0x9, 0x10, 0x402, 0x5de, 0x9, 0x7, 0x3, 0x8001, 0x40000000000009, 0x2, 0x9, 0x547, 0xca66, 0x46, 0x8, 0xa694, 0x0, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffe, 0x4, 0x6, 0x5, 0x5, 0x8, 0xfffffffffffffffd, 0x1, 0x400000000, 0x6, 0x8, 0x4, 0x4, 0x3, 0x1, 0xd, 0x2, 0x8, 0xf, 0x8000003, 0x1f1, 0x1, 0x2, 0xbba, 0x701bf6c6, 0xf9, 0x8, 0x8, 0xf, 0x8000000000000000, 0xfffffffffffffffb, 0xb, 0x66fe, 0x6, 0x7, 0x1, 0x1, 0x8, 0x544b, 0x2, 0x5, 0x1000, 0x4, 0x1b12, 0x8001, 0x2262, 0x0, 0xfff, 0x9, 0x6, 0x0, 0x4, 0xb554, 0xfff, 0x4, 0x805, 0x10001, 0x8, 0x100000000, 0x2cf, 0x5, 0x400000000000, 0x5, 0x44, 0x565a, 0x8001, 0xb40, 0x81, 0x9, 0x100000001, 0x7fff, 0x8, 0x9, 0x8000000000000001, 0x9, 0x3, 0x3ff, 0x3fd, 0x2, 0xb, 0xfc, 0x0, 0x0, 0x1]})
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x80000000, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x3, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000003, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x1b9b, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x3, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x4, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

30.011458ms ago: executing program 1 (id=5275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inoB, \x00\x00\x00\x00'])
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003780)={0x0, [{0x5, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x40, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x97, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x2, 0x0, 0x10000561, 0x0}, {0x5, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x95b, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x3, 0x8, 0x1, &(0x7f0000002780)='E'}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x8})
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f0000000340)=ANY=[], 0x200002e6)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x141202, 0x0, 0x8}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@newtclass={0x2c, 0x28, 0x220, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0xa, 0xfff3}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4800)
mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)

0s ago: executing program 2 (id=5276):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
sched_setscheduler(0x0, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r0, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
accept4$unix(r0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ngs: Mfr=1, Product=2, SerialNumber=3
[  917.297694][   T40] usb 5-1: Product: syz
[  917.307527][   T40] usb 5-1: Manufacturer: syz
[  917.317800][   T40] usb 5-1: SerialNumber: syz
[  917.342405][  T338] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  917.353762][  T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.367291][  T338] usb 1-1: Product: syz
[  917.373850][   T28] audit: type=1400 audit(1780714042.955:1868): avc:  denied  { mount } for  pid=15785 comm="syz.1.4632" name="/" dev="configfs" ino=14091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  917.409795][  T338] usb 1-1: Manufacturer: syz
[  917.414449][  T338] usb 1-1: SerialNumber: syz
[  917.594714][   T28] audit: type=1400 audit(1780714043.175:1869): avc:  denied  { read } for  pid=15789 comm="syz.2.4633" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  917.646465][  T338] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  917.664229][  T338] usb 1-1: USB disconnect, device number 53
[  917.670907][T15793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4633'.
[  917.680748][  T338] usblp0: removed
[  917.935085][   T40] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:d9:44:5b:cb:80
[  917.950523][   T40] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[  917.961463][   T40] usb 5-1: USB disconnect, device number 53
[  918.269834][  T338] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  918.471007][  T338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  918.520038][  T338] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  918.529411][  T338] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  918.538631][  T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.549340][  T338] usb 4-1: config 0 descriptor??
[  919.189826][  T338] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  919.311881][T15855] xt_hashlimit: size too large, truncated to 1048576
[  919.380893][  T338] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  919.394708][  T338] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  919.409310][  T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.421344][  T338] usb 3-1: Product: syz
[  919.425586][  T338] usb 3-1: Manufacturer: syz
[  919.430502][  T338] usb 3-1: SerialNumber: syz
[  919.443549][  T338] usb 3-1: config 0 descriptor??
[  919.594596][   T28] audit: type=1400 audit(2000000001.630:1870): avc:  denied  { create } for  pid=15860 comm="syz.4.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  919.658133][T15379] usb 3-1: USB disconnect, device number 71
[  919.749133][   T28] audit: type=1400 audit(2000000001.780:1871): avc:  denied  { ioctl } for  pid=15866 comm="syz.1.4648" path="socket:[111959]" dev="sockfs" ino=111959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  919.774294][   T28] audit: type=1400 audit(2000000001.790:1872): avc:  denied  { bind } for  pid=15866 comm="syz.1.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  920.039854][T15379] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  920.221275][T15379] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  920.232411][T15379] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  920.242545][T15379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.251090][T15379] usb 3-1: Product: syz
[  920.255634][T15379] usb 3-1: Manufacturer: syz
[  920.260977][T15379] usb 3-1: SerialNumber: syz
[  920.282424][T15379] usb 3-1: config 0 descriptor??
[  920.493951][T15379] usb 3-1: USB disconnect, device number 72
[  920.746949][T15887] loop0: detected capacity change from 0 to 256
[  920.762138][T15887] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  920.770057][T15887] FAT-fs (loop0): Filesystem has been set read-only
[  921.023902][  T315] usb 4-1: USB disconnect, device number 54
[  921.127971][   T28] audit: type=1400 audit(2000000003.160:1873): avc:  denied  { wake_alarm } for  pid=15890 comm="syz.3.4659" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  921.494591][T15891] 9pnet_fd: Insufficient options for proto=fd
[  921.575096][T15898] fuse: Unknown parameter '0xffffffffffffffff'
[  921.581376][   T28] audit: type=1400 audit(2000000003.610:1874): avc:  denied  { create } for  pid=15897 comm="syz.3.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  921.593706][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4660'.
[  921.623751][T15898] overlayfs: conflicting options: userxattr,metacopy=on
[  921.656949][T15904] loop0: detected capacity change from 0 to 256
[  921.665909][T15905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2804 sclass=netlink_route_socket pid=15905 comm=syz.3.4663
[  921.704909][T15904] FAT-fs (loop0): Directory bread(block 64) failed
[  921.725501][T15904] FAT-fs (loop0): Directory bread(block 65) failed
[  921.741663][T15904] FAT-fs (loop0): Directory bread(block 66) failed
[  921.751161][T15904] FAT-fs (loop0): Directory bread(block 67) failed
[  921.778116][T15904] FAT-fs (loop0): Directory bread(block 68) failed
[  921.791738][T15904] FAT-fs (loop0): Directory bread(block 69) failed
[  921.800707][T15904] FAT-fs (loop0): Directory bread(block 70) failed
[  921.895837][T15904] FAT-fs (loop0): Directory bread(block 71) failed
[  921.899429][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  921.909748][T15904] FAT-fs (loop0): Directory bread(block 72) failed
[  921.917957][T15904] FAT-fs (loop0): Directory bread(block 73) failed
[  921.929203][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  921.949826][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  921.949842][   T28] audit: type=1400 audit(2000000003.970:1876): avc:  denied  { create } for  pid=15908 comm="syz.3.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  921.984299][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.015893][   T28] audit: type=1400 audit(2000000003.970:1877): avc:  denied  { connect } for  pid=15908 comm="syz.3.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  922.046964][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.059031][   T28] audit: type=1400 audit(2000000004.090:1878): avc:  denied  { write } for  pid=15902 comm="syz.0.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  922.117435][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.119948][   T28] audit: type=1326 audit(2000000004.140:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15892 comm="syz.1.4657" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb951d9ce59 code=0x0
[  922.180301][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.210393][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.235703][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.255359][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.347121][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  922.369615][   T28] audit: type=1400 audit(2000000004.400:1880): avc:  denied  { create } for  pid=15920 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  922.496761][T15926] loop0: detected capacity change from 0 to 4096
[  922.512145][T15926] EXT4-fs: Ignoring removed orlov option
[  922.539390][T15926] EXT4-fs (loop0): Test dummy encryption mode enabled
[  922.563808][T15926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  922.605781][T15926] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  922.626399][   T28] audit: type=1400 audit(2000000004.660:1881): avc:  denied  { write } for  pid=15925 comm="syz.0.4666" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  922.689843][   T28] audit: type=1400 audit(2000000004.690:1882): avc:  denied  { add_name } for  pid=15925 comm="syz.0.4666" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  922.809870][   T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  923.002442][   T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  923.011606][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.019665][   T24] usb 5-1: Product: syz
[  923.024129][   T24] usb 5-1: Manufacturer: syz
[  923.028747][   T24] usb 5-1: SerialNumber: syz
[  923.034726][   T24] usb 5-1: config 0 descriptor??
[  923.040730][   T24] hub 5-1:0.0: bad descriptor, ignoring hub
[  923.046704][   T24] hub: probe of 5-1:0.0 failed with error -5
[  923.179899][ T7263] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  923.359828][ T7263] usb 4-1: Using ep0 maxpacket: 32
[  923.360261][ T3032] usb 5-1: USB disconnect, device number 54
[  923.367316][ T7263] usb 4-1: unable to get BOS descriptor or descriptor too short
[  923.391215][ T7263] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  923.401714][T10355] EXT4-fs (loop0): unmounting filesystem.
[  923.407586][ T7263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.416033][ T7263] usb 4-1: Product: syz
[  923.420420][ T7263] usb 4-1: Manufacturer: syz
[  923.425039][ T7263] usb 4-1: SerialNumber: syz
[  923.648249][ T7263] usb 4-1: unit 4 not found!
[  923.652965][ T7263] usb 4-1: unit 0 not found!
[  923.859349][ T7263] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  923.867807][ T7263] usb 4-1: unit 4 not found!
[  923.872663][  T315] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[  923.880352][ T7263] usb 4-1: unit 0 not found!
[  923.886691][ T7263] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[  923.889914][ T2793] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  923.896709][ T7263] usb 4-1: unit 4 not found!
[  923.906040][ T7263] usb 4-1: unit 0 not found!
[  923.924793][ T7263] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[  923.940991][ T8718] udevd[8718]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  923.958331][ T7263] usb 4-1: USB disconnect, device number 55
[  924.062735][  T315] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  924.071920][  T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.079993][  T315] usb 3-1: Product: syz
[  924.084219][  T315] usb 3-1: Manufacturer: syz
[  924.088881][  T315] usb 3-1: SerialNumber: syz
[  924.102603][ T2793] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  924.111825][ T2793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.120035][ T2793] usb 1-1: Product: syz
[  924.124381][ T2793] usb 1-1: Manufacturer: syz
[  924.129034][ T2793] usb 1-1: SerialNumber: syz
[  924.339212][  T315] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  924.359860][  T315] usb 3-1: USB disconnect, device number 73
[  924.388133][  T315] usblp0: removed
[  924.440900][   T28] audit: type=1400 audit(2000000006.480:1883): avc:  denied  { setopt } for  pid=15968 comm="syz.3.4684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  924.479804][   T28] audit: type=1400 audit(2000000006.480:1884): avc:  denied  { bind } for  pid=15968 comm="syz.3.4684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  924.561556][ T2793] rtl8150 1-1:1.0: couldn't reset the device
[  924.569014][ T2793] rtl8150: probe of 1-1:1.0 failed with error -5
[  924.582150][T15972] FAULT_INJECTION: forcing a failure.
[  924.582150][T15972] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  924.603436][ T2793] usb 1-1: USB disconnect, device number 54
[  924.620311][T15972] CPU: 0 PID: 15972 Comm: syz.3.4685 Not tainted syzkaller #0
[  924.627818][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  924.637909][T15972] Call Trace:
[  924.641224][T15972]  <TASK>
[  924.644192][T15972]  __dump_stack+0x21/0x24
[  924.648741][T15972]  dump_stack_lvl+0x110/0x170
[  924.653452][T15972]  ? __cfi_dump_stack_lvl+0x8/0x8
[  924.658508][T15972]  dump_stack+0x15/0x24
[  924.662706][T15972]  should_fail_ex+0x3d4/0x520
[  924.667492][T15972]  should_fail+0xb/0x10
[  924.671680][T15972]  should_fail_usercopy+0x1a/0x20
[  924.676720][T15972]  strncpy_from_user+0x24/0x2d0
[  924.681692][T15972]  ? getname_flags+0xb9/0x500
[  924.686434][T15972]  getname_flags+0xf4/0x500
[  924.690954][T15972]  __x64_sys_rename+0x5f/0x90
[  924.695731][T15972]  x64_sys_call+0x300/0x9a0
[  924.700267][T15972]  do_syscall_64+0x4c/0xa0
[  924.704707][T15972]  ? clear_bhb_loop+0x30/0x80
[  924.709461][T15972]  ? clear_bhb_loop+0x30/0x80
[  924.714158][T15972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  924.720144][T15972] RIP: 0033:0x7f30f6f9ce59
[  924.724587][T15972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  924.744221][T15972] RSP: 002b:00007f30f7dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  924.752729][T15972] RAX: ffffffffffffffda RBX: 00007f30f7215fa0 RCX: 00007f30f6f9ce59
[  924.760734][T15972] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00002000000000c0
[  924.768730][T15972] RBP: 00007f30f7dec090 R08: 0000000000000000 R09: 0000000000000000
[  924.776741][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  924.784765][T15972] R13: 00007f30f7216038 R14: 00007f30f7215fa0 R15: 00007ffc95001c98
[  924.792784][T15972]  </TASK>
[  925.085789][   T28] audit: type=1400 audit(2000000007.120:1885): avc:  denied  { write } for  pid=15977 comm="syz.3.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  925.268070][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.284997][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.290759][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.296561][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.302318][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.308007][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.313722][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.319414][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.325123][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.330822][T15990] sit: non-ECT from 0.0.0.0 with TOS=0x2
[  925.429829][ T2793] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  925.719946][ T2793] usb 3-1: Using ep0 maxpacket: 32
[  925.730026][ T2793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  925.748424][ T2793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  925.758259][ T2793] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  925.767449][ T2793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.774044][T15995] xt_hashlimit: size too large, truncated to 1048576
[  925.787865][ T2793] usb 3-1: config 0 descriptor??
[  925.800843][ T2793] hub 3-1:0.0: USB hub found
[  925.901597][T16003] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.908779][T16003] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.977975][T16000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  926.307219][T16000] device veth0_vlan left promiscuous mode
[  926.313752][T16000] device veth0_vlan entered promiscuous mode
[  926.321288][T16000] device veth1_macvtap left promiscuous mode
[  926.328256][T16000] device veth1_macvtap entered promiscuous mode
[  926.340598][ T2793] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  926.345788][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  926.360282][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  926.372999][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  926.387507][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.394604][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.427969][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  926.443513][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  926.459099][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.466185][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.482650][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  926.493074][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  926.501565][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  926.513324][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  926.528641][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  926.544042][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  926.552342][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  926.560657][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  926.563833][ T2793] usbhid 3-1:0.0: can't add hid device: -71
[  926.572053][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  926.582621][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  926.589978][ T2793] usbhid: probe of 3-1:0.0 failed with error -71
[  926.591914][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  926.605458][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  926.613882][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  926.622454][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  926.632465][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  926.644787][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  926.651179][ T2793] usb 3-1: USB disconnect, device number 74
[  926.662965][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  926.742092][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  926.750657][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  926.759058][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  926.771320][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  926.779401][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  926.787101][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  926.794713][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  926.802992][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  926.811313][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  926.830208][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  926.886445][T16025] capability: warning: `syz.4.4701' uses 32-bit capabilities (legacy support in use)
[  927.076899][   T28] audit: type=1400 audit(2000000009.110:1886): avc:  denied  { create } for  pid=16031 comm="syz.0.4706" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  927.129237][T16034] capability: warning: `syz.0.4707' uses deprecated v2 capabilities in a way that may be insecure
[  927.686386][T16048] __nla_validate_parse: 14 callbacks suppressed
[  927.686449][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4712'.
[  927.721940][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4712'.
[  927.752282][T16048] device dummy0 entered promiscuous mode
[  927.770019][T16049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4712'.
[  927.869828][  T321] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  928.003345][T16061] xt_hashlimit: size too large, truncated to 1048576
[  928.062389][  T321] usb 5-1: unable to get BOS descriptor or descriptor too short
[  928.078158][  T321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  928.118662][  T321] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  928.151039][  T321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  928.175082][T16062] loop0: detected capacity change from 0 to 8192
[  928.183735][  T321] usb 5-1: string descriptor 0 read error: -22
[  928.192279][  T321] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  928.207531][  T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.235244][   T28] audit: type=1400 audit(2000000010.270:1887): avc:  denied  { append } for  pid=16060 comm="syz.0.4717" name="pfkey" dev="proc" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  928.301093][T16062] input: syz1 as /devices/virtual/input/input86
[  928.686666][T16066] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4718'.
[  928.713247][  T321] usb 5-1: Can't set UAC3 power state to 1 for id 10
[  928.731091][  T321] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  928.774079][  T321] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  928.880646][  T321] usb 5-1: USB disconnect, device number 55
[  929.229913][   T24] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  929.463189][   T24] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  929.487882][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.506919][   T24] usb 4-1: Product: syz
[  929.511846][   T24] usb 4-1: Manufacturer: syz
[  929.516595][   T24] usb 4-1: SerialNumber: syz
[  930.257732][   T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  930.286282][   T24] usb 4-1: USB disconnect, device number 56
[  930.306032][   T24] usblp0: removed
[  930.324087][T16089] fuse: Bad value for 'fd'
[  930.459824][  T321] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  930.661013][  T321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  930.671380][  T321] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  930.684733][  T321] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  930.693972][  T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.710329][  T321] usb 3-1: config 0 descriptor??
[  930.716507][  T321] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  930.732131][T16093] loop0: detected capacity change from 0 to 131072
[  930.739216][T16093] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  930.747882][T16093] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  930.761168][T16093] F2FS-fs (loop0): Found nat_bits in checkpoint
[  930.798863][T16093] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  930.806150][T16093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  931.005337][   T28] audit: type=1400 audit(2000000013.040:1888): avc:  denied  { create } for  pid=16116 comm="syz.4.4736" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  931.025096][T16117] block device autoloading is deprecated and will be removed.
[  931.027598][   T28] audit: type=1400 audit(2000000013.040:1889): avc:  denied  { write } for  pid=16116 comm="syz.4.4736" name="file0" dev="tmpfs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  931.044731][T16117] FAULT_INJECTION: forcing a failure.
[  931.044731][T16117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  931.058350][   T28] audit: type=1400 audit(2000000013.040:1890): avc:  denied  { open } for  pid=16116 comm="syz.4.4736" path="/359/file0" dev="tmpfs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  931.085143][T16117] CPU: 0 PID: 16117 Comm: syz.4.4736 Not tainted syzkaller #0
[  931.100246][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  931.110328][T16117] Call Trace:
[  931.113626][T16117]  <TASK>
[  931.116602][T16117]  __dump_stack+0x21/0x24
[  931.120968][T16117]  dump_stack_lvl+0x110/0x170
[  931.125678][T16117]  ? __cfi_dump_stack_lvl+0x8/0x8
[  931.130731][T16117]  dump_stack+0x15/0x24
[  931.134912][T16117]  should_fail_ex+0x3d4/0x520
[  931.139611][T16117]  should_fail+0xb/0x10
[  931.143792][T16117]  should_fail_usercopy+0x1a/0x20
[  931.148844][T16117]  _copy_to_user+0x1e/0x90
[  931.153381][T16117]  simple_read_from_buffer+0xe9/0x160
[  931.158791][T16117]  proc_fail_nth_read+0x1a6/0x220
[  931.163898][T16117]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  931.169457][T16117]  ? security_file_permission+0x94/0xb0
[  931.175085][T16117]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  931.180641][T16117]  vfs_read+0x27a/0x910
[  931.184844][T16117]  ? __cfi_vfs_read+0x10/0x10
[  931.189526][T16117]  ? __kasan_check_write+0x14/0x20
[  931.194678][T16117]  ? mutex_lock+0x93/0x1b0
[  931.199204][T16117]  ? __cfi_mutex_lock+0x10/0x10
[  931.204070][T16117]  ? __fdget_pos+0x2cd/0x380
[  931.208724][T16117]  ? ksys_read+0x71/0x250
[  931.213061][T16117]  ksys_read+0x149/0x250
[  931.217311][T16117]  ? __cfi_ksys_read+0x10/0x10
[  931.222082][T16117]  ? debug_smp_processor_id+0x17/0x20
[  931.227520][T16117]  __x64_sys_read+0x7b/0x90
[  931.232030][T16117]  x64_sys_call+0x2f/0x9a0
[  931.236460][T16117]  do_syscall_64+0x4c/0xa0
[  931.240889][T16117]  ? clear_bhb_loop+0x30/0x80
[  931.245590][T16117]  ? clear_bhb_loop+0x30/0x80
[  931.250265][T16117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  931.256187][T16117] RIP: 0033:0x7ff2d335d68e
[  931.260606][T16117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  931.280326][T16117] RSP: 002b:00007ff2d4318fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  931.288745][T16117] RAX: ffffffffffffffda RBX: 00007ff2d43196c0 RCX: 00007ff2d335d68e
[  931.296723][T16117] RDX: 000000000000000f RSI: 00007ff2d43190a0 RDI: 0000000000000004
[  931.304721][T16117] RBP: 00007ff2d4319090 R08: 0000000000000000 R09: 0000000000000000
[  931.312700][T16117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  931.320682][T16117] R13: 00007ff2d3616038 R14: 00007ff2d3615fa0 R15: 00007ffc4475eb58
[  931.328688][T16117]  </TASK>
[  931.332691][   T28] audit: type=1400 audit(2000000013.370:1891): avc:  denied  { ioctl } for  pid=16116 comm="syz.4.4736" path="/359/file0" dev="tmpfs" ino=2026 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  931.357496][T16121] Driver unsupported XDP return value 0 on prog  (id 104) dev N/A, expect packet loss!
[  931.373154][   T28] audit: type=1400 audit(2000000013.410:1892): avc:  denied  { unlink } for  pid=10600 comm="syz-executor" name="file0" dev="tmpfs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  931.419890][  T321] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  931.612712][  T321] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  931.621882][  T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.630207][  T321] usb 1-1: Product: syz
[  931.634473][  T321] usb 1-1: Manufacturer: syz
[  931.639135][  T321] usb 1-1: SerialNumber: syz
[  932.075916][  T321] rtl8150 1-1:1.0: couldn't reset the device
[  932.082277][  T321] rtl8150: probe of 1-1:1.0 failed with error -5
[  932.093784][  T321] usb 1-1: USB disconnect, device number 55
[  932.229830][   T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  932.422456][   T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  932.431681][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.439693][   T24] usb 4-1: Product: syz
[  932.443935][   T24] usb 4-1: Manufacturer: syz
[  932.448533][   T24] usb 4-1: SerialNumber: syz
[  932.453777][   T24] usb 4-1: config 0 descriptor??
[  932.459498][   T24] hub 4-1:0.0: bad descriptor, ignoring hub
[  932.465791][   T24] hub: probe of 4-1:0.0 failed with error -5
[  932.660705][  T315] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  932.700965][   T24] usb 3-1: USB disconnect, device number 75
[  932.720337][T16161] xt_hashlimit: size too large, truncated to 1048576
[  932.839818][ T2793] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  932.841728][  T315] usb 5-1: unable to get BOS descriptor or descriptor too short
[  932.856196][  T315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  932.866952][  T315] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  932.878172][  T315] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  932.892845][  T315] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  932.902299][  T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.910688][  T315] usb 5-1: Product: syz
[  932.914999][  T315] usb 5-1: Manufacturer: syz
[  932.919630][  T315] usb 5-1: SerialNumber: syz
[  932.956377][T16164] xt_hashlimit: size too large, truncated to 1048576
[  932.969956][  T321] usb 4-1: reset high-speed USB device number 57 using dummy_hcd
[  933.032851][ T2793] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  933.042199][ T2793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.050550][ T2793] usb 1-1: Product: syz
[  933.054841][ T2793] usb 1-1: Manufacturer: syz
[  933.059470][ T2793] usb 1-1: SerialNumber: syz
[  933.065201][ T2793] usb 1-1: config 0 descriptor??
[  933.075666][ T2793] hub 1-1:0.0: bad descriptor, ignoring hub
[  933.089848][ T2793] hub: probe of 1-1:0.0 failed with error -5
[  933.104256][T16167] overlayfs: failed to clone upperpath
[  933.216060][T16170] fuse: Unknown parameter 'use00000000000000000000'
[  933.236604][  T315] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  933.244646][  T315] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[  933.255021][  T315] snd-usb-audio: probe of 5-1:1.2 failed with error -22
[  933.263026][  T315] usb 5-1: USB disconnect, device number 56
[  933.321470][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4758'.
[  933.330455][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4758'.
[  933.372310][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4758'.
[  933.390105][  T321] usb 1-1: USB disconnect, device number 56
[  933.469934][   T40] usb 4-1: USB disconnect, device number 57
[  933.480563][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  933.719824][ T2793] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  933.868243][   T28] audit: type=1400 audit(2000000015.900:1893): avc:  denied  { bind } for  pid=16190 comm="syz.4.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  933.937300][T16199] fuse: Unknown parameter 'use00000000000000000000'
[  933.955750][T16200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4763'.
[  934.150707][ T2793] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  934.160141][ T2793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.168165][ T2793] usb 3-1: Product: syz
[  934.172372][ T2793] usb 3-1: Manufacturer: syz
[  934.176984][ T2793] usb 3-1: SerialNumber: syz
[  934.219378][   T28] audit: type=1400 audit(2000000016.250:1894): avc:  denied  { nlmsg_read } for  pid=16212 comm="syz.3.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  934.319866][  T321] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  934.509834][  T321] usb 5-1: Using ep0 maxpacket: 32
[  934.516078][  T321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  934.527629][  T321] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  934.536728][  T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.544754][  T321] usb 5-1: Product: syz
[  934.548953][  T321] usb 5-1: Manufacturer: syz
[  934.553577][  T321] usb 5-1: SerialNumber: syz
[  934.558781][  T321] usb 5-1: config 0 descriptor??
[  934.564587][  T321] cdc_ether 5-1:0.0: skipping garbage
[  934.570110][  T321] usb 5-1: bad CDC descriptors
[  934.575051][  T321] usb 5-1: unsupported MDLM descriptors
[  934.603139][ T2793] rtl8150 3-1:1.0: couldn't reset the device
[  934.609256][ T2793] rtl8150: probe of 3-1:1.0 failed with error -5
[  934.616743][ T2793] usb 3-1: USB disconnect, device number 76
[  934.657152][ T3032] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  934.771271][T16194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  934.779919][T16194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  934.788944][  T315] usb 5-1: USB disconnect, device number 57
[  935.022392][ T3032] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  935.031585][ T3032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.039575][ T3032] usb 4-1: Product: syz
[  935.043832][ T3032] usb 4-1: Manufacturer: syz
[  935.048434][ T3032] usb 4-1: SerialNumber: syz
[  935.089424][T16230] incfs: Error accessing: ./file1.
[  935.094682][T16230] incfs: mount failed -2
[  935.263997][ T3032] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  935.278331][ T3032] usb 4-1: USB disconnect, device number 58
[  935.285581][ T3032] usblp0: removed
[  935.372010][   T28] audit: type=1400 audit(2000000017.410:1895): avc:  denied  { read } for  pid=16236 comm="syz.4.4783" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  935.395565][   T28] audit: type=1400 audit(2000000017.410:1896): avc:  denied  { open } for  pid=16236 comm="syz.4.4783" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  936.945358][   T28] audit: type=1326 audit(2000000018.860:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.4.4788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  937.000316][   T28] audit: type=1326 audit(2000000018.870:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.4.4788" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  937.036039][T16255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4787'.
[  938.009913][   T40] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  938.252365][   T40] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  938.261531][   T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.269599][   T40] usb 4-1: Product: syz
[  938.279440][   T40] usb 4-1: Manufacturer: syz
[  938.284250][   T40] usb 4-1: SerialNumber: syz
[  938.354882][T16290] overlayfs: failed to clone upperpath
[  938.561968][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4803'.
[  938.579509][  T321] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  938.774789][   T40] rtl8150 4-1:1.0: couldn't reset the device
[  938.781038][   T40] rtl8150: probe of 4-1:1.0 failed with error -5
[  938.789279][   T40] usb 4-1: USB disconnect, device number 59
[  938.861074][  T321] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  938.869487][  T321] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  938.877894][  T321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  938.887063][  T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  938.899504][  T321] usb 1-1: string descriptor 0 read error: -22
[  938.905956][  T321] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  938.915151][  T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.924111][  T321] usb 1-1: config 0 descriptor??
[  938.929381][T16287] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  938.937004][  T321] hub 1-1:0.0: bad descriptor, ignoring hub
[  938.943004][  T321] hub: probe of 1-1:0.0 failed with error -5
[  938.950111][  T321] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input88
[  939.151701][T16287] loop0: detected capacity change from 0 to 2048
[  939.159489][T16287] EXT4-fs: Invalid gid value -1
[  939.170727][   T40] usb 1-1: USB disconnect, device number 57
[  939.962050][T16331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4815'.
[  940.009836][  T315] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  940.190895][  T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  940.202024][  T315] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  940.211466][  T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.224052][  T315] usb 3-1: config 0 descriptor??
[  940.233495][T16336] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  940.429836][   T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  940.609813][ T3032] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  940.614815][   T24] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  940.625812][   T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  940.640018][   T24] usb 4-1: config 8 has no interface number 0
[  940.672307][   T24] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  940.682241][   T24] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  940.699446][   T24] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  940.708646][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.716987][   T24] usb 4-1: Product: syz
[  940.721276][   T24] usb 4-1: Manufacturer: syz
[  940.725943][   T24] usb 4-1: SerialNumber: syz
[  940.812265][ T3032] usb 5-1: Using ep0 maxpacket: 8
[  940.819167][ T3032] usb 5-1: unable to get BOS descriptor or descriptor too short
[  940.827929][ T3032] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  940.836153][ T3032] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  940.846257][ T3032] usb 5-1: config 4 has no interface number 0
[  940.853829][ T3032] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  940.862961][ T3032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.871423][ T3032] usb 5-1: Product: syz
[  941.374810][T16333] incfs: Backing dir is not set, filesystem can't be mounted.
[  941.384355][T16333] incfs: mount failed -2
[  941.439600][   T24] usb 4-1: USB disconnect, device number 60
[  941.837938][ T3032] usb 5-1: Manufacturer: syz
[  941.842758][ T3032] usb 5-1: SerialNumber: syz
[  941.877522][T16359] fuse: Unknown parameter 'user_i00000000000000000000'
[  941.956095][T16361] loop0: detected capacity change from 0 to 8192
[  942.002518][T16361] input: syz1 as /devices/virtual/input/input89
[  942.072147][ T3032] uvcvideo 5-1:4.147: Found multiple Units with ID 6
[  942.080263][ T3032] usb 5-1: Found UVC 0.02 device syz (04f2:b746)
[  942.087403][ T3032] usb 5-1: No valid video chain found.
[  942.101780][ T3032] usb 5-1: USB disconnect, device number 58
[  942.173757][T16368] tipc: Started in network mode
[  942.178736][T16368] tipc: Node identity 4, cluster identity 4711
[  942.185032][T16368] tipc: Node number set to 4
[  942.677606][   T28] audit: type=1400 audit(2000000024.270:1899): avc:  denied  { getopt } for  pid=16365 comm="syz.0.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  942.750400][  T315] usbhid 3-1:0.0: can't add hid device: -71
[  942.756417][  T315] usbhid: probe of 3-1:0.0 failed with error -71
[  942.768425][  T315] usb 3-1: USB disconnect, device number 77
[  943.269913][  T315] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  943.471237][  T315] usb 3-1: unable to get BOS descriptor or descriptor too short
[  943.480135][  T315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  943.490437][  T315] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  943.499560][  T315] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  943.513620][  T315] usb 3-1: string descriptor 0 read error: -22
[  943.520329][  T315] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  943.529696][  T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.537951][   T24] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  943.585979][T16395] fuse: Unknown parameter 'user_i00000000000000000000'
[  943.719864][ T3032] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  943.723569][   T24] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  943.736580][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.744966][   T24] usb 1-1: Product: syz
[  943.749236][   T24] usb 1-1: Manufacturer: syz
[  943.753998][   T24] usb 1-1: SerialNumber: syz
[  943.818806][T16410] tmpfs: Unknown parameter 'nr_inoB'
[  943.827699][   T28] audit: type=1400 audit(2000000025.860:1900): avc:  denied  { setopt } for  pid=16407 comm="syz.1.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  943.851391][   T28] audit: type=1400 audit(2000000025.890:1901): avc:  denied  { bind } for  pid=16407 comm="syz.1.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  943.909865][ T3032] usb 5-1: unable to get BOS descriptor or descriptor too short
[  943.918309][ T3032] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  943.931990][T16415] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  943.949785][ T3032] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  943.959028][  T315] usb 3-1: Can't set UAC3 power state to 1 for id 10
[  943.969816][ T3032] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  943.970059][  T315] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  943.996407][   T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  944.002777][ T3032] usb 5-1: string descriptor 0 read error: -22
[  944.018439][  T315] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  944.026228][ T3032] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  944.035444][   T24] usb 1-1: USB disconnect, device number 58
[  944.050301][ T3032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.058949][  T315] usb 3-1: USB disconnect, device number 78
[  944.068395][   T24] usblp0: removed
[  944.263260][T16424] fuse: Unknown parameter 'user_id00000000000000000000'
[  944.280870][ T8718] udevd[8718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  944.365252][   T28] audit: type=1400 audit(2000000026.400:1902): avc:  denied  { load_policy } for  pid=16428 comm="syz.3.4852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  944.386722][T16429] SELinux: failed to load policy
[  944.405199][   T28] audit: type=1400 audit(2000000026.440:1903): avc:  denied  { remount } for  pid=16430 comm="syz.1.4851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  944.493699][ T3032] usb 5-1: Can't set UAC3 power state to 1 for id 10
[  944.503339][ T3032] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  944.513397][ T3032] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  944.536885][ T3032] usb 5-1: USB disconnect, device number 59
[  944.659833][ T2793] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  944.872238][T16452] tipc: Started in network mode
[  944.877198][T16452] tipc: Node identity 4, cluster identity 4711
[  944.883411][T16452] tipc: Node number set to 4
[  945.089807][ T2793] usb 4-1: Using ep0 maxpacket: 16
[  945.096966][ T2793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9
[  945.108123][ T2793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  945.121207][ T2793] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  945.130324][ T2793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.142237][ T2793] usb 4-1: config 0 descriptor??
[  945.198534][T16454] input: syz1 as /devices/virtual/input/input90
[  945.462310][   T28] audit: type=1400 audit(2000000027.490:1904): avc:  denied  { read } for  pid=16458 comm="syz.2.4862" dev="sockfs" ino=115380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  945.750209][ T2793] usbhid 4-1:0.0: can't add hid device: -71
[  945.756271][ T2793] usbhid: probe of 4-1:0.0 failed with error -71
[  945.763407][ T2793] usb 4-1: USB disconnect, device number 61
[  945.799837][ T3032] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  945.982503][ T3032] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  945.996305][ T3032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.004697][ T3032] usb 5-1: Product: syz
[  946.009152][ T3032] usb 5-1: Manufacturer: syz
[  946.014061][ T3032] usb 5-1: SerialNumber: syz
[  946.232998][ T3032] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  946.255478][ T3032] usb 5-1: USB disconnect, device number 60
[  946.271419][ T3032] usblp0: removed
[  946.278823][T16483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=16483 comm=syz.3.4871
[  946.292366][T16483] device bridge_slave_0 left promiscuous mode
[  946.298588][T16483] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.313985][T16483] 9pnet_fd: Insufficient options for proto=fd
[  946.320419][ T7174] Bluetooth: hci0: Frame reassembly failed (-84)
[  947.199369][T16491] xt_hashlimit: size too large, truncated to 1048576
[  947.271058][T16492] loop0: detected capacity change from 0 to 8192
[  947.338644][T16492]  loop0: p1 p2
[  947.345105][T16492] loop0: p1 start 16777216 is beyond EOD, truncated
[  947.352038][T16492] loop0: p2 start 50331648 is beyond EOD, truncated
[  947.639892][ T7263] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  947.674781][T16497] overlayfs: failed to clone upperpath
[  947.789820][ T7263] usb 1-1: device descriptor read/64, error -71
[  948.059818][ T7263] usb 1-1: device descriptor read/64, error -71
[  948.339836][ T7263] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  948.362873][T16503] fuse: Bad value for 'fd'
[  948.379842][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  948.379843][T10221] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  948.499812][ T7263] usb 1-1: device descriptor read/64, error -71
[  948.559829][   T24] usb 5-1: new low-speed USB device number 61 using dummy_hcd
[  948.636247][   T28] audit: type=1326 audit(2000000030.660:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.663866][   T28] audit: type=1326 audit(2000000030.660:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.690276][   T28] audit: type=1326 audit(2000000030.660:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.716458][   T28] audit: type=1326 audit(2000000030.670:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.743331][   T28] audit: type=1326 audit(2000000030.670:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.769538][   T28] audit: type=1326 audit(2000000030.670:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.796977][   T28] audit: type=1326 audit(2000000030.670:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.822567][ T7263] usb 1-1: device descriptor read/64, error -71
[  948.829103][   T24] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  948.837597][   T28] audit: type=1326 audit(2000000030.670:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.2.4880" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  948.862846][   T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  948.871160][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  948.880325][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  948.892701][   T24] usb 5-1: string descriptor 0 read error: -22
[  948.898927][   T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  948.908109][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.916683][   T24] usb 5-1: config 0 descriptor??
[  948.921971][T16501] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  948.929564][   T24] hub 5-1:0.0: bad descriptor, ignoring hub
[  948.935579][   T24] hub: probe of 5-1:0.0 failed with error -5
[  948.942273][   T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input91
[  948.979870][ T7263] usb usb1-port1: attempt power cycle
[  949.039818][ T2793] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  949.151605][ T3032] usb 5-1: USB disconnect, device number 61
[  949.220855][ T2793] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  949.231775][ T2793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  949.242805][ T2793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.252599][ T2793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  949.266981][ T2793] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  949.276084][ T2793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=15
[  949.324680][ T2793] usb 4-1: SerialNumber: syz
[  949.330912][ T2793] usb 4-1: config 0 descriptor??
[  949.383710][T16513] input: syz1 as /devices/virtual/input/input92
[  949.399929][ T7263] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  949.417440][T16515] FAULT_INJECTION: forcing a failure.
[  949.417440][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  949.430728][T16515] CPU: 1 PID: 16515 Comm: syz.2.4882 Not tainted syzkaller #0
[  949.438235][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  949.448450][T16515] Call Trace:
[  949.451759][T16515]  <TASK>
[  949.454702][T16515]  __dump_stack+0x21/0x24
[  949.459078][T16515]  dump_stack_lvl+0x110/0x170
[  949.463765][T16515]  ? __cfi_dump_stack_lvl+0x8/0x8
[  949.468822][T16515]  dump_stack+0x15/0x24
[  949.473004][T16515]  should_fail_ex+0x3d4/0x520
[  949.477725][T16515]  should_fail+0xb/0x10
[  949.481888][T16515]  should_fail_usercopy+0x1a/0x20
[  949.486915][T16515]  _copy_from_user+0x1e/0xc0
[  949.491539][T16515]  __sys_bpf+0x2a0/0x850
[  949.495887][T16515]  ? bpf_link_show_fdinfo+0x330/0x330
[  949.501280][T16515]  ? __cfi_ksys_write+0x10/0x10
[  949.506130][T16515]  ? debug_smp_processor_id+0x17/0x20
[  949.511545][T16515]  __x64_sys_bpf+0x7c/0x90
[  949.515967][T16515]  x64_sys_call+0x488/0x9a0
[  949.520478][T16515]  do_syscall_64+0x4c/0xa0
[  949.524906][T16515]  ? clear_bhb_loop+0x30/0x80
[  949.529574][T16515]  ? clear_bhb_loop+0x30/0x80
[  949.534247][T16515]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  949.540197][T16515] RIP: 0033:0x7f4de3f9ce59
[  949.543181][T16509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  949.544624][T16515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  949.554020][T16509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.572564][T16515] RSP: 002b:00007f4de4da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  949.588729][T16515] RAX: ffffffffffffffda RBX: 00007f4de4215fa0 RCX: 00007f4de3f9ce59
[  949.596731][T16515] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a
[  949.604740][T16515] RBP: 00007f4de4da1090 R08: 0000000000000000 R09: 0000000000000000
[  949.612732][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.620729][T16515] R13: 00007f4de4216038 R14: 00007f4de4215fa0 R15: 00007ffd0bc09d08
[  949.628750][T16515]  </TASK>
[  949.632427][   T28] audit: type=1400 audit(2000000031.640:1913): avc:  denied  { connect } for  pid=16504 comm="syz.3.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  949.652907][   T28] audit: type=1400 audit(2000000031.650:1914): avc:  denied  { write } for  pid=16504 comm="syz.3.4879" path="socket:[114630]" dev="sockfs" ino=114630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  949.680158][ T7263] usb 1-1: device descriptor read/8, error -71
[  949.901526][ T7263] usb 1-1: device descriptor read/8, error -71
[  950.179875][ T7263] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  950.220523][ T7263] usb 1-1: device descriptor read/8, error -71
[  950.380375][ T7263] usb 1-1: device descriptor read/8, error -71
[  950.400699][T16542] loop0: detected capacity change from 0 to 512
[  950.412059][T16542] EXT4-fs (loop0): orphan cleanup on readonly fs
[  950.418653][T16542] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.4891: bad orphan inode 15
[  950.430779][T16542] ext4_test_bit(bit=14, block=18) = 1
[  950.436318][T16542] is_bad_inode(inode)=0
[  950.440680][T16542] NEXT_ORPHAN(inode)=1023
[  950.445050][T16542] max_ino=32
[  950.448311][T16542] i_nlink=0
[  950.452106][T16542] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2916: inode #15: comm syz.0.4891: corrupted xattr block 19
[  950.466729][T16542] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117)
[  950.475909][T16542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  950.499924][ T7263] usb usb1-port1: unable to enumerate USB device
[  950.579810][T15379] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[  950.589947][T10355] EXT4-fs (loop0): unmounting filesystem.
[  951.289826][ T7263] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  951.529852][ T7263] usb 5-1: Using ep0 maxpacket: 32
[  951.540318][ T7263] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  951.581351][ T7263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  951.689512][ T7263] usb 5-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00
[  951.709963][ T7263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.985511][ T7263] usb 5-1: config 0 descriptor??
[  951.998983][ T2793] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  952.007277][ T2793] usbhid 4-1:0.0: can't add hid device: -22
[  952.013514][ T2793] usbhid: probe of 4-1:0.0 failed with error -22
[  952.021164][ T2793] usb 4-1: USB disconnect, device number 62
[  952.028346][T15379] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  952.037829][T15379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.046360][T15379] usb 3-1: Product: syz
[  952.050582][T15379] usb 3-1: Manufacturer: syz
[  952.056432][T15379] usb 3-1: SerialNumber: syz
[  952.559620][ T7263] logitech 0003:046D:C219.007B: ignoring exceeding usage max
[  952.724292][ T7263] logitech 0003:046D:C219.007B: unknown main item tag 0x2
[  952.734872][ T7263] logitech 0003:046D:C219.007B: hidraw0: USB HID v0.b3 Device [HID 046d:c219] on usb-dummy_hcd.4-1/input0
[  952.750559][ T7263] logitech 0003:046D:C219.007B: no inputs found
[  952.768716][T15379] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  952.790905][T15379] usb 3-1: USB disconnect, device number 79
[  952.802821][T15379] usblp0: removed
[  953.729535][   T28] kauditd_printk_skb: 4129 callbacks suppressed
[  953.729550][   T28] audit: type=1326 audit(2000000035.760:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2d3396bd7 code=0x7ffc0000
[  953.812097][   T28] audit: type=1326 audit(2000000035.820:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2d333e1d9 code=0x7ffc0000
[  953.837408][   T28] audit: type=1326 audit(2000000035.820:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2d3396bd7 code=0x7ffc0000
[  953.864913][   T28] audit: type=1326 audit(2000000035.820:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2d333e1d9 code=0x7ffc0000
[  953.890046][   T28] audit: type=1326 audit(2000000034.890:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  953.906060][ T2793] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  953.925026][   T28] audit: type=1326 audit(2000000035.820:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  953.950192][   T28] audit: type=1326 audit(2000000035.820:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  953.975484][   T28] audit: type=1326 audit(2000000035.820:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  954.000497][   T28] audit: type=1326 audit(2000000035.820:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  954.025464][   T28] audit: type=1326 audit(2000000035.820:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16556 comm="syz.4.4897" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2d3396bd7 code=0x7ffc0000
[  954.100953][ T2793] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  954.112004][ T2793] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  954.123278][ T2793] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  954.137199][ T2793] usb 1-1: config 0 interface 0 has no altsetting 0
[  954.144005][ T2793] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  954.153303][ T2793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.173321][ T2793] usb 1-1: config 0 descriptor??
[  954.178601][T16584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  954.631679][T16584] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4907'.
[  954.642352][T16584] SELinux: failed to load policy
[  954.650728][ T2793] input: HID 28bd:0905 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0905.007C/input/input93
[  954.676319][ T2793] uclogic 0003:28BD:0905.007C: input,hidraw0: USB HID v0.0c Mouse [HID 28bd:0905] on usb-dummy_hcd.0-1/input0
[  954.889582][T16622] tipc: Started in network mode
[  954.894576][T16622] tipc: Node identity 4, cluster identity 4711
[  954.900815][T16622] tipc: Node number set to 4
[  955.180159][T15379] usb 5-1: USB disconnect, device number 62
[  955.675037][T16639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4920'.
[  955.950320][T16643] FAULT_INJECTION: forcing a failure.
[  955.950320][T16643] name failslab, interval 1, probability 0, space 0, times 1
[  955.963243][T16643] CPU: 1 PID: 16643 Comm: syz.0.4926 Not tainted syzkaller #0
[  955.970723][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  955.980793][T16643] Call Trace:
[  955.984085][T16643]  <TASK>
[  955.987037][T16643]  __dump_stack+0x21/0x24
[  955.991394][T16643]  dump_stack_lvl+0x110/0x170
[  955.996088][T16643]  ? __cfi_dump_stack_lvl+0x8/0x8
[  956.001132][T16643]  ? __cfi_avc_has_perm+0x10/0x10
[  956.006268][T16643]  dump_stack+0x15/0x24
[  956.010456][T16643]  should_fail_ex+0x3d4/0x520
[  956.015167][T16643]  ? vm_area_dup+0x27/0x280
[  956.019700][T16643]  __should_failslab+0xac/0xf0
[  956.024496][T16643]  should_failslab+0x9/0x20
[  956.029109][T16643]  kmem_cache_alloc+0x3b/0x330
[  956.033976][T16643]  ? 0xffffffffa0000970
[  956.038151][T16643]  vm_area_dup+0x27/0x280
[  956.042505][T16643]  ? __split_vma+0x1c3/0x980
[  956.047153][T16643]  __split_vma+0x1d9/0x980
[  956.051575][T16643]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  956.057778][T16643]  do_mas_align_munmap+0x314/0x1320
[  956.062987][T16643]  ? mas_state_walk+0x79b/0xa60
[  956.067866][T16643]  ? do_mas_munmap+0x2b0/0x2b0
[  956.072647][T16643]  ? _parse_integer+0x2a/0x40
[  956.077321][T16643]  ? mas_find+0x307/0x370
[  956.081648][T16643]  do_mas_munmap+0x241/0x2b0
[  956.086238][T16643]  do_munmap+0xeb/0x140
[  956.090407][T16643]  ? __cfi_do_munmap+0x10/0x10
[  956.095186][T16643]  mremap_to+0x323/0x600
[  956.099492][T16643]  __se_sys_mremap+0x475/0xcb0
[  956.104255][T16643]  ? __kasan_check_write+0x14/0x20
[  956.109363][T16643]  ? mutex_unlock+0x8f/0x230
[  956.113973][T16643]  ? __cfi_mutex_unlock+0x10/0x10
[  956.119000][T16643]  ? __x64_sys_mremap+0xd0/0xd0
[  956.123851][T16643]  ? __kasan_check_write+0x14/0x20
[  956.128959][T16643]  ? ksys_write+0x1f4/0x250
[  956.133455][T16643]  ? __cfi_ksys_write+0x10/0x10
[  956.138295][T16643]  ? do_user_addr_fault+0x9ac/0x1050
[  956.143576][T16643]  __x64_sys_mremap+0xbf/0xd0
[  956.148259][T16643]  x64_sys_call+0x989/0x9a0
[  956.152770][T16643]  do_syscall_64+0x4c/0xa0
[  956.157196][T16643]  ? clear_bhb_loop+0x30/0x80
[  956.161876][T16643]  ? clear_bhb_loop+0x30/0x80
[  956.166547][T16643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  956.172436][T16643] RIP: 0033:0x7f48be59ce59
[  956.176846][T16643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  956.196456][T16643] RSP: 002b:00007f48bf4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  956.204861][T16643] RAX: ffffffffffffffda RBX: 00007f48be815fa0 RCX: 00007f48be59ce59
[  956.212825][T16643] RDX: 0000000000001000 RSI: 00007fffdf003000 RDI: 0000200000fff000
[  956.220795][T16643] RBP: 00007f48bf4e4090 R08: 0000200000ffc000 R09: 0000000000000000
[  956.228773][T16643] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  956.236753][T16643] R13: 00007f48be816038 R14: 00007f48be815fa0 R15: 00007fff1ae5b008
[  956.244746][T16643]  </TASK>
[  956.401147][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4927'.
[  956.429869][  T315] usb 4-1: new low-speed USB device number 63 using dummy_hcd
[  956.500885][T16652] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.508077][T16652] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.580005][ T7263] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  956.610929][  T315] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  956.619302][  T315] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  956.627561][  T315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  956.636481][  T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  956.648334][  T315] usb 4-1: string descriptor 0 read error: -22
[  956.654565][  T315] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  956.663724][  T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.672558][  T315] usb 4-1: config 0 descriptor??
[  956.677762][T16641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  956.685314][  T315] hub 4-1:0.0: bad descriptor, ignoring hub
[  956.691257][  T315] hub: probe of 4-1:0.0 failed with error -5
[  956.697887][  T315] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94
[  956.760835][ T7263] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  956.773929][ T7263] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  956.783013][ T7263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.791806][ T7263] usb 3-1: config 0 descriptor??
[  956.797667][ T7263] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  956.907159][T15379] usb 4-1: USB disconnect, device number 63
[  957.125675][T16655] overlayfs: failed to clone upperpath
[  958.451058][T16685] FAULT_INJECTION: forcing a failure.
[  958.451058][T16685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  958.464749][T16685] CPU: 1 PID: 16685 Comm: syz.3.4940 Not tainted syzkaller #0
[  958.472281][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  958.482346][T16685] Call Trace:
[  958.485641][T16685]  <TASK>
[  958.488586][T16685]  __dump_stack+0x21/0x24
[  958.492936][T16685]  dump_stack_lvl+0x110/0x170
[  958.497626][T16685]  ? __cfi_dump_stack_lvl+0x8/0x8
[  958.502667][T16685]  dump_stack+0x15/0x24
[  958.506841][T16685]  should_fail_ex+0x3d4/0x520
[  958.511535][T16685]  should_fail+0xb/0x10
[  958.515697][T16685]  should_fail_usercopy+0x1a/0x20
[  958.520728][T16685]  _copy_from_user+0x1e/0xc0
[  958.525343][T16685]  ___sys_sendmsg+0x1c3/0x360
[  958.530154][T16685]  ? release_firmware_map_entry+0x190/0x190
[  958.536077][T16685]  ? __sys_sendmsg+0x290/0x290
[  958.540868][T16685]  ? preempt_schedule_irq+0xca/0x120
[  958.546165][T16685]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  958.551896][T16685]  ? irqentry_exit+0x37/0x40
[  958.556492][T16685]  ? sysvec_reschedule_ipi+0x78/0x80
[  958.561794][T16685]  ? __fdget+0x19c/0x220
[  958.566059][T16685]  __x64_sys_sendmsg+0x205/0x2d0
[  958.571018][T16685]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  958.576501][T16685]  ? __kasan_check_write+0x14/0x20
[  958.581626][T16685]  ? fpregs_restore_userregs+0x128/0x260
[  958.587267][T16685]  ? switch_fpu_return+0xe/0x10
[  958.592158][T16685]  x64_sys_call+0x171/0x9a0
[  958.596696][T16685]  do_syscall_64+0x4c/0xa0
[  958.601149][T16685]  ? clear_bhb_loop+0x30/0x80
[  958.605831][T16685]  ? clear_bhb_loop+0x30/0x80
[  958.610516][T16685]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  958.616423][T16685] RIP: 0033:0x7f30f6f9ce59
[  958.620853][T16685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.640488][T16685] RSP: 002b:00007f30f7dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  958.648910][T16685] RAX: ffffffffffffffda RBX: 00007f30f7215fa0 RCX: 00007f30f6f9ce59
[  958.656978][T16685] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003
[  958.664972][T16685] RBP: 00007f30f7dec090 R08: 0000000000000000 R09: 0000000000000000
[  958.672950][T16685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.680931][T16685] R13: 00007f30f7216038 R14: 00007f30f7215fa0 R15: 00007ffc95001c98
[  958.688923][T16685]  </TASK>
[  958.720140][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4937'.
[  959.191204][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4944'.
[  959.200231][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4944'.
[  959.211049][T16699] device dummy0 entered promiscuous mode
[  959.219474][T16699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4944'.
[  959.322310][ T3032] usb 3-1: USB disconnect, device number 80
[  959.589884][   T28] kauditd_printk_skb: 7701 callbacks suppressed
[  959.589978][   T28] audit: type=1326 audit(2000000041.560:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  959.850542][   T28] audit: type=1326 audit(2000000041.560:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  959.899806][   T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  960.092411][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  960.124202][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  960.214802][   T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  960.221136][   T28] audit: type=1326 audit(2000000041.560:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.261534][   T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  960.261939][   T28] audit: type=1326 audit(2000000041.560:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.304689][   T24] usb 5-1: string descriptor 0 read error: -22
[  960.319331][   T24] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  960.345435][   T28] audit: type=1326 audit(2000000041.560:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.348982][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.406256][   T28] audit: type=1326 audit(2000000041.560:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.431565][   T28] audit: type=1326 audit(2000000041.560:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.457304][   T28] audit: type=1326 audit(2000000041.560:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.483211][   T28] audit: type=1326 audit(2000000041.560:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.508680][   T28] audit: type=1326 audit(2000000041.560:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.2.4946" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3f9ce59 code=0x7ffc0000
[  960.670449][T16745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.678970][T16745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.679909][T15379] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  960.859814][   T24] usb 5-1: Can't set UAC3 power state to 1 for id 10
[  960.867395][   T24] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  960.876784][   T24] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  960.881479][T15379] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  960.895356][T15379] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  960.902425][   T24] usb 5-1: USB disconnect, device number 63
[  960.907458][T15379] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  960.928044][T15379] usb 3-1: config 0 interface 0 has no altsetting 0
[  960.934879][T15379] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  960.944137][T15379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.952848][T15379] usb 3-1: config 0 descriptor??
[  960.958052][T16737] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  961.130548][ T8718] udevd[8718]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  961.230127][T16751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=16751 comm=syz.1.4963
[  961.496848][T16737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4956'.
[  961.506586][T16737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4956'.
[  961.520163][T16737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4956'.
[  961.536520][T16737] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  961.682562][T16737] SELinux: failed to load policy
[  962.139032][T16778] xt_hashlimit: size too large, truncated to 1048576
[  962.148324][T16780] tmpfs: Unknown parameter 'nr_inoB'
[  962.497347][T16787] tmpfs: Unknown parameter 'nr_inoB'
[  962.511860][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.522815][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.725227][T16799] loop0: detected capacity change from 0 to 512
[  962.734721][T16799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  962.771663][T16799] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  962.786787][T16799] EXT4-fs (loop0): mount failed
[  963.089934][ T2793] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  963.432390][T16817] netlink: 'syz.3.4983': attribute type 46 has an invalid length.
[  963.445790][T16824] xt_hashlimit: size too large, truncated to 1048576
[  963.452930][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4983'.
[  963.610823][ T2793] usb 5-1: unable to get BOS descriptor or descriptor too short
[  963.630125][ T2793] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  963.649777][ T2793] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  963.658811][ T2793] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  963.691837][ T2793] usb 5-1: string descriptor 0 read error: -22
[  963.698091][ T2793] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  963.719778][ T2793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.931039][T16838] FAULT_INJECTION: forcing a failure.
[  963.931039][T16838] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  963.949848][T16838] CPU: 1 PID: 16838 Comm: syz.0.4991 Not tainted syzkaller #0
[  963.957372][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  963.967444][T16838] Call Trace:
[  963.970760][T16838]  <TASK>
[  963.973710][T16838]  __dump_stack+0x21/0x24
[  963.978097][T16838]  dump_stack_lvl+0x110/0x170
[  963.982805][T16838]  ? __cfi_dump_stack_lvl+0x8/0x8
[  963.987900][T16838]  ? hrtimer_reprogram+0x388/0x430
[  963.993051][T16838]  dump_stack+0x15/0x24
[  963.997253][T16838]  should_fail_ex+0x3d4/0x520
[  964.001960][T16838]  should_fail+0xb/0x10
[  964.006137][T16838]  should_fail_usercopy+0x1a/0x20
[  964.011201][T16838]  copy_fpstate_to_sigframe+0x8f3/0xb60
[  964.016783][T16838]  ? copy_fpstate_to_sigframe+0x194/0xb60
[  964.022558][T16838]  ? __cfi_copy_fpstate_to_sigframe+0x10/0x10
[  964.028657][T16838]  ? get_signal+0x124b/0x1520
[  964.033366][T16838]  ? fpu__alloc_mathframe+0xb3/0x130
[  964.038678][T16838]  arch_do_signal_or_restart+0x635/0x1140
[  964.044421][T16838]  ? __cfi_vfs_write+0x10/0x10
[  964.049215][T16838]  ? __kasan_check_write+0x14/0x20
[  964.054346][T16838]  ? mutex_unlock+0x8f/0x230
[  964.058974][T16838]  ? __cfi_mutex_unlock+0x10/0x10
[  964.064026][T16838]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  964.070205][T16838]  ? __kasan_check_write+0x14/0x20
[  964.075343][T16838]  ? __cfi_ksys_write+0x10/0x10
[  964.080214][T16838]  exit_to_user_mode_loop+0x7a/0xb0
[  964.085509][T16838]  exit_to_user_mode_prepare+0x87/0xd0
[  964.090989][T16838]  syscall_exit_to_user_mode+0x1a/0x30
[  964.096482][T16838]  do_syscall_64+0x58/0xa0
[  964.100922][T16838]  ? clear_bhb_loop+0x30/0x80
[  964.105616][T16838]  ? clear_bhb_loop+0x30/0x80
[  964.110312][T16838]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  964.116238][T16838] RIP: 0033:0x7f48be59ce59
[  964.120672][T16838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.120685][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.123043][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.140292][T16838] RSP: 002b:00007f48bf4e4028 EFLAGS: 00000246
[  964.153517][ T2793] usb 5-1: Can't set UAC3 power state to 1 for id 10
[  964.156357][T16838]  ORIG_RAX: 00000000000000fa
[  964.156368][T16838] RAX: ffffffffffffffea RBX: 00007f48be815fa0 RCX: 00007f48be59ce59
[  964.156384][T16838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015
[  964.178592][ T2793] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  964.181891][T16838] RBP: 00007f48bf4e4090 R08: 0000000000000000 R09: 0000000000000000
[  964.181908][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.181918][T16838] R13: 00007f48be816038 R14: 00007f48be815fa0 R15: 00007fff1ae5b008
[  964.181937][T16838]  </TASK>
[  964.254067][ T2793] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  964.280964][T16851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.290222][T16851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.311437][ T2793] usb 5-1: USB disconnect, device number 64
[  964.425718][T16852] xt_hashlimit: size too large, truncated to 1048576
[  964.937712][T16857] xt_hashlimit: size too large, truncated to 1048576
[  964.987271][T16861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.001973][T16861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.055725][   T28] kauditd_printk_skb: 120 callbacks suppressed
[  965.055741][   T28] audit: type=1326 audit(2000000047.090:13884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.116403][   T28] audit: type=1326 audit(2000000047.130:13885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.188396][   T28] audit: type=1326 audit(2000000047.130:13886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.504909][   T28] audit: type=1326 audit(2000000047.130:13887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.562048][   T28] audit: type=1326 audit(2000000047.130:13888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.598709][   T28] audit: type=1326 audit(2000000047.130:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.630540][   T28] audit: type=1326 audit(2000000047.130:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.656467][   T28] audit: type=1326 audit(2000000047.130:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.682465][   T28] audit: type=1326 audit(2000000047.130:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  965.707657][   T28] audit: type=1326 audit(2000000047.130:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.1.5000" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  966.220574][T15379] usbhid 3-1:0.0: can't add hid device: -32
[  966.226574][T15379] usbhid: probe of 3-1:0.0 failed with error -32
[  966.255066][T16909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.266896][T16909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.282242][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5019'.
[  966.291174][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'.
[  966.309870][ T7263] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  966.333332][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'.
[  966.501175][ T7263] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  966.517372][ T7263] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  966.529743][T16919] xt_hashlimit: size too large, truncated to 1048576
[  966.539879][ T7263] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  966.566407][ T7263] usb 5-1: config 0 interface 0 has no altsetting 0
[  966.579367][ T7263] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  966.635904][ T7263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.644847][ T7263] usb 5-1: config 0 descriptor??
[  966.660063][T16900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  967.144201][T16900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5013'.
[  967.160024][T16900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5013'.
[  967.164695][T16935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  967.179010][T16935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.187332][T16900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5013'.
[  967.197077][T16938] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  967.207945][T16938] SELinux: failed to load policy
[  967.435967][T16940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=16940 comm=syz.1.5024
[  967.538483][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'.
[  967.548752][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5030'.
[  967.563335][T16944] device dummy0 entered promiscuous mode
[  967.608924][T16952] FAULT_INJECTION: forcing a failure.
[  967.608924][T16952] name failslab, interval 1, probability 0, space 0, times 0
[  967.621667][T16952] CPU: 0 PID: 16952 Comm: syz.3.5034 Not tainted syzkaller #0
[  967.629164][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  967.639236][T16952] Call Trace:
[  967.642528][T16952]  <TASK>
[  967.645474][T16952]  __dump_stack+0x21/0x24
[  967.649821][T16952]  dump_stack_lvl+0x110/0x170
[  967.654530][T16952]  ? __cfi_dump_stack_lvl+0x8/0x8
[  967.659578][T16952]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  967.665304][T16952]  dump_stack+0x15/0x24
[  967.669466][T16952]  should_fail_ex+0x3d4/0x520
[  967.674149][T16952]  __should_failslab+0xac/0xf0
[  967.678933][T16952]  ? kvmalloc_node+0x28a/0x460
[  967.683820][T16952]  should_failslab+0x9/0x20
[  967.688342][T16952]  __kmem_cache_alloc_node+0x3d/0x2c0
[  967.693770][T16952]  ? kvmalloc_node+0x28a/0x460
[  967.698556][T16952]  __kmalloc_node+0xa1/0x1e0
[  967.703187][T16952]  kvmalloc_node+0x28a/0x460
[  967.707800][T16952]  ? __cfi_kvmalloc_node+0x10/0x10
[  967.712932][T16952]  ? security_capable+0x99/0xc0
[  967.717820][T16952]  __se_sys_setgroups+0xef/0x400
[  967.722870][T16952]  ? debug_smp_processor_id+0x17/0x20
[  967.728278][T16952]  __x64_sys_setgroups+0x5b/0x70
[  967.733232][T16952]  x64_sys_call+0x3ee/0x9a0
[  967.737762][T16952]  do_syscall_64+0x4c/0xa0
[  967.742207][T16952]  ? clear_bhb_loop+0x30/0x80
[  967.746906][T16952]  ? clear_bhb_loop+0x30/0x80
[  967.751604][T16952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  967.757515][T16952] RIP: 0033:0x7f30f6f9ce59
[  967.761975][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.781599][T16952] RSP: 002b:00007f30f7dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  967.790064][T16952] RAX: ffffffffffffffda RBX: 00007f30f7215fa0 RCX: 00007f30f6f9ce59
[  967.798070][T16952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  967.806054][T16952] RBP: 00007f30f7dec090 R08: 0000000000000000 R09: 0000000000000000
[  967.814051][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.822044][T16952] R13: 00007f30f7216038 R14: 00007f30f7215fa0 R15: 00007ffc95001c98
[  967.830050][T16952]  </TASK>
[  968.145234][T16959] binder: BINDER_SET_CONTEXT_MGR already set
[  968.167358][T16959] binder: 16957:16959 ioctl 4018620d 2000000000c0 returned -16
[  968.208124][T16958] binder: 16957:16958 ioctl c0306201 2000000001c0 returned -22
[  968.217239][T16959] binder: 16957:16959 ioctl c0306201 2000000001c0 returned -22
[  968.226404][T16958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.236494][T16959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.245765][T16958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.261590][T16959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.353988][T16985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.362911][T16985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.909811][ T2793] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  969.072105][T16996] FAULT_INJECTION: forcing a failure.
[  969.072105][T16996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  969.092412][T16996] CPU: 0 PID: 16996 Comm: syz.0.5051 Not tainted syzkaller #0
[  969.099187][T16998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'.
[  969.099926][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  969.099939][T16996] Call Trace:
[  969.099946][T16996]  <TASK>
[  969.099953][T16996]  __dump_stack+0x21/0x24
[  969.099981][T16996]  dump_stack_lvl+0x110/0x170
[  969.100003][T16996]  ? __cfi_dump_stack_lvl+0x8/0x8
[  969.100025][T16996]  ? vfs_write+0xa2c/0xce0
[  969.143696][T16996]  dump_stack+0x15/0x24
[  969.147889][T16996]  should_fail_ex+0x3d4/0x520
[  969.152661][T16996]  should_fail+0xb/0x10
[  969.156845][T16996]  should_fail_usercopy+0x1a/0x20
[  969.161914][T16996]  _copy_from_user+0x1e/0xc0
[  969.166570][T16996]  __sys_bind+0x1fb/0x460
[  969.170938][T16996]  ? __cfi___sys_bind+0x10/0x10
[  969.175818][T16996]  ? __kasan_check_write+0x14/0x20
[  969.180955][T16996]  ? debug_smp_processor_id+0x17/0x20
[  969.186356][T16996]  __x64_sys_bind+0x7a/0x90
[  969.190885][T16996]  x64_sys_call+0x70c/0x9a0
[  969.195403][T16996]  do_syscall_64+0x4c/0xa0
[  969.199836][T16996]  ? clear_bhb_loop+0x30/0x80
[  969.204533][T16996]  ? clear_bhb_loop+0x30/0x80
[  969.209227][T16996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  969.215156][T16996] RIP: 0033:0x7f48be59ce59
[  969.219597][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  969.239226][T16996] RSP: 002b:00007f48bf4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  969.247660][T16996] RAX: ffffffffffffffda RBX: 00007f48be815fa0 RCX: 00007f48be59ce59
[  969.255670][T16996] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003
[  969.263658][T16996] RBP: 00007f48bf4e4090 R08: 0000000000000000 R09: 0000000000000000
[  969.271638][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  969.279618][T16996] R13: 00007f48be816038 R14: 00007f48be815fa0 R15: 00007fff1ae5b008
[  969.287606][T16996]  </TASK>
[  969.312295][ T2793] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  969.335928][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.339846][ T2793] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  969.352067][T17010] xt_hashlimit: size too large, truncated to 1048576
[  969.357543][ T2793] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  969.363358][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.376539][ T2793] usb 4-1: config 0 interface 0 has no altsetting 0
[  969.390713][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.402336][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.402910][ T2793] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  969.419379][ T2793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.431019][ T2793] usb 4-1: config 0 descriptor??
[  969.437658][T16992] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  969.463878][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.473062][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.864475][T16992] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  969.874219][T16992] SELinux: failed to load policy
[  969.881919][ T2793] input: HID 28bd:0905 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0905.007D/input/input96
[  969.894264][ T2793] uclogic 0003:28BD:0905.007D: input,hidraw1: USB HID v0.0c Mouse [HID 28bd:0905] on usb-dummy_hcd.3-1/input0
[  970.005724][T17023] netlink: 'syz.2.5062': attribute type 3 has an invalid length.
[  970.014191][T17023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17023 comm=syz.2.5062
[  970.049659][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5064'.
[  970.060651][T17027] device ip6gre1 entered promiscuous mode
[  970.254891][   T28] kauditd_printk_skb: 149 callbacks suppressed
[  970.286129][   T28] audit: type=1326 audit(2000000052.160:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.429416][T17029] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  970.462750][   T28] audit: type=1326 audit(2000000052.160:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.530573][   T28] audit: type=1326 audit(2000000052.160:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.568299][   T28] audit: type=1326 audit(2000000052.160:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.593434][   T28] audit: type=1326 audit(2000000052.160:14047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.618662][   T28] audit: type=1326 audit(2000000052.160:14048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.649194][   T28] audit: type=1326 audit(2000000052.160:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.675566][   T28] audit: type=1326 audit(2000000052.160:14050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.700987][   T28] audit: type=1326 audit(2000000052.170:14051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.726270][   T28] audit: type=1326 audit(2000000052.170:14052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17018 comm="syz.4.5061" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d339ce59 code=0x7ffc0000
[  970.972822][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.985457][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.019887][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.033566][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.448982][T17060] input: syz1 as /devices/virtual/input/input98
[  971.687440][T17073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5078'.
[  972.239261][ T7263] usbhid 5-1:0.0: can't add hid device: -32
[  972.258943][T17070] input: syz1 as /devices/virtual/input/input100
[  972.265737][ T7263] usbhid: probe of 5-1:0.0 failed with error -32
[  972.508898][T17087] xt_hashlimit: size too large, truncated to 1048576
[  972.569596][T17081] input: syz1 as /devices/virtual/input/input101
[  972.707552][T17103] FAULT_INJECTION: forcing a failure.
[  972.707552][T17103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  972.729793][T17103] CPU: 1 PID: 17103 Comm: syz.2.5088 Not tainted syzkaller #0
[  972.737392][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  972.747482][T17103] Call Trace:
[  972.750777][T17103]  <TASK>
[  972.753781][T17103]  __dump_stack+0x21/0x24
[  972.758149][T17103]  dump_stack_lvl+0x110/0x170
[  972.762850][T17103]  ? __cfi_dump_stack_lvl+0x8/0x8
[  972.767896][T17103]  dump_stack+0x15/0x24
[  972.772078][T17103]  should_fail_ex+0x3d4/0x520
[  972.776796][T17103]  should_fail+0xb/0x10
[  972.780990][T17103]  should_fail_usercopy+0x1a/0x20
[  972.786041][T17103]  _copy_from_user+0x1e/0xc0
[  972.790672][T17103]  do_ip_getsockopt+0x26b/0x1770
[  972.795735][T17103]  ? __cfi_do_ip_getsockopt+0x10/0x10
[  972.801172][T17103]  ? avc_has_perm_noaudit+0x30b/0x490
[  972.806579][T17103]  ? kstrtouint+0x74/0xe0
[  972.810941][T17103]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  972.816694][T17103]  ? avc_has_perm+0x163/0x250
[  972.821393][T17103]  ? __kasan_check_write+0x14/0x20
[  972.826556][T17103]  ? __cfi_avc_has_perm+0x10/0x10
[  972.831613][T17103]  ip_getsockopt+0xb8/0x1e0
[  972.836150][T17103]  ? __cfi_ip_getsockopt+0x10/0x10
[  972.841305][T17103]  ? __kasan_check_write+0x14/0x20
[  972.846447][T17103]  tcp_getsockopt+0xff/0x130
[  972.851155][T17103]  sock_common_getsockopt+0xaa/0xc0
[  972.856441][T17103]  ? __cfi_sock_common_getsockopt+0x10/0x10
[  972.862375][T17103]  __sys_getsockopt+0x215/0x4a0
[  972.867261][T17103]  __x64_sys_getsockopt+0xbf/0xd0
[  972.872365][T17103]  x64_sys_call+0x3d/0x9a0
[  972.876822][T17103]  do_syscall_64+0x4c/0xa0
[  972.881271][T17103]  ? clear_bhb_loop+0x30/0x80
[  972.885996][T17103]  ? clear_bhb_loop+0x30/0x80
[  972.890697][T17103]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.896619][T17103] RIP: 0033:0x7f4de3f9ce59
[  972.901054][T17103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.920686][T17103] RSP: 002b:00007f4de4da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  972.929131][T17103] RAX: ffffffffffffffda RBX: 00007f4de4215fa0 RCX: 00007f4de3f9ce59
[  972.937159][T17103] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  972.945170][T17103] RBP: 00007f4de4da1090 R08: 0000200000000100 R09: 0000000000000000
[  972.953170][T17103] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  972.961164][T17103] R13: 00007f4de4216038 R14: 00007f4de4215fa0 R15: 00007ffd0bc09d08
[  972.969167][T17103]  </TASK>
[  972.987297][T17106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.996939][T17106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.044561][T17108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.054147][T17108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.089353][T17110] loop0: detected capacity change from 0 to 256
[  973.099036][T17110] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  973.110122][T17110] exFAT-fs (loop0): Filesystem has been set read-only
[  973.116961][T17110] exFAT-fs (loop0): failed to load upcase table
[  973.123421][T17110] exFAT-fs (loop0): failed to recognize exfat type
[  973.344572][T17119] input: syz1 as /devices/virtual/input/input102
[  973.700198][T17133] tmpfs: Unknown parameter 'nr_inoB'
[  973.718392][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.728639][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.734101][T17137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.745807][T17137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.780991][T17140] xt_hashlimit: size too large, truncated to 1048576
[  974.134268][T17153] loop0: detected capacity change from 0 to 512
[  974.142196][T17153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  974.153997][T17153] EXT4-fs (loop0): 1 truncate cleaned up
[  974.159726][T17153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  974.170409][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.179235][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.262551][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.271136][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.697698][T10355] EXT4-fs (loop0): unmounting filesystem.
[  974.962003][T17166] input: syz1 as /devices/virtual/input/input104
[  975.117041][T17168] tmpfs: Unknown parameter 'nr_inoB'
[  975.187678][T17171] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  975.629979][   T28] kauditd_printk_skb: 74 callbacks suppressed
[  975.630053][   T28] audit: type=1326 audit(2000000057.580:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.764974][   T28] audit: type=1326 audit(2000000057.580:14128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.791565][   T28] audit: type=1326 audit(2000000057.580:14129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.816787][   T28] audit: type=1326 audit(2000000057.590:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.866253][   T28] audit: type=1326 audit(2000000057.590:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.893579][   T28] audit: type=1326 audit(2000000057.590:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.919424][   T28] audit: type=1326 audit(2000000057.590:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.944699][   T28] audit: type=1326 audit(2000000057.590:14134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.969801][   T28] audit: type=1326 audit(2000000057.590:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  975.994838][   T28] audit: type=1326 audit(2000000057.590:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.5117" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  976.119835][T17192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.128664][T17192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.237490][T17194] 8021q: VLANs not supported on gre0
[  976.253211][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5124'.
[  976.262430][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'.
[  976.796631][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5135'.
[  976.806391][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5135'.
[  977.135079][T17230] input: syz1 as /devices/virtual/input/input106
[  977.900989][T17250] FAULT_INJECTION: forcing a failure.
[  977.900989][T17250] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  977.917198][T17251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  977.926494][T17251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  977.940240][T17250] CPU: 0 PID: 17250 Comm: syz.3.5143 Not tainted syzkaller #0
[  977.947746][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  977.957833][T17250] Call Trace:
[  977.961158][T17250]  <TASK>
[  977.964101][T17250]  __dump_stack+0x21/0x24
[  977.968451][T17250]  dump_stack_lvl+0x110/0x170
[  977.973146][T17250]  ? __cfi_dump_stack_lvl+0x8/0x8
[  977.978190][T17250]  dump_stack+0x15/0x24
[  977.982368][T17250]  should_fail_ex+0x3d4/0x520
[  977.987066][T17250]  should_fail+0xb/0x10
[  977.991267][T17250]  should_fail_usercopy+0x1a/0x20
[  977.996306][T17250]  _copy_from_user+0x1e/0xc0
[  978.000918][T17250]  __sys_bpf+0x2a0/0x850
[  978.005173][T17250]  ? bpf_link_show_fdinfo+0x330/0x330
[  978.010565][T17250]  ? __cfi_ksys_write+0x10/0x10
[  978.015448][T17250]  ? debug_smp_processor_id+0x17/0x20
[  978.020842][T17250]  __x64_sys_bpf+0x7c/0x90
[  978.025276][T17250]  x64_sys_call+0x488/0x9a0
[  978.029808][T17250]  do_syscall_64+0x4c/0xa0
[  978.034268][T17250]  ? clear_bhb_loop+0x30/0x80
[  978.038960][T17250]  ? clear_bhb_loop+0x30/0x80
[  978.043646][T17250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.049584][T17250] RIP: 0033:0x7f30f6f9ce59
[  978.054012][T17250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  978.073630][T17250] RSP: 002b:00007f30f7dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  978.082062][T17250] RAX: ffffffffffffffda RBX: 00007f30f7215fa0 RCX: 00007f30f6f9ce59
[  978.090042][T17250] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  978.098028][T17250] RBP: 00007f30f7dec090 R08: 0000000000000000 R09: 0000000000000000
[  978.106007][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  978.114006][T17250] R13: 00007f30f7216038 R14: 00007f30f7215fa0 R15: 00007ffc95001c98
[  978.122009][T17250]  </TASK>
[  978.168365][T17258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5147'.
[  978.414582][T17273] netlink: 'syz.2.5152': attribute type 2 has an invalid length.
[  978.508767][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.517681][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.527966][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.537148][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.544700][T17286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5158'.
[  978.550261][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.563721][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  979.172489][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  979.196426][T17324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5170'.
[  979.198630][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  979.277085][T17327] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5172'.
[  980.154159][T17353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.173251][T17353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.230810][T17353] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  980.276045][T17353] SELinux: failed to load policy
[  980.618123][T17361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.642167][T17361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.276498][T17369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5182'.
[  981.340888][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5187'.
[  981.351693][T17372] device bridge0 entered promiscuous mode
[  981.385355][T17377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.393964][T17377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.481853][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'.
[  981.646334][T17385] netlink: 'syz.1.5192': attribute type 298 has an invalid length.
[  981.843245][T17387] FAULT_INJECTION: forcing a failure.
[  981.843245][T17387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  981.857049][T17387] CPU: 1 PID: 17387 Comm: syz.0.5193 Not tainted syzkaller #0
[  981.864539][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  981.874610][T17387] Call Trace:
[  981.877907][T17387]  <TASK>
[  981.880860][T17387]  __dump_stack+0x21/0x24
[  981.885215][T17387]  dump_stack_lvl+0x110/0x170
[  981.889908][T17387]  ? __cfi_dump_stack_lvl+0x8/0x8
[  981.894943][T17387]  ? dump_stack+0x9/0x24
[  981.899198][T17387]  dump_stack+0x15/0x24
[  981.903369][T17387]  should_fail_ex+0x3d4/0x520
[  981.908066][T17387]  should_fail+0xb/0x10
[  981.912231][T17387]  should_fail_usercopy+0x1a/0x20
[  981.917269][T17387]  _copy_from_user+0x1e/0xc0
[  981.921894][T17387]  ___sys_sendmsg+0x1c3/0x360
[  981.926591][T17387]  ? __sys_sendmsg+0x290/0x290
[  981.931404][T17387]  ? __fdget+0x19c/0x220
[  981.935671][T17387]  __x64_sys_sendmsg+0x205/0x2d0
[  981.940637][T17387]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  981.946111][T17387]  ? __kasan_check_write+0x14/0x20
[  981.951240][T17387]  ? fpregs_restore_userregs+0x128/0x260
[  981.956893][T17387]  ? switch_fpu_return+0xe/0x10
[  981.961762][T17387]  x64_sys_call+0x171/0x9a0
[  981.966306][T17387]  do_syscall_64+0x4c/0xa0
[  981.970737][T17387]  ? clear_bhb_loop+0x30/0x80
[  981.975424][T17387]  ? clear_bhb_loop+0x30/0x80
[  981.980118][T17387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  981.986049][T17387] RIP: 0033:0x7f48be59ce59
[  981.990478][T17387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.010095][T17387] RSP: 002b:00007f48bf4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.018524][T17387] RAX: ffffffffffffffda RBX: 00007f48be815fa0 RCX: 00007f48be59ce59
[  982.026514][T17387] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  982.034500][T17387] RBP: 00007f48bf4e4090 R08: 0000000000000000 R09: 0000000000000000
[  982.042482][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.050468][T17387] R13: 00007f48be816038 R14: 00007f48be815fa0 R15: 00007fff1ae5b008
[  982.058483][T17387]  </TASK>
[  982.529569][T17400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5197'.
[  982.860310][T17404] xt_hashlimit: size too large, truncated to 1048576
[  982.917457][T17411] mmap: syz.1.5199 (17411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  982.953098][T17389] xt_hashlimit: size too large, truncated to 1048576
[  984.884084][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  984.923578][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  985.198553][T17434] input: syz1 as /devices/virtual/input/input107
[  985.613446][T17446] tmpfs: Unknown parameter 'nr_inoB'
[  985.725579][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.734944][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  985.743677][T17460] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  985.974751][   T28] kauditd_printk_skb: 74 callbacks suppressed
[  985.974841][   T28] audit: type=1326 audit(2000000067.900:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.043996][   T28] audit: type=1326 audit(2000000067.900:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.070952][   T28] audit: type=1326 audit(2000000067.900:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.100746][   T28] audit: type=1326 audit(2000000067.910:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.128143][   T28] audit: type=1326 audit(2000000067.910:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.156790][   T28] audit: type=1326 audit(2000000067.910:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.186847][   T28] audit: type=1326 audit(2000000067.910:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.212038][   T28] audit: type=1326 audit(2000000067.910:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.237679][   T28] audit: type=1326 audit(2000000067.910:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.265933][   T28] audit: type=1326 audit(2000000067.910:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.0.5216" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48be59ce59 code=0x7ffc0000
[  986.504649][T17481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.513870][T17481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.530712][T17481] binder: BINDER_SET_CONTEXT_MGR already set
[  986.536820][T17481] binder: 17480:17481 ioctl 4018620d 200000004a80 returned -16
[  986.727084][T17489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.735841][T17489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.839946][T17483] FAULT_INJECTION: forcing a failure.
[  986.839946][T17483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  986.878688][T17483] CPU: 1 PID: 17483 Comm: syz.0.5229 Not tainted syzkaller #0
[  986.886206][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  986.896271][T17483] Call Trace:
[  986.899559][T17483]  <TASK>
[  986.902502][T17483]  __dump_stack+0x21/0x24
[  986.906853][T17483]  dump_stack_lvl+0x110/0x170
[  986.911541][T17483]  ? __cfi_dump_stack_lvl+0x8/0x8
[  986.916584][T17483]  dump_stack+0x15/0x24
[  986.920753][T17483]  should_fail_ex+0x3d4/0x520
[  986.925444][T17483]  should_fail+0xb/0x10
[  986.929611][T17483]  should_fail_usercopy+0x1a/0x20
[  986.934665][T17483]  copyout+0x20/0xa0
[  986.938659][T17483]  _copy_to_iter+0x3e9/0xea0
[  986.943267][T17483]  ? __kasan_check_write+0x14/0x20
[  986.948401][T17483]  ? __cfi__copy_to_iter+0x10/0x10
[  986.953552][T17483]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  986.959394][T17483]  ? __kasan_check_read+0x11/0x20
[  986.964444][T17483]  ? __check_object_size+0x45a/0x600
[  986.969802][T17483]  simple_copy_to_iter+0x50/0x70
[  986.974787][T17483]  __skb_datagram_iter+0x2fd/0x730
[  986.979916][T17483]  ? __cfi_simple_copy_to_iter+0x10/0x10
[  986.985570][T17483]  skb_copy_datagram_iter+0x40/0x150
[  986.990872][T17483]  tcp_recvmsg_locked+0x91d/0x23e0
[  986.996008][T17483]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  987.002199][T17483]  ? tcp_recvmsg+0x850/0x850
[  987.006825][T17483]  ? avc_has_perm+0x163/0x250
[  987.011515][T17483]  tcp_recvmsg+0x22d/0x850
[  987.015960][T17483]  ? __cfi_tcp_recvmsg+0x10/0x10
[  987.020946][T17483]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  987.026688][T17483]  ? __cfi_selinux_socket_recvmsg+0x10/0x10
[  987.032724][T17483]  inet_recvmsg+0x141/0x480
[  987.037319][T17483]  ? __fget_files+0x2d5/0x330
[  987.042013][T17483]  ? __cfi_inet_recvmsg+0x10/0x10
[  987.047066][T17483]  ? security_socket_recvmsg+0x99/0xc0
[  987.052562][T17483]  __sys_recvfrom+0x354/0x4d0
[  987.057258][T17483]  ? __cfi___sys_recvfrom+0x10/0x10
[  987.062489][T17483]  ? ksys_write+0x1f4/0x250
[  987.067012][T17483]  ? __cfi_ksys_write+0x10/0x10
[  987.071907][T17483]  __x64_sys_recvfrom+0xe5/0x100
[  987.076961][T17483]  x64_sys_call+0x7c/0x9a0
[  987.081411][T17483]  do_syscall_64+0x4c/0xa0
[  987.085844][T17483]  ? clear_bhb_loop+0x30/0x80
[  987.090534][T17483]  ? clear_bhb_loop+0x30/0x80
[  987.095224][T17483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  987.101137][T17483] RIP: 0033:0x7f48be59ce59
[  987.105581][T17483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  987.125207][T17483] RSP: 002b:00007f48bf4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  987.133661][T17483] RAX: ffffffffffffffda RBX: 00007f48be815fa0 RCX: 00007f48be59ce59
[  987.141651][T17483] RDX: 0000000000000ff9 RSI: 00002000000022c0 RDI: 0000000000000003
[  987.149635][T17483] RBP: 00007f48bf4e4090 R08: 0000000000000000 R09: 0000000000000000
[  987.157621][T17483] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  987.165617][T17483] R13: 00007f48be816038 R14: 00007f48be815fa0 R15: 00007fff1ae5b008
[  987.173621][T17483]  </TASK>
[  987.581779][T17503] loop0: detected capacity change from 0 to 512
[  987.614012][T17507] tmpfs: Unknown parameter 'nr_inoB'
[  987.694444][T17503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  987.704443][T17503] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  988.494314][T17525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  988.520517][T17525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  988.577150][T17531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  988.605608][T17531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  989.313768][T17547] tmpfs: Unknown parameter 'nr_inoB'
[  991.479200][T17598] xt_hashlimit: size too large, truncated to 1048576
[  991.905451][   T28] kauditd_printk_skb: 117 callbacks suppressed
[  991.905513][   T28] audit: type=1326 audit(2000000329.863:14338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.000755][   T28] audit: type=1326 audit(2000000329.863:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.025896][   T28] audit: type=1326 audit(2000000329.863:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.055601][   T28] audit: type=1326 audit(2000000329.863:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.090289][   T28] audit: type=1326 audit(2000000329.863:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.115470][   T28] audit: type=1326 audit(2000000329.873:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.140724][   T28] audit: type=1326 audit(2000000329.873:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.166871][T17608] overlayfs: failed to resolve './file0': -2
[  992.175260][T17608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  992.185648][T17608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  992.193587][   T28] audit: type=1326 audit(2000000329.873:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.236119][   T28] audit: type=1326 audit(2000000329.873:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.284958][   T28] audit: type=1326 audit(2000000329.873:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17600 comm="syz.1.5271" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb951d9ce59 code=0x7ffc0000
[  992.429933][T17614] tmpfs: Unknown parameter 'nr_inoB'
[  992.664439][T17511] ------------[ cut here ]------------
[  992.669981][T17511] kernel BUG at fs/buffer.c:2714!
[  992.675647][T17511] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  992.681797][T17511] CPU: 0 PID: 17511 Comm: kmmpd-loop0 Not tainted syzkaller #0
[  992.689347][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  992.699426][T17511] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0
[  992.704877][T17511] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d0 e7 ff e9 b0 fe ff ff e8 5e 2b a2 ff 0f 0b e8 57 2b a2 ff <0f> 0b e8 50 2b a2 ff 0f 0b e8 49 2b a2 ff 0f 0b e8 42 2b a2 ff 0f
[  992.724505][T17511] RSP: 0018:ffffc90000c17ca0 EFLAGS: 00010293
[  992.730582][T17511] RAX: ffffffff81cf5029 RBX: 0000000000000000 RCX: ffff888122625100
[  992.738582][T17511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  992.746580][T17511] RBP: ffffc90000c17cf0 R08: ffff88813420f547 R09: 1ffff11026841ea8
[  992.754559][T17511] R10: dffffc0000000000 R11: ffffed1026841ea9 R12: 0000000000000000
[  992.762540][T17511] R13: 1ffff11026841ea8 R14: ffff88813420f540 R15: 0000000000003801
[  992.770520][T17511] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  992.779492][T17511] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  992.786093][T17511] CR2: 00007f4de3fea540 CR3: 0000000132988000 CR4: 00000000003506b0
[  992.794080][T17511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  992.802062][T17511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  992.810038][T17511] Call Trace:
[  992.813325][T17511]  <TASK>
[  992.816287][T17511]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  992.822113][T17511]  submit_bh+0x1f/0x30
[  992.826196][T17511]  write_mmp_block_thawed+0x397/0x510
[  992.831659][T17511]  ? __cfi_schedule_timeout+0x10/0x10
[  992.837042][T17511]  ? read_mmp_block+0x720/0x720
[  992.841915][T17511]  ? __cfi_process_timeout+0x10/0x10
[  992.847214][T17511]  write_mmp_block+0x138/0x2b0
[  992.851990][T17511]  kmmpd+0x3ce/0x950
[  992.855902][T17511]  kthread+0x281/0x320
[  992.860000][T17511]  ? __cfi_kmmpd+0x10/0x10
[  992.864431][T17511]  ? __cfi_kthread+0x10/0x10
[  992.869032][T17511]  ret_from_fork+0x1f/0x30
[  992.873490][T17511]  </TASK>
[  992.876536][T17511] Modules linked in:
[  992.882254][T17511] ---[ end trace 0000000000000000 ]---
[  992.887850][T17511] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0
[  992.893540][T17511] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d0 e7 ff e9 b0 fe ff ff e8 5e 2b a2 ff 0f 0b e8 57 2b a2 ff <0f> 0b e8 50 2b a2 ff 0f 0b e8 49 2b a2 ff 0f 0b e8 42 2b a2 ff 0f
[  992.913491][T17511] RSP: 0018:ffffc90000c17ca0 EFLAGS: 00010293
[  992.919645][T17511] RAX: ffffffff81cf5029 RBX: 0000000000000000 RCX: ffff888122625100
[  992.928064][T17511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  992.936221][T17511] RBP: ffffc90000c17cf0 R08: ffff88813420f547 R09: 1ffff11026841ea8
[  992.944460][T17511] R10: dffffc0000000000 R11: ffffed1026841ea9 R12: 0000000000000000
[  992.952597][T17511] R13: 1ffff11026841ea8 R14: ffff88813420f540 R15: 0000000000003801
[  992.960732][T17511] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  992.969940][T17511] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  992.976951][T17511] CR2: 00007f4de3fea540 CR3: 000000011bc12000 CR4: 00000000003506b0
[  992.985116][T17511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  992.993336][T17511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  993.001479][T17511] Kernel panic - not syncing: Fatal exception
[  993.008132][T17511] Kernel Offset: disabled
[  993.012457][T17511] Rebooting in 86400 seconds..