last executing test programs:

9.178034513s ago: executing program 4 (id=860):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x2, &(0x7f0000000200)=0x2)
r0 = getpid()
ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000b200000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000091000000000000b7020000000000008500000084000000b70000000000000000000000000000000006b7c4fce747eeb509c6d1b3487643920dfba5000000000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2, 0x800, 0x3ac6)
r6 = socket$inet6(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000007bc200008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffb, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)

7.598489717s ago: executing program 0 (id=869):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff0000c200bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000800000085000000940000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x200, 0x6, 0x5, 0xfff, 0x3, 0x5}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mlockall(0x7)
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sem_semctl\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.477165555s ago: executing program 0 (id=873):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_setup(0x1, &(0x7f0000000200))
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x2040600)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x2)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000008840))
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}}, 0x800)

6.159090133s ago: executing program 2 (id=879):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x0, 0x1, 0x36, 0xc1b0})
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'rose0\x00', {0x2, 0x0, @multicast2}})
r6 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x9000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)

6.158276823s ago: executing program 4 (id=881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000000)={0x40a4, 0x2})
r8 = socket$inet(0x2, 0x2, 0x1)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
shutdown(r9, 0x0)
shutdown(r8, 0x0)

5.904892868s ago: executing program 1 (id=882):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000040)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[], 0x1, 0x1534, &(0x7f0000001300)="$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")
sysinfo(&(0x7f0000000180)=""/65)

4.990703473s ago: executing program 4 (id=884):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x200, @loopback, 0x2}, 0x1c)
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000040)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[], 0x1, 0x1534, &(0x7f0000001300)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm8SyyRJLklySZIkSXJLSJrkSEJiyC1pSJJch+QyhOQyMWnc7/dLQpI0SRKSW7L+H8Vfnep3zvmdfjmfM8/383k/1jNrP2s/+33ey94b83WnwdUb1qhSn4jg34I//5EMALEA0B8ArgKAAADKxJeJPz+fU2Lyv7cT9ud6MO1yV8AuJ+5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZOLXA1P7Lvg+////er+4cz/P3/XySr5OjPV5e8tjNAzD+bwv3P3rj//7WCf2Yj7n/2xv3PrmIvdwHsPwC//7ODHH84w/3P3rj/jGVnl/v+8+V+QCR7PweX+/XHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOUvUQBwcXy562KMMcYYY4wxxtifx+e43BUwxhhjjDHGGGPs/x6CAAkKAoiBHBALOSEOBABcCbnhKojA1RAP10AeuBbyQj7IDwUgAQpCIdBgwAJBCIWhCEThOigK10MxuAGKQwlwUBIS4UYoBTdBabgZysAtUBZuhXJQHipARbgNKsHtUBnugCpwJ1SFalAdasBdUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGJtAUmkHz/1X+89ANXoDu0AOSoSf0ghehN/SBvtAP+sNLMABehoHwCqTAIBgMr8IQeA2GwuswDN6A4fAmjICRMApGwxgYC6kwDsbDWzAB3oaJMAkmwxRIg6kwDd6B6TADZsK7MAveg9kwB+bCPEiH92E+LIAM+AAWwoeQCYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w0ewAz6GnbALdsMnsAc+/RfzT/5dfmcEBBQoUKHCGIzBWIzFOIzDXJgLc2NujGAE4zEe82AezIt5MT/mxwRMwEJYCA0aJCQsjIUxilEsikWxGBbD4lgcHTpMxEQshTdhaSyNZbAMlsWyWA7LY3msiBWxElbCylgZq2AVrIpVsTpWx7vwLuyJtbAW1sbaWAfrXLw9hfWxPjbABtgQG2IjbISNsTE2xabYHJtjC2yBLbEltsbW2AbbYFtsi0mYhO2wHbbH9tgBO2BH7IidsBN2xi7YJev5HIAv4AvYA6uKntgLe2FvTMnRF/thP3wJB+DL+DK+gik4CAfjq/gqvoZD8QQOwzdwOA7HSmIkjsLRSGIspmIqjsfxOAEn4ESchJNwCqbhVJyG03A6zsAZ+C7OwvfwPZyDc3AepmM6zscFmIEZuBBPYiYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFt+A23AYfoQLAj3EX7sIU3IN7cC/uxX24D/fjfszCLDyAB/AgHsRDeAgP42E8gkfxGB7F43gcT+BJPIWn8AyewbP4bMKXDT66YVUKiPOUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoLooLJ5xIFImilCglSovSooy4RZQVt4pyorxo5SqKiqKSaO0qiztEFVFFVBXVRHVRQ9QQNUVNUUvUErVFbVFH1BF1xf2inuiJffFBcb4zDcUgbCQGY2PRRMgLn2AtxFBsKVqJ1uJx8QYOw7aihUsST4l2YhS2F38To/EZ0VGMxU7iOdFZdBFdxfOim2jpuoseYiL2FL3EFOwt+oi+op+YjtXEuzgrZ3XxikgRg8Rg8aqYh6+JoeJ1MeynI31TjBAjxSgxWowRY0WqGCfGi7fEBPG2mCgmicliikgTU8U08Y6YLmaImeJdMUu8J2aLOWKumCfSxftivlggMsQHYqH4UGSKRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrv4SOwQH4udYpfYLT4Re8SnYq/4TOwTn4v94guRJb4UB8RX4qD4WhwS34jD4ltxRBwVx8R34rj4XpwQJ8UpcVqcET+Is+JHcU54ARKlkFIqGcgYmUPGypwyTl4hc8ngwrN7tYyX18g88lqZV+aT+WUBmSALykJSSyOtJBnKwrKIjMrrZFF5vSwmb5DFZQnpZEmZKG+UpeRNsrS8WZaRt8iy8lZZTpaXFWRFeZusJG+XEPl5H1VlNVld1pB3yWS4W9aS98ja8l5ZR94n68r7ZT35gKwvH5QN5EOyoXxYNpKPyMayiWwqm8nm8lHZQj4mW8pWsrV8XLaRT8i28kmZJJ+S7aS/8BJ5RnaUz8pO8jnZWXaRXeWP8pz0srvsIaEnyF7yRdlb9pF9ZT/ZX74kB8iX5UD5ikyRg+Rg+aocIl+TQ+Xrcph8Qw6Xb8oRcqQcJUfLMXKsTJXj5Hj5lpwg35YT5SQ5WU6RaXKq7HthpZlS/sP8t34nf+BPe98gN8pNcrPcIrfKbXK7/EjukDvkTrlT7pa75R65R+6Ve+U+uU/ul/tllsySB+QBeVAelIfkIXlYHpZH5FF5Wn4nj8vv5Ql5Up6Up+UZeUaevfAcgEIllFRKBSpG5VCxKqeKU1eoXOpKlVtdpSLqahWvrlF51LUqr8qn8qsCKkEVVIWUVkZZRSpUhVURFVXX4YUXjCquSiinSqpEdeO/kq+KqutVMXXDr/Iv1pf8B/U1V81VC9VCtVQtVWvVWrVRbVRb1VYlqSTVTrVT7VV71UF1UB1VR9VJdVKdVWfVVXVV3VQ31V11V8kqWfVSL6reqo/qq/qp/uolNUANUAPVQJWiUtRgNVgNUUPUUDVUDVPD1HA1XI1QI9QoNUqNUWNUqkpV49V4NUFNUBPVRDVZTVZpKk1NU9PUdDVdzVQz1Sw1S81Ws9VcNVelq3Q1X81XGSpDLVQLVaZapBapJWqJWqaWqRVqhVqlVqk1ao1ap9apTLVRbVSb1Wa1VW1V29V2tUPtUDvVTrVb7VZ71B61V+1V+9Q+tV/tV1kqSx1QB9RBdVAdUofUYXVYHVFH1DF1TB1Xx9UJdUKdUqfUGXVGnVVn1Tl17vxpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Nogb5AvyB8UCBKCgkGhQAcmsIG40PRocF1QNLg+KBbcEBQPSgQuKBkkBjcGpYKbgtLBzUGZ4JagbHBrUC4oH1QIKga3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsZBk6Bp0Cxo/qeu7/2JfI+57rqHTtY9dS/9ou6t++i+up/ur1/SA/TLeqB+RafoQXqwflUP0a/pofp1PUy/oYfrN/UIPVKP0qP1GD1Wp+pxerx+S0/Qb+uJepKerKfoND1VT9Pv6Ol6hp6p39Wz9Ht6tp6j5+p5Ol2/r+frBTpDf6AX6g91pl6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa364/0Dv2x3ql36d36E71Hf6r36s/0Pv253q+/0Fn6S31Af6UP6q/1If2NPqy/1Uf0UX1Mf6eP6+/1CX1Sn9Kn9Rn9gz6rf9TntD9/cn/+690oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQy55EhU9gUNlETNUVNUVPMFDPFTXHjjDOJJtGUMqVMaVPalDFlTFlT1pQz5UwFU8HcZm4zt5vbzR3mDnOnudNUM9VMDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NU9PUNDfNTQvTwrQ0LU1r09q0MW1MW9PWJJkk0860M+1Ne9PBdDAdTUfTyXQynU1n09V0Nd1MN9PddDfJJtn0Mr1Mb9Pb9DV9TX/T3wwwA8xAM9CkmBQz2Aw2Q8wQM9QMNcPMG2b4+RNVM9KMMqPNGDPWpJpUM96MNxPMBDPRTDSTzWSTZtLMNDPNTDfTzUwz08wys8xsM9vMNXNNukk38818k2EyzEKz0GSaTLPYLDZLzVKz3Cw3K81Ks9qsNmthrVlv1puNZqPZbDabrWar2W62mx1mh9lpdprdZrfZY/aYvWav2Wf2mf1mv8kyWeaAOWAOmoPmkDlkDpvD5og5Yo6ZY+a4OW5OmBPmlDllzph8F74vvYm1OW2cvcLmslfa3PYq+/dxflvAJtiCtpDVNq/N96vYWGuL2RtscVvCOlvSJtobfxOXs+VtBVvR3mYr2dtt5d/ENe3dtpa9x9a299oa9q5fxXXsfbaufdjWQwSwTWwD28w2tA/bRvYR29g2sU1tM9vGPmHb2idtkn3KtrNP/yaebxfYlXaVXW3X2J12lz1lT9uD9mt7xv5gu9setr99yQ6wL9uB9hWbYgf9Jh5u37Qj7Eg7yo62Y+zY38ST7RSbZqfaafYdO93O+E2cbt+3s2yGnW3n2Ll23k/x+Zoy7Ad2of3QZtoAFtsldqldZpfbFf+/1iV2nV1vN9gd9mO72W6xW+02u/3iibDdZXfbT+we+6k9YL+y++zndr89ZLPslz/F54/vkP3GHrbf2iP2qD1mv7PH7ffqp9yRvQHsD/Y7+6M9Z70FQgKSpCigGMpBsZST4ugKykVXUm66iiJ0NcXTNZSHrqW8lI/yUwFKoIJUiDQZskQUUmEqQlG6ji6WV5xKkKOSlEg3Uim6iUrTzVSGbqGydCuVo/JUgSrSbVSJbqfKdAdVoTupKlWj6lSD7qKadDfVonuoNt1Ldeg+qkv3Uz16gOrTg9SAHqKG9DA1okeoMTWhptSMmtOj1IIeo5bUilrT49SGnqC29CQl0VPUjp6m9vQ36kDPUEd6ljrRc9SZulBXep660QvUnXpQMvWkXvQi9aY+1Jf6UX96iQbQyzSQXqEUGkSD6VUaQq/RUHqdhtEbNJzepBE0kkbRaBpDYymVxtF4eosm0Ns0kSbRZJpCaTSVptE7NJ1m0Ex6l2bRezSb5tBcmkfp9D7NpwWUQR/QQvqQMmkRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdvqIdtDHtJN20W76hPbQp7SXPqN99Dntpy8oi76kA/QVHaSv6RB943vQt3SEjtIx+o6O0/d0gk7SKTpNZ+gHOks/0jnyBCGGIpShCoMwJswRxoY5w7jwijBXeGWYO7wqjIRXh/HhNWGe8Nowb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGw+vCouH1YbEQw+JhidCFJcPE8MawVHhTWDq8OSwT3hKWDW8Ny4Xlw4fvrRjeFlYKbw8rh3eEVcI7w6phtbB6WCO8K6wZ3h3WCu8Ja4f3hqXD+8K64f1hvfCBsH74YNggfChsGD4cNgofCRuHTcKmYbOwefho2CJ8LGwZtgpbh4+HbcInwrbhk2FS+FTYLnz6p/n7FvzxfHLYM+wVvhi+GHp/j5wbnRdNj74fnR9dEM2IfhBdGP0wmhldFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RD1vkYOcOiEk065wMW4HC7W5XRx7gqXy13pcrurXMRd7eLdNS6Pu9bldflcflfAJbiCrpDTzjjryIWusCviou46V9Rd74q5G1xxV8I5V9IlumauuWvuWrjHXEvXyrV2j7vH3RPuCfeke9I95dq5p1179zfXwT3jOrpn3bPuOdfZdXFd3fOumxuX++f3ZLLr5Xq53q636+v6uv6uvxvgBriBbqBLcSlusBvshrghbqgb6oa5YW64G+5GuBFulBvlxrgxLtWluvFuvJvgJriJbqKb7Ca7NJfmprlpbrqb7irN+Hkvs91sN9fNdeku3c13588ZM9xCt9Bluky32C12S91St9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A6301/186Juj9vr9rp9bp/b775wWe5Ld8B95Q66r90h94077L51R9xRd8x95467790Jd9KdcqfdGfeDO+t+dOecd6mRcZHxkbciEyJvRyZGJkUmR6ZE0iJTI9Mi70SmR2ZEZkbejcyKvBeZHZkTmRuZF0mPvB+ZH1kQyYh8EFkY+TCSGVkUWRxZElkaWRbxvuDm0Bf2RXzUX+eL+ut9MX+DL+5LeOdL+kR/oy/lb/Kl/c2+jL/Fl/W3+nK+vK/gH/GNfRPf1Dfzzf2jvoV/zLf0rXxr/7hv45/wbf2TPsk/5dv5p317/zffwT/jO/pnfSf/nO/su/iu/nnfzb/gu/sePtn39L38i7637+P7+n6+v3/JD/Av+4H+FZ/iB/nB/lU/xL/mh/rX/TD/hh8e86YfcfESGcb6VD/Oj/dv+Qn+bT/RT/KT/RSf5qf6af4dP93P8DP9u36Wf8/P9nP8XD/Pp/v3/Xy/wGf4D/xC/6HP9Isu3lT2y/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9R36H/9jv9Lv8bv+J3+M/9Xv9Z36f/9zv91/4LP+lP+C/8gf91/6Q/8Yf9t/6I/6oP+a/88f99/6EP+lP+dP+jP/Bn/U/+nP8f9YYY4wxxv4p4y4Nxa9nfr6d3/N3csQvNu4FAFduKZD1y/nzZ5Rr8/487iMS2kQA4KkenR68+KhaNTk5+cK2mRKCInMALv5N0HkxcCleBK3hCUiCVlDqd+vvI7qcoX+wfvQWgLhf5MTCpfjS+p8BYPLvrP/o48Pnlw1Pxf8P688BKFbkUk5OuBQvgtY/3V9pBaX/oP58LX5Zf+xv18/5eSpAy1/k5IJL8aX6E+ExeBqSfrUlY4wxxhhjjDH2sz6iQoeL158X/8Xn712fJ6hLOTngUvyPrs8ZY4wxxhhjjDF2+T3TpeuTjyYlterwrw8q/6+y/ulBI/i/WvkvGdzxn1HGvzDwHuDiTxQA/JsLApwfyL/yKDb9JftKufDW+fuppad9AP8ZrfwzBpf5g4kxxhhjjDH2p7t00v/rn6vLVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYN/RW/TuyX++tx+Q6VMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu2z+XwAAAP//dMcCKA==")
sysinfo(&(0x7f0000000180)=""/65)
socket(0x1a, 0x803, 0x6)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
waitid(0x2, 0x0, 0x0, 0x41000004, &(0x7f0000000040))

4.989893473s ago: executing program 2 (id=885):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff0000c200bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000800000085000000940000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x200, 0x6, 0x5, 0xfff, 0x3, 0x5}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mlockall(0x7)
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sem_semctl\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.885092329s ago: executing program 3 (id=887):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
recvfrom$inet6(r0, 0x0, 0x0, 0x20040, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90, 0x1000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

4.831967412s ago: executing program 3 (id=888):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r1 = dup(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
io_setup(0x5, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000240)='/', 0x1}])
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="000100006800000425bd7000fedbdf250a0001000f000000040004001c00020001000000040000000200000008000000020000000600000004000b004c000c800880030005000000080002000100000008000200010000000800020073ce00000800030008000000080003000500000008000300050000000000000000000000fe0000000100000009000000080000000700000001f2000000020000000200000008000000010000000400000002000000050000002c000c80080002001000000008002cfc8a44069e64e7aded570300cf0000000600010006000000080002000708000008000300"], 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x100)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x60}}, 0x20088001)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adff", @ANYRES16=r4], 0x40c}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
unlink(&(0x7f0000000280)='./file2\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x11, r1, 0x10000000)
getpid()

3.918853367s ago: executing program 1 (id=889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010500000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000200000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2086, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xc1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000080)=0x3, 0x4)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000cc0)="$eJzs3E1rE1scx/H/bdrmobTJhcuFW7j1j250M7TxBWiQFooBpTZFXQhTO9GQMSkzIRIRm4249XUUl+4E9Q10I27cuXBXBMVNF2Kk89AmfYw1aWL7/UCZMz3nl3NCp+V/CjnrN58/KOZdI29WZCCmMiBSlw2R1GYr8FdwHfDaw9KsLhdGvn34/8at21cz2ez0nOpMZv5iWlXHzrx++PjF2beVkYWXY6+ispa6s/4l/Wnt37X/1n/M3y+4WnC1VK6oqYvlcsVctC1dKrhFQ/W6bZmupYWSazkt/Xm7vLxcU7O0NJpYdizXVbNU06JV00pZK05NzXtmoaSGYehoQk63wTbG5Fbn5szMvt2NSEdXhM6Ltt7G9xrjOJn63p251W6tCwAA9K+D63+/1t+//s8u+NcO1/8i1P9dUm+5O6T+x4ngOBkzEfz+tqL+BwAAAAAAAAAAAAAAAAAAAADgT7DRaCQbjUYyvIZfURGJiUh43+t1ojuO+PO/1KPlosOaPrgXE7GfVXPVnH/1+zN5KYgtlkxKUr57z0PAb8/MZqcn1TMUvORmfqWai3hnE3j5UGp3Pj478feUn1d5s5mrBvkhSTTPn5ak/LP3/OntfHgcwko1NyznzzXlDUnKu7tSFluWvOd6O/9kSvXKteyO+ePeuP20c7oGAAAAAAD9wtAtqdb9r3/2o+ENiMnufj8f7q/jcuj/B3bsrwdlnE00AAAAAADHwq09Kpq2bTlHaERF5DfiJ7URkb5Yxo7GZRE59klFpN6btxwTEf87epT45614W6lGG2MGRaQvnoQ2G73+ywQAAACg07aL/l8IvX/axRUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD6tHseWDD868eJcWk53y58oQPiTdNFjv8dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP3jZwAAAP//c10ZHw==")
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', 0x0, 0x630f0d4caa7f8a10, 0x0)
recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4102, 0x1006}, 0xadd}], 0x1, 0x40002000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1800700, &(0x7f0000000880)={[{@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobarrier}, {@nojournal_checksum}, {@nouid32}, {@errors_remount}, {@delalloc}, {@errors_remount}, {@usrquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")

3.735180768s ago: executing program 1 (id=890):
r0 = syz_open_procfs(0x0, &(0x7f0000002ac0)='attr/sockcreate\x00')
read$watch_queue(r0, 0x0, 0x0)
r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
ioprio_get$pid(0x2, 0xffffffffffffffff)
renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x420500, 0x1)
getdents64(r2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000006000000040000000000000f0400000001000000000000000200000c0400000000000000040000000a00000001000000000000000000000400000000040000000000000803000000000000006100"], 0x0, 0x62}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x5d, 0xcb, &(0x7f00000001c0)="29616a46062bde44ce18db06656b3b83b30eac47ed559f72bcd941aff9c16fba98d79756f72b68fe5f3e5fb6d58faa0ca2c81f6f251d34bde3a9c62c2ad2ce7f77b8210e403628e2b0134e2638fe8672f327115165335b0a6201b95c30", &(0x7f00000003c0)=""/203, 0x1, 0x0, 0x95, 0xfb, &(0x7f00000004c0)="2e4c1f19b566a5f3778e7a3fb0f55d8cf66d24b267a805312f28affcb921bd3b7e73bef974e9502f8072a199a269e8966bd724f34064fdb926663de4b52969c3f2db72c5e9457af6384b5cc90a681303b019137a227ae7e1b5fe5f6ae05e5da903a5117691f95ac2f23bb5641c54b6144afb29944268b81a5989119b7ea2c4ac50f6e48c3d74fe476392c131d6840998622ccedbcb", &(0x7f0000000580)="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", 0x6, 0x0, 0x10001}, 0x50)
syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0)

3.734321898s ago: executing program 2 (id=891):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008000000000bdbdf250300000000000580000002800000040005000000"], 0x54}}, 0x4004)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x9)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r6 = timerfd_create(0x8, 0x80000)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90, 0x1000})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

3.674347691s ago: executing program 1 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
getpid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r6 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.584035806s ago: executing program 2 (id=893):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x21, 0x5, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.172919721s ago: executing program 0 (id=894):
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x8000000000000, 0x0, 0x4, 0x401, 0x28af, 0x0, 0x4})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x6c00, 0x13c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0x87, 0x0, &(0x7f0000000280)="4963e387121cc1b540a52046ffdb8f30434c81c5f514a678beb6b976e5b46c3ba41b6f17e39f52666a1b3d0240dc3c62902b62f3c9679232186734ee18f63d6f66d3f7c414e38df134477fda1e9cfa416236b9356eb81e931b3268108077ad201d4b1ca8333ff47d2fa217afc73794e7431c2b3ca310234ac23e8e439f593634fb7a7eaaa78fb8"})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x8c)
openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
r6 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000003c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000880), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==")
syz_emit_ethernet(0x3e, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x100000, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, 0x0, 0x0)

2.882180618s ago: executing program 3 (id=895):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xf4)

2.817344312s ago: executing program 1 (id=896):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@data_err_ignore}, {@bsdgroups}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4e7, &(0x7f0000000680)="$eJzs3M9vVNUeAPDvnc60BR7v9fF4KIhSQGNjYgsFhYUbTExcaGKEhSybthKkgKFNFNLIkBj2JC5NjEvjThO3ujSu/ANw4cLEkBDDBnA15s7c206n85OWljKfTzKdc+6ce885995z5/ScuTeAvjWa/kki/hURtyPiP7XoygSjtbcH9xanH95bnI5ypXL6r6Sa7n4az+Tr7cgiY4WIwudJwwZr5q9euzA1Nzd7JYtPLFz8eGL+6rVXz1+cOjd7bvbS5MmTx48dPfH65Gu9V6pJfmm97u/77PL+vW+fvfXudDFfPpy919ejpWJvxRht89lLvW3qibezLpys3k/XN7QwdG04O61LaftfnDt0drMLBGyYSqVSGWr9cbnS6MaqJcCWlcRmlwDYHEvf9PcWp+9nr43peTwZ7p6q/QOU1vtB9qp9UoxClqbU8P/tehqNiA/Kf3+VvqLFOMQnZyLi98dUAACg7/x0Ku8JNvb/CrGnLt2/szmUkYj4b0Tsioj/RcTuiPh/RDXtMxHxbGMGSUSlTf67G+LL+X+fzSIU7qy5km2k/b83srmtlf2/vPcXIwNZbGdE3mGePZLtk7EoDX14fm72aIvtD3bIv77/l77S/PO+YFaOO8WGAbqZqYWpR6vtandvROwrNtY/KaYHLp/GSSJib0Ts62G7I3Xh8698s38pUsrev6y9da5/VaXJlF7P83HNVL6OeLl2/MtRf/yT5RyT9vOTE8MxN3tkIj0LjjTN45dfb77XKv+O9f/hj8ZV3jrx4+k11zt3dzBie935H/n87fIk6kgSkSzN185HVAZ6y+Pmb61XyOdIyz2e/4PJmWo4b1+fTi0sXDkaMZi8s3r55PK6eTxPn57/Y4ebt/9d2TrpnnguItKT+PmIeCEiDmRlPxgRhyLicJv6//zmix+1q38X5/9jk9Z/pun1b8XxX56v7zKQr5wuGbhw8PbDFheP7q5/x6uhsWxJ8+tfsuIS0W1J17b3AAAAYGsoRPW3/4XxpXChMD5eGwPaHdsLc5fnFw5ExKWZ2j0CI1Eq5CNdtfHgUpKPf47UxScb4seyceMvBrZV4+PTl+dmNrvy0Od2VNt8sqr9p/7scZwX2ILWYR4N2KI6tf89tzaoIMCG8/0P/auu/ZdbJCn7pQw8nXz/Q/9q1v6vx7dt711wzYCtr6ItQ1/T/qF/FeP9pXD1tuemd9sCTyPf/9CXer2vv5tA/riGaxcqQ83TDEeTJwYMr3MxssC2JnltSiDtWa3jBksR0V3ibY+SRd4FbP2Eh0JvGxyK1R8NRLu1kh6e45AH0r3SMfG5Pet+8ufPROmcON+x3W35u+V2Wqo7FsVOR2ftgQ27BAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxW/wQAAP//xYbIvg==")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x148)
getdents64(r3, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000768000/0xb000)=nil, &(0x7f000033a000/0x1000)=nil, &(0x7f00004e2000/0x4000)=nil, &(0x7f0000172000/0x9000)=nil, &(0x7f0000599000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000033d000/0x4000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000786000/0x2000)=nil, &(0x7f0000000140)="f478fe164cf96b4380d14d07924189fcc1543105c7bcbaf60572c0f3ca5d3bb9664ded91b67577468a65a2750d74e6642a118ba16a5facf3f52647701e4f7d028fa898d97a12439e47c0606b4df39fabbd36459e22a32fce465e6b90e4e83eaa2ccb631ba8f2592737ed8a0ee2ee09966de560daf940e1da02635d072de580eb73f4d538bca28765a894b624f5a242e65de05dd2bda6055558a231c1348bfb1704c731540c8a7204d15d785e530fcf063d5f688d4942c825f148b2e08dfa96535dfb8a4d9b2a9101f14a816a9cbaef0509537f792e3db47aad51", 0xda, r0}, 0x68)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

2.736069317s ago: executing program 3 (id=897):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
r4 = memfd_create(&(0x7f0000000040)='\xe9`\x10\x98[\x82\xaa\x00\x00\x00\x04\a\xdc\x96\xa1\xbc\x80\x10+\xb6O\xb3\xe1i.\xa2\xb7\x83\x1aT\x00v\x02\x02\xfa\xdf\xdbx\x9e}E,\x9e\xc8\xc9\xc4d{5\xe4\x93W', 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100))
splice(r2, 0x0, r4, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

2.735878687s ago: executing program 4 (id=898):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
recvfrom$inet6(r0, 0x0, 0x0, 0x20040, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

2.735468887s ago: executing program 4 (id=899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000000)={0x40a4, 0x2})
r8 = socket$inet(0x2, 0x2, 0x1)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
shutdown(r9, 0x0)
shutdown(r8, 0x0)

2.6978249s ago: executing program 2 (id=900):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
close(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)=r2}, 0x20)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x5f, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r9=>0x0})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000001c0)={0x3, 0x5, 0x0, 0x2, 0x6, "dc582be3aa8e61eb463db769974df8361124eb", 0xb8a, 0xaf})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000000340))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)
bind$can_raw(r0, &(0x7f0000000200)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100)=0x4, 0x4)

2.02459225s ago: executing program 0 (id=901):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a59049de4e39fcffe017224df433e0332128795f3db69374de4eacb4032dcb601da515336fac9ab70060012f7039e134e15d34e247d9c1bb3980100000001000000276968c61ac40f0dac2ed3837d24e47a71a77976b407ab01570527f29a40"], 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xda180000}]}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006300)="00000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049177e1dad660bce000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00", 0x2000, &(0x7f00000041c0)={&(0x7f00000002c0)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x0, 0x20800884, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2, 0x1200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0xde0, {0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
statx(r1, &(0x7f0000000340)='./bus\x00', 0x800, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f00000004c0))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r3, 0x7ac87000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3020, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000380)=0x40)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1)

1.451542784s ago: executing program 1 (id=902):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff0000c200bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000800000085000000940000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18})
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x200, 0x6, 0x5, 0xfff, 0x3, 0x5}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mlockall(0x7)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sem_semctl\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.269207165s ago: executing program 3 (id=903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
getpid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.261108955s ago: executing program 4 (id=904):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_setup(0x1, &(0x7f0000000200))
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
unshare(0x2040600)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x2)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000008840))
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}}, 0x800)

1.171452491s ago: executing program 2 (id=905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000000)={0x40a4, 0x2})
r8 = socket$inet(0x2, 0x2, 0x1)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
shutdown(r9, 0x0)
shutdown(r8, 0x0)

37.688418ms ago: executing program 3 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000000)={0x40a4, 0x2})
socket$inet(0x2, 0x2, 0x1)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
shutdown(r8, 0x0)

37.400238ms ago: executing program 0 (id=907):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000200)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@xino_on}]})

0s ago: executing program 0 (id=908):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x22e0d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0x21}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r3 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ppoll(&(0x7f00000000c0)=[{r3, 0x12044}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bc000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x61)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x52c, 0x8, 0x6, 0x10001}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)={0xffffff7f, {{0xa, 0x4e24, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x1}, 0x90)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

(1769398046.868:274): avc:  denied  { create } for  pid=961 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1
[   61.695308][  T962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'.
[   61.704410][   T28] audit: type=1400 audit(1769398046.898:275): avc:  denied  { write } for  pid=961 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[   61.733788][  T297] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   61.733819][  T919] usb 1-1: USB disconnect, device number 6
[   61.775224][  T297] usb 5-1: device descriptor read/8, error -71
[   61.925239][  T297] usb 5-1: device descriptor read/8, error -71
[   62.079345][  T297] usb usb5-port1: unable to enumerate USB device
[   62.460324][  T993] xt_TCPMSS: Only works on TCP SYN packets
[   62.468104][  T993] No source specified
[   63.659243][ T1005] netlink: 148 bytes leftover after parsing attributes in process `syz.0.204'.
[   63.683793][ T1005] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   63.801321][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   63.801358][   T28] audit: type=1400 audit(1769398048.998:278): avc:  denied  { getopt } for  pid=1007 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   63.995710][   T28] audit: type=1400 audit(1769398049.198:279): avc:  denied  { watch } for  pid=1011 comm="syz.3.207" path="/35" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   63.996645][ T1012] process 'syz.3.207' launched './file0' with NULL argv: empty string added
[   64.136655][   T28] audit: type=1400 audit(1769398049.338:280): avc:  denied  { execute_no_trans } for  pid=1011 comm="syz.3.207" path="/35/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   64.385930][   T28] audit: type=1326 audit(1769398049.588:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1560b9acb9 code=0x0
[   64.411737][ T1012] overlayfs: missing 'lowerdir'
[   64.703715][  T919] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   64.843975][ T1025] device syzkaller1 entered promiscuous mode
[   64.894762][  T919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.912113][  T919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   64.937096][  T919] usb 4-1: config 1 has no interface number 0
[   64.943423][   T28] audit: type=1400 audit(1769398050.138:282): avc:  denied  { bind } for  pid=1032 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.964051][  T919] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   64.975760][  T919] usb 4-1: config 1 interface 1 has no altsetting 0
[   64.981045][   T28] audit: type=1400 audit(1769398050.138:283): avc:  denied  { setopt } for  pid=1032 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.994721][  T919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   65.036632][  T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.044768][  T919] usb 4-1: Product: syz
[   65.049238][  T919] usb 4-1: Manufacturer: syz
[   65.054030][  T919] usb 4-1: SerialNumber: syz
[   65.079004][ T1012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   65.300243][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   65.312740][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   65.402862][  T919] cdc_mbim: probe of 4-1:1.1 failed with error -71
[   65.612124][ T1041] 9pnet_fd: Insufficient options for proto=fd
[   66.490557][ T1049] netlink: 168 bytes leftover after parsing attributes in process `syz.0.216'.
[   66.691589][  T919] usb 4-1: USB disconnect, device number 4
[   66.736291][   T28] audit: type=1400 audit(1769398051.938:284): avc:  denied  { setopt } for  pid=1051 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   66.738290][ T1048] sched: RT throttling activated
[   66.836195][   T28] audit: type=1400 audit(1769398052.038:285): avc:  denied  { bind } for  pid=1051 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   67.886254][ T1072] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x1
[   69.190606][   T28] audit: type=1400 audit(1769398054.388:286): avc:  denied  { write } for  pid=1088 comm="syz.1.228" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.909642][   T28] audit: type=1400 audit(1769398054.598:287): avc:  denied  { add_name } for  pid=1088 comm="syz.1.228" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   69.973394][   T28] audit: type=1400 audit(1769398054.598:288): avc:  denied  { associate } for  pid=1088 comm="syz.1.228" name="syz0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   75.206245][   T28] audit: type=1400 audit(1769398060.408:289): avc:  denied  { write } for  pid=1133 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   75.410719][   T28] audit: type=1400 audit(1769398060.608:290): avc:  denied  { nlmsg_read } for  pid=1148 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   75.533119][ T1154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'.
[   75.673774][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   75.832633][ T1160] FAULT_INJECTION: forcing a failure.
[   75.832633][ T1160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.846096][ T1160] CPU: 1 PID: 1160 Comm: syz.2.250 Not tainted syzkaller #0
[   75.853399][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   75.863564][ T1160] Call Trace:
[   75.866983][ T1160]  <TASK>
[   75.870002][ T1160]  __dump_stack+0x21/0x24
[   75.874335][ T1160]  dump_stack_lvl+0x110/0x170
[   75.879005][ T1160]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.884211][ T1160]  dump_stack+0x15/0x24
[   75.888460][ T1160]  should_fail_ex+0x3d4/0x520
[   75.893151][ T1160]  should_fail+0xb/0x10
[   75.897389][ T1160]  should_fail_usercopy+0x1a/0x20
[   75.902410][ T1160]  _copy_to_iter+0x190/0xea0
[   75.907009][ T1160]  ? __cfi__copy_to_iter+0x10/0x10
[   75.912124][ T1160]  ? __cfi_woken_wake_function+0x10/0x10
[   75.917759][ T1160]  ? check_stack_object+0x106/0x140
[   75.922977][ T1160]  ? __check_object_size+0x86/0x600
[   75.928293][ T1160]  tty_read+0x302/0x5a0
[   75.932646][ T1160]  ? __cfi_tty_read+0x10/0x10
[   75.937329][ T1160]  ? avc_policy_seqno+0x1b/0x70
[   75.942274][ T1160]  ? fsnotify_perm+0x269/0x5b0
[   75.947038][ T1160]  vfs_read+0x454/0x910
[   75.951205][ T1160]  ? __cfi_vfs_read+0x10/0x10
[   75.955927][ T1160]  ? __fget_files+0x2d5/0x330
[   75.961032][ T1160]  ? __fdget_pos+0x1f2/0x380
[   75.966155][ T1160]  ? ksys_read+0x71/0x250
[   75.970742][ T1160]  ksys_read+0x149/0x250
[   75.975366][ T1160]  ? __cfi_ksys_read+0x10/0x10
[   75.980393][ T1160]  ? fpregs_restore_userregs+0x128/0x260
[   75.986323][ T1160]  __x64_sys_read+0x7b/0x90
[   75.991046][ T1160]  x64_sys_call+0x2f/0x9a0
[   75.995820][ T1160]  do_syscall_64+0x4c/0xa0
[   76.000286][ T1160]  ? clear_bhb_loop+0x30/0x80
[   76.005240][ T1160]  ? clear_bhb_loop+0x30/0x80
[   76.010287][ T1160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   76.016280][ T1160] RIP: 0033:0x7fdd3299acb9
[   76.020780][ T1160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.040497][ T1160] RSP: 002b:00007fdd337b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   76.049101][ T1160] RAX: ffffffffffffffda RBX: 00007fdd32c16090 RCX: 00007fdd3299acb9
[   76.057263][ T1160] RDX: 00000000000000ad RSI: 0000200000000240 RDI: 0000000000000003
[   76.065238][ T1160] RBP: 00007fdd337b8090 R08: 0000000000000000 R09: 0000000000000000
[   76.073468][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.081438][ T1160] R13: 00007fdd32c16128 R14: 00007fdd32c16090 R15: 00007ffdfc435628
[   76.089410][ T1160]  </TASK>
[   76.113742][   T24] usb 2-1: Using ep0 maxpacket: 32
[   76.120720][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.141229][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.153590][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   76.163244][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.190698][   T24] usb 2-1: config 0 descriptor??
[   79.498895][   T28] audit: type=1400 audit(1769398064.698:291): avc:  denied  { read } for  pid=1161 comm="syz.4.251" path="socket:[18799]" dev="sockfs" ino=18799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   79.581707][   T28] audit: type=1326 audit(1769398064.748:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="syz.4.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46e39acb9 code=0x0
[   79.674457][   T24] usb 2-1: can't set config #0, error -71
[   79.681369][   T24] usb 2-1: USB disconnect, device number 3
[   79.823810][   T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   79.973699][   T39] usb 5-1: device descriptor read/64, error -71
[   80.243670][   T39] usb 5-1: device descriptor read/64, error -71
[   80.513723][   T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   80.652968][   T28] audit: type=1400 audit(1769398065.848:293): avc:  denied  { map } for  pid=1190 comm="syz.3.260" path="socket:[19472]" dev="sockfs" ino=19472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.675922][   T28] audit: type=1400 audit(1769398065.848:294): avc:  denied  { read accept } for  pid=1190 comm="syz.3.260" path="socket:[19472]" dev="sockfs" ino=19472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.713676][   T39] usb 5-1: device descriptor read/64, error -71
[   80.994982][ T1200] netlink: 148 bytes leftover after parsing attributes in process `syz.4.263'.
[   81.006497][ T1200] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   81.022241][   T28] audit: type=1400 audit(1769398066.208:295): avc:  denied  { map } for  pid=1207 comm="syz.2.266" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   81.173810][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   81.323823][   T28] audit: type=1400 audit(1769398066.448:296): avc:  denied  { bind } for  pid=1207 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.373780][   T24] usb 4-1: Using ep0 maxpacket: 16
[   81.453608][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.479383][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.498861][ T1214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.267'.
[   81.508554][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   81.521935][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   81.543777][ T1214] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   81.544615][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.568621][   T24] usb 4-1: config 0 descriptor??
[   81.785210][   T28] audit: type=1400 audit(1769398066.988:297): avc:  denied  { bind } for  pid=1204 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   82.042972][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.170092][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.285033][ T1228] netlink: 'syz.2.271': attribute type 27 has an invalid length.
[   82.322509][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.397740][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.498020][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.568145][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.575479][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.598962][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.658345][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.722870][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.822147][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.830080][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.849247][ T1234] capability: warning: `syz.3.272' uses deprecated v2 capabilities in a way that may be insecure
[   82.860601][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.873259][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.896405][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.914126][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.924703][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   82.929714][   T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   82.956072][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.962716][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5
[   82.963675][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.974820][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.990174][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.008945][   T24] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   83.023590][ T1229] device veth0_vlan left promiscuous mode
[   83.030084][ T1229] device veth0_vlan entered promiscuous mode
[   83.042631][   T24] usb 4-1: USB disconnect, device number 5
[   83.052988][ T1229] device veth1_macvtap left promiscuous mode
[   83.062275][ T1229] device veth1_macvtap entered promiscuous mode
[   83.071201][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.083317][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.112890][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.122837][ T1238] fido_id[1238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   83.138765][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.148836][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.160336][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.169519][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.178725][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.188274][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.197490][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.208128][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.222176][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   83.230790][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.241525][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   83.250037][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.258578][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.268565][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.273746][  T430] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.277833][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.301821][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.473742][  T430] usb 3-1: Using ep0 maxpacket: 8
[   83.482931][  T430] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.503904][  T430] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   83.515206][  T430] usb 3-1: config 0 has no interface number 0
[   83.521420][  T430] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   83.532646][  T430] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   83.550936][  T430] usb 3-1: config 0 interface 88 has no altsetting 0
[   83.568744][  T430] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   83.650155][  T430] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   83.665629][  T430] usb 3-1: Product: syz
[   83.675405][  T430] usb 3-1: Manufacturer: syz
[   83.687593][  T430] usb 3-1: SerialNumber: syz
[   83.698839][  T430] usb 3-1: config 0 descriptor??
[   83.759279][   T28] audit: type=1400 audit(1769398068.958:298): avc:  denied  { connect } for  pid=1256 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.075084][  T430] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input6
[   84.132802][  T430] usb 3-1: USB disconnect, device number 3
[   84.149546][  T411] udevd[411]: Error opening device "/dev/input/event3": Input/output error
[   84.160013][  T411] udevd[411]: Unable to EVIOCGABS device "/dev/input/event3"
[   84.168181][  T411] udevd[411]: Unable to EVIOCGABS device "/dev/input/event3"
[   86.643705][  T531] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   86.834799][  T531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.853718][  T531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.874415][  T531] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   86.922977][  T531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.938164][  T531] usb 4-1: config 0 descriptor??
[   87.395487][ T1262] /dev/loop3: Can't open blockdev
[   87.421552][   T28] audit: type=1400 audit(1769398072.618:299): avc:  denied  { remove_name } for  pid=1261 comm="syz.3.282" name="file0" dev="incremental-fs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.446512][  T531] usbhid 4-1:0.0: can't add hid device: -71
[   87.452521][  T531] usbhid: probe of 4-1:0.0 failed with error -71
[   87.474225][  T531] usb 4-1: USB disconnect, device number 6
[   87.503834][   T28] audit: type=1400 audit(1769398072.618:300): avc:  denied  { unlink } for  pid=1261 comm="syz.3.282" name="file0" dev="incremental-fs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.841969][   T28] audit: type=1400 audit(1769398073.038:301): avc:  denied  { getopt } for  pid=1306 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   89.113916][  T297] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   89.448493][  T297] usb 5-1: unable to get BOS descriptor or descriptor too short
[   89.466122][  T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.649844][  T297] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   89.778050][  T297] usb 5-1: config 1 has no interface number 1
[   89.847271][  T297] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   89.964560][  T297] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   89.989615][  T297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   90.007518][  T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.020809][  T297] usb 5-1: Product: syz
[   90.025245][  T297] usb 5-1: Manufacturer: syz
[   90.533686][  T297] usb 5-1: SerialNumber: syz
[   90.699046][   T28] audit: type=1400 audit(1769398075.898:302): avc:  denied  { create } for  pid=1348 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.722129][   T28] audit: type=1400 audit(1769398075.898:303): avc:  denied  { write } for  pid=1348 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.758085][   T28] audit: type=1400 audit(1769398075.898:304): avc:  denied  { ioctl } for  pid=1348 comm="syz.3.306" path="socket:[19827]" dev="sockfs" ino=19827 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.784373][ T1353] FAULT_INJECTION: forcing a failure.
[   90.784373][ T1353] name failslab, interval 1, probability 0, space 0, times 0
[   90.794283][  T297] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc
[   90.806477][   T28] audit: type=1400 audit(1769398075.898:305): avc:  denied  { shutdown } for  pid=1348 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   90.828718][ T1353] CPU: 0 PID: 1353 Comm: syz.3.309 Not tainted syzkaller #0
[   90.833766][  T297] usb 5-1: USB disconnect, device number 11
[   90.836046][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   90.836061][ T1353] Call Trace:
[   90.836066][ T1353]  <TASK>
[   90.858549][ T1353]  __dump_stack+0x21/0x24
[   90.862978][ T1353]  dump_stack_lvl+0x110/0x170
[   90.867707][ T1353]  ? __cfi_dump_stack_lvl+0x8/0x8
[   90.872730][ T1353]  ? stack_trace_save+0xa6/0xf0
[   90.877830][ T1353]  dump_stack+0x15/0x24
[   90.882083][ T1353]  should_fail_ex+0x3d4/0x520
[   90.886922][ T1353]  __should_failslab+0xac/0xf0
[   90.891671][ T1353]  ? bpf_test_init+0xce/0x160
[   90.896332][ T1353]  should_failslab+0x9/0x20
[   90.900837][ T1353]  __kmem_cache_alloc_node+0x3d/0x2c0
[   90.906795][ T1353]  ? avc_has_perm_noaudit+0x391/0x490
[   90.912151][ T1353]  ? bpf_test_init+0xce/0x160
[   90.917217][ T1353]  __kmalloc+0xa1/0x1e0
[   90.921447][ T1353]  bpf_test_init+0xce/0x160
[   90.926041][ T1353]  bpf_prog_test_run_xdp+0x38c/0xed0
[   90.931426][ T1353]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   90.937303][ T1353]  ? __kasan_check_write+0x14/0x20
[   90.942485][ T1353]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[   90.948475][ T1353]  bpf_prog_test_run+0x3e3/0x640
[   90.953658][ T1353]  ? bpf_prog_query+0x270/0x270
[   90.958773][ T1353]  ? selinux_bpf+0xce/0xf0
[   90.963307][ T1353]  ? security_bpf+0x93/0xb0
[   90.968260][ T1353]  __sys_bpf+0x5ee/0x850
[   90.972693][ T1353]  ? bpf_link_show_fdinfo+0x330/0x330
[   90.978972][ T1353]  ? __cfi_ksys_write+0x10/0x10
[   90.984202][ T1353]  ? debug_smp_processor_id+0x17/0x20
[   90.990444][ T1353]  __x64_sys_bpf+0x7c/0x90
[   90.995029][ T1353]  x64_sys_call+0x488/0x9a0
[   90.999918][ T1353]  do_syscall_64+0x4c/0xa0
[   91.004547][ T1353]  ? clear_bhb_loop+0x30/0x80
[   91.009310][ T1353]  ? clear_bhb_loop+0x30/0x80
[   91.013980][ T1353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.019880][ T1353] RIP: 0033:0x7f8e28d9acb9
[   91.024389][ T1353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.044172][ T1353] RSP: 002b:00007f8e29c88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.052784][ T1353] RAX: ffffffffffffffda RBX: 00007f8e29015fa0 RCX: 00007f8e28d9acb9
[   91.060931][ T1353] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[   91.069022][ T1353] RBP: 00007f8e29c88090 R08: 0000000000000000 R09: 0000000000000000
[   91.077176][ T1353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.085793][ T1353] R13: 00007f8e29016038 R14: 00007f8e29015fa0 R15: 00007ffca6a8be18
[   91.093950][ T1353]  </TASK>
[   91.244994][ T1366] netlink: 168 bytes leftover after parsing attributes in process `syz.3.312'.
[   91.702448][ T1384] netlink: 168 bytes leftover after parsing attributes in process `syz.1.320'.
[   91.743697][  T297] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.933935][  T297] usb 3-1: Using ep0 maxpacket: 16
[   91.940982][  T297] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1056, setting to 1024
[   91.952447][  T297] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[   91.965522][  T297] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.975420][  T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.987900][  T297] usb 3-1: Product: syz
[   91.992488][  T297] usb 3-1: Manufacturer: syz
[   92.155773][  T297] usb 3-1: SerialNumber: syz
[   94.684876][ T1377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   95.123758][   T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   95.304881][   T60] usb 4-1: config index 0 descriptor too short (expected 65305, got 59)
[   95.313542][   T60] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x6 has invalid wMaxPacketSize 0
[   95.323491][   T60] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[   95.336865][   T60] usb 4-1: config 1 interface 0 has no altsetting 0
[   95.344362][   T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.353480][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   95.361565][   T60] usb 4-1: SerialNumber: syz
[   95.368322][   T60] cdc_ether 4-1:1.0: skipping garbage
[   95.373880][   T60] cdc_ether: probe of 4-1:1.0 failed with error -22
[   95.513990][ T1377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   95.546821][   T28] audit: type=1400 audit(1769398080.748:306): avc:  denied  { write } for  pid=1409 comm="syz.4.329" name="ip6_flowlabel" dev="proc" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   95.659842][   T28] audit: type=1400 audit(1769398080.858:307): avc:  denied  { create } for  pid=1402 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   95.743932][  T297] cdc_ncm 3-1:1.0: failed to get mac address
[   95.751680][  T297] cdc_ncm 3-1:1.0: bind() failure
[   95.763916][  T297] cdc_ncm: probe of 3-1:1.1 failed with error -71
[   95.770689][  T297] cdc_mbim: probe of 3-1:1.1 failed with error -71
[   95.786838][   T60] usb 4-1: USB disconnect, device number 7
[   95.808051][  T297] usb 3-1: USB disconnect, device number 4
[   95.841468][ T1416] FAULT_INJECTION: forcing a failure.
[   95.841468][ T1416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.855406][ T1416] CPU: 1 PID: 1416 Comm: syz.1.331 Not tainted syzkaller #0
[   95.862717][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   95.873047][ T1416] Call Trace:
[   95.876336][ T1416]  <TASK>
[   95.879275][ T1416]  __dump_stack+0x21/0x24
[   95.883896][ T1416]  dump_stack_lvl+0x110/0x170
[   95.888601][ T1416]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.893650][ T1416]  dump_stack+0x15/0x24
[   95.897922][ T1416]  should_fail_ex+0x3d4/0x520
[   95.902623][ T1416]  should_fail+0xb/0x10
[   95.906818][ T1416]  should_fail_usercopy+0x1a/0x20
[   95.911869][ T1416]  copyin+0x20/0xa0
[   95.915799][ T1416]  _copy_from_iter+0x3e2/0x1010
[   95.920677][ T1416]  ? __cfi__copy_from_iter+0x10/0x10
[   95.926023][ T1416]  ? __kasan_check_write+0x14/0x20
[   95.931153][ T1416]  ? __build_skb_around+0x24f/0x470
[   95.936460][ T1416]  ? __check_object_size+0x45a/0x600
[   95.941776][ T1416]  netlink_sendmsg+0x73b/0xbd0
[   95.946557][ T1416]  ? __cfi_netlink_sendmsg+0x10/0x10
[   95.951856][ T1416]  ? security_socket_sendmsg+0x93/0xb0
[   95.957530][ T1416]  ? __cfi_netlink_sendmsg+0x10/0x10
[   95.962933][ T1416]  ____sys_sendmsg+0x5cc/0x990
[   95.967849][ T1416]  ? __sys_sendmsg_sock+0x40/0x40
[   95.973179][ T1416]  ? import_iovec+0x7c/0xb0
[   95.977715][ T1416]  ___sys_sendmsg+0x2a2/0x360
[   95.982420][ T1416]  ? __sys_sendmsg+0x290/0x290
[   95.987201][ T1416]  ? __kasan_check_write+0x14/0x20
[   95.992372][ T1416]  ? proc_fail_nth_write+0x180/0x200
[   95.997685][ T1416]  ? vfs_write+0xa2c/0xce0
[   96.002134][ T1416]  ? __fdget+0x19c/0x220
[   96.006403][ T1416]  __x64_sys_sendmsg+0x205/0x2d0
[   96.011367][ T1416]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   96.016849][ T1416]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   96.022938][ T1416]  x64_sys_call+0x171/0x9a0
[   96.027469][ T1416]  do_syscall_64+0x4c/0xa0
[   96.032154][ T1416]  ? clear_bhb_loop+0x30/0x80
[   96.036837][ T1416]  ? clear_bhb_loop+0x30/0x80
[   96.041535][ T1416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.047532][ T1416] RIP: 0033:0x7f1560b9acb9
[   96.052130][ T1416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.072375][ T1416] RSP: 002b:00007f1561acc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.080897][ T1416] RAX: ffffffffffffffda RBX: 00007f1560e15fa0 RCX: 00007f1560b9acb9
[   96.089061][ T1416] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003
[   96.097083][ T1416] RBP: 00007f1561acc090 R08: 0000000000000000 R09: 0000000000000000
[   96.105325][ T1416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.114000][ T1416] R13: 00007f1560e16038 R14: 00007f1560e15fa0 R15: 00007ffcf94c4038
[   96.122077][ T1416]  </TASK>
[   96.237813][ T1430] FAULT_INJECTION: forcing a failure.
[   96.237813][ T1430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.252523][ T1430] CPU: 1 PID: 1430 Comm: syz.1.336 Not tainted syzkaller #0
[   96.259836][ T1430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   96.269986][ T1430] Call Trace:
[   96.273330][ T1430]  <TASK>
[   96.276326][ T1430]  __dump_stack+0x21/0x24
[   96.280679][ T1430]  dump_stack_lvl+0x110/0x170
[   96.285447][ T1430]  ? __cfi_dump_stack_lvl+0x8/0x8
[   96.290481][ T1430]  ? format_decode+0x1bb/0x1520
[   96.295336][ T1430]  dump_stack+0x15/0x24
[   96.299481][ T1430]  should_fail_ex+0x3d4/0x520
[   96.304236][ T1430]  should_fail+0xb/0x10
[   96.308472][ T1430]  should_fail_usercopy+0x1a/0x20
[   96.313487][ T1430]  _copy_from_user+0x1e/0xc0
[   96.318069][ T1430]  kstrtouint_from_user+0xda/0x170
[   96.323159][ T1430]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   96.328881][ T1430]  ? __kasan_check_read+0x11/0x20
[   96.333905][ T1430]  ? _copy_to_user+0x72/0x90
[   96.338480][ T1430]  ? simple_read_from_buffer+0x10f/0x160
[   96.344120][ T1430]  proc_fail_nth_write+0x8b/0x200
[   96.349198][ T1430]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   96.354818][ T1430]  ? security_file_permission+0x8a/0xb0
[   96.360436][ T1430]  ? security_file_permission+0x94/0xb0
[   96.365967][ T1430]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   96.371610][ T1430]  vfs_write+0x40e/0xce0
[   96.375834][ T1430]  ? __kasan_check_read+0x11/0x20
[   96.380845][ T1430]  ? __cfi_vfs_write+0x10/0x10
[   96.385586][ T1430]  ? __kasan_check_write+0x14/0x20
[   96.390871][ T1430]  ? mutex_lock+0x93/0x1b0
[   96.395294][ T1430]  ? __cfi_mutex_lock+0x10/0x10
[   96.400220][ T1430]  ? __fdget_pos+0x2cd/0x380
[   96.404884][ T1430]  ? ksys_write+0x71/0x250
[   96.409381][ T1430]  ksys_write+0x149/0x250
[   96.413707][ T1430]  ? __cfi_ksys_write+0x10/0x10
[   96.418729][ T1430]  ? debug_smp_processor_id+0x17/0x20
[   96.424094][ T1430]  __x64_sys_write+0x7b/0x90
[   96.428671][ T1430]  x64_sys_call+0x27b/0x9a0
[   96.433158][ T1430]  do_syscall_64+0x4c/0xa0
[   96.437567][ T1430]  ? clear_bhb_loop+0x30/0x80
[   96.442233][ T1430]  ? clear_bhb_loop+0x30/0x80
[   96.446977][ T1430]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.452949][ T1430] RIP: 0033:0x7f1560b5b58e
[   96.457357][ T1430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   96.477235][ T1430] RSP: 002b:00007f1561acbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   96.485924][ T1430] RAX: ffffffffffffffda RBX: 00007f1561acc6c0 RCX: 00007f1560b5b58e
[   96.493908][ T1430] RDX: 0000000000000001 RSI: 00007f1561acc0a0 RDI: 0000000000000006
[   96.501864][ T1430] RBP: 00007f1561acc090 R08: 0000000000000000 R09: 0000000000000000
[   96.509820][ T1430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.517774][ T1430] R13: 00007f1560e16038 R14: 00007f1560e15fa0 R15: 00007ffcf94c4038
[   96.525732][ T1430]  </TASK>
[   96.595434][   T28] audit: type=1400 audit(1769398081.798:308): avc:  denied  { set_context_mgr } for  pid=1425 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   96.661424][   T28] audit: type=1400 audit(1769398081.818:309): avc:  denied  { map } for  pid=1425 comm="syz.0.335" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   97.334936][ T1448] mmap: syz.1.340 (1448): VmData 40828928 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   98.759518][ T1479] xt_CT: You must specify a L4 protocol and not use inversions on it
[   98.821916][ T1479] x_tables: duplicate underflow at hook 1
[   98.829999][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready
[   98.877234][ T1484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   99.213698][  T531] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   99.393716][  T531] usb 2-1: Using ep0 maxpacket: 32
[   99.400374][  T531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.420325][ T1510] FAULT_INJECTION: forcing a failure.
[   99.420325][ T1510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.433663][ T1510] CPU: 0 PID: 1510 Comm: syz.2.363 Not tainted syzkaller #0
[   99.440978][ T1510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   99.451655][ T1510] Call Trace:
[   99.455045][ T1510]  <TASK>
[   99.458079][ T1510]  __dump_stack+0x21/0x24
[   99.462429][ T1510]  dump_stack_lvl+0x110/0x170
[   99.467139][ T1510]  ? __cfi_dump_stack_lvl+0x8/0x8
[   99.472270][ T1510]  ? _parse_integer+0x2a/0x40
[   99.477029][ T1510]  dump_stack+0x15/0x24
[   99.481618][ T1510]  should_fail_ex+0x3d4/0x520
[   99.486335][ T1510]  should_fail+0xb/0x10
[   99.490509][ T1510]  should_fail_usercopy+0x1a/0x20
[   99.495566][ T1510]  _copy_from_user+0x1e/0xc0
[   99.500271][ T1510]  ___sys_sendmsg+0x1c3/0x360
[   99.504973][ T1510]  ? __sys_sendmsg+0x290/0x290
[   99.510191][ T1510]  ? __kasan_check_write+0x14/0x20
[   99.515687][ T1510]  ? proc_fail_nth_write+0x180/0x200
[   99.521089][ T1510]  ? vfs_write+0xa2c/0xce0
[   99.525683][ T1510]  ? __fdget+0x19c/0x220
[   99.530012][ T1510]  __x64_sys_sendmsg+0x205/0x2d0
[   99.535081][ T1510]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   99.540639][ T1510]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   99.546713][ T1510]  x64_sys_call+0x171/0x9a0
[   99.551278][ T1510]  do_syscall_64+0x4c/0xa0
[   99.556338][ T1510]  ? clear_bhb_loop+0x30/0x80
[   99.561084][ T1510]  ? clear_bhb_loop+0x30/0x80
[   99.566034][ T1510]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.571949][ T1510] RIP: 0033:0x7fdd3299acb9
[   99.576367][ T1510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.596157][ T1510] RSP: 002b:00007fdd337d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.604670][ T1510] RAX: ffffffffffffffda RBX: 00007fdd32c15fa0 RCX: 00007fdd3299acb9
[   99.612655][ T1510] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   99.620644][ T1510] RBP: 00007fdd337d9090 R08: 0000000000000000 R09: 0000000000000000
[   99.628818][ T1510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.636884][ T1510] R13: 00007fdd32c16038 R14: 00007fdd32c15fa0 R15: 00007ffdfc435628
[   99.644960][ T1510]  </TASK>
[   99.660914][  T531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.673550][  T531] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   99.683409][  T531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.703953][  T531] usb 2-1: config 0 descriptor??
[   99.901175][ T1518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  100.232404][ T1521] random: crng reseeded on system resumption
[  100.239515][   T28] audit: type=1400 audit(1769398085.428:310): avc:  denied  { write } for  pid=1519 comm="syz.0.367" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  100.326491][   T28] audit: type=1400 audit(1769398085.428:311): avc:  denied  { open } for  pid=1519 comm="syz.0.367" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  100.549165][  T531] usbhid 2-1:0.0: can't add hid device: -71
[  100.634867][   T28] audit: type=1400 audit(1769398085.838:312): avc:  denied  { ioctl } for  pid=1519 comm="syz.0.367" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  100.673188][  T531] usbhid: probe of 2-1:0.0 failed with error -71
[  100.729017][   T28] audit: type=1400 audit(1769398085.888:313): avc:  denied  { create } for  pid=1519 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  100.769681][   T28] audit: type=1400 audit(1769398085.908:314): avc:  denied  { shutdown } for  pid=1519 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  100.806183][  T531] usb 2-1: USB disconnect, device number 4
[  100.904986][   T28] audit: type=1400 audit(1769398085.908:315): avc:  denied  { shutdown } for  pid=1519 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  100.926297][   T28] audit: type=1400 audit(1769398085.908:316): avc:  denied  { read } for  pid=1519 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  101.129628][   T28] audit: type=1400 audit(1769398086.328:317): avc:  denied  { load_policy } for  pid=1523 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  101.269457][ T1524] SELinux:  unknown common yz2
[  101.478442][ T1524] SELinux: failed to load policy
[  101.572192][ T1533] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  101.591384][   T28] audit: type=1326 audit(1769398086.788:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz.0.373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaabf9acb9 code=0x0
[  101.742661][   T28] audit: type=1326 audit(1769398086.938:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaabf9acb9 code=0x7ffc0000
[  101.767254][ T1539] netlink: 148 bytes leftover after parsing attributes in process `syz.2.374'.
[  101.769454][   T28] audit: type=1326 audit(1769398086.938:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaabf9acb9 code=0x7ffc0000
[  101.800727][ T1539] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  102.085392][   T28] audit: type=1326 audit(1769398086.938:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1536 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ffaabf9acb9 code=0x7ffc0000
[  102.767603][ T1541] syz.0.373 (1541) used greatest stack depth: 20576 bytes left
[  103.163753][  T531] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  103.343758][  T531] usb 1-1: Using ep0 maxpacket: 32
[  103.351258][  T531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.362399][  T531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.372271][  T531] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  103.381540][  T531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.390034][  T531] usb 1-1: config 0 descriptor??
[  103.453713][  T522] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  103.634811][  T522] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  103.645959][  T522] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  103.655975][  T522] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  103.669860][  T522] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.679309][  T522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  103.687732][  T522] usb 5-1: SerialNumber: syz
[  103.710253][ T1572] netlink: 324 bytes leftover after parsing attributes in process `syz.3.384'.
[  103.723363][ T1572] overlayfs: missing 'workdir'
[  103.799844][  T531] usbhid 1-1:0.0: can't add hid device: -71
[  103.806032][  T531] usbhid: probe of 1-1:0.0 failed with error -71
[  103.815851][  T531] usb 1-1: USB disconnect, device number 7
[  105.616475][ T1610] netlink: 148 bytes leftover after parsing attributes in process `syz.0.396'.
[  105.625796][ T1610] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  105.712577][ T1616] netlink: 168 bytes leftover after parsing attributes in process `syz.3.398'.
[  105.841328][ T1621] netlink: 168 bytes leftover after parsing attributes in process `syz.1.399'.
[  106.082071][  T522] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  106.093315][  T522] cdc_acm: probe of 5-1:1.0 failed with error -12
[  106.103356][  T522] usb 5-1: USB disconnect, device number 12
[  106.306612][ T1630] netlink: 168 bytes leftover after parsing attributes in process `syz.4.401'.
[  107.538142][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  107.538156][   T28] audit: type=1400 audit(1769398092.738:325): avc:  denied  { ioctl } for  pid=1642 comm="syz.3.405" path="socket:[20596]" dev="sockfs" ino=20596 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  107.634635][ T1646] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  107.859636][   T28] audit: type=1400 audit(1769398093.058:326): avc:  denied  { read } for  pid=1649 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  107.960068][   T28] audit: type=1400 audit(1769398093.158:327): avc:  denied  { create } for  pid=1649 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  108.001396][ T1663] netlink: 148 bytes leftover after parsing attributes in process `syz.1.413'.
[  108.010641][ T1663] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  108.223720][  T522] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  108.279081][ T1669] netlink: 168 bytes leftover after parsing attributes in process `syz.1.416'.
[  108.405457][  T522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.417763][  T522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.429254][  T522] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  108.442825][  T522] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  108.452766][  T522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.479318][  T522] usb 4-1: config 0 descriptor??
[  108.671558][ T1694] netlink: 148 bytes leftover after parsing attributes in process `syz.0.425'.
[  108.720715][ T1694] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  108.738091][   T28] audit: type=1400 audit(1769398093.938:328): avc:  denied  { write } for  pid=1698 comm="syz.4.427" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  108.738798][ T1699] 9pnet_fd: Insufficient options for proto=fd
[  108.775963][   T28] audit: type=1400 audit(1769398093.938:329): avc:  denied  { read } for  pid=1698 comm="syz.4.427" dev="sockfs" ino=20709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  108.871490][ T1703] incfs: Error accessing: ./file0.
[  108.892324][ T1703] incfs: mount failed -20
[  108.978430][  T522] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description
[  109.003770][  T522] plantronics 0003:047F:FFFF.0003: parse failed
[  109.010977][  T522] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22
[  109.211275][ T1665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.220581][ T1665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.235948][  T522] usb 4-1: USB disconnect, device number 8
[  109.334187][ T1706] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  109.453364][ T1708] netlink: 168 bytes leftover after parsing attributes in process `syz.4.429'.
[  109.495714][   T28] audit: type=1400 audit(1769398094.698:330): avc:  denied  { sqpoll } for  pid=1709 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  109.532792][   T28] audit: type=1400 audit(1769398094.728:331): avc:  denied  { ioctl } for  pid=1709 comm="syz.2.430" path="socket:[21748]" dev="sockfs" ino=21748 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  109.569844][ T1710] xt_socket: unknown flags 0x4c
[  109.575275][   T28] audit: type=1400 audit(1769398094.768:332): avc:  denied  { read } for  pid=1709 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  109.613106][   T28] audit: type=1400 audit(1769398094.808:333): avc:  denied  { create } for  pid=1714 comm="syz.4.431" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  109.654932][   T28] audit: type=1400 audit(1769398094.818:334): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  110.053743][  T522] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  110.164098][ T1747] netlink: 168 bytes leftover after parsing attributes in process `syz.0.442'.
[  110.303360][  T522] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.315365][  T522] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  110.330351][  T522] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.338083][  T522] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  110.349033][  T522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.467358][  T522] usb 3-1: config 0 descriptor??
[  110.527163][  T522] usbhid 3-1:0.0: can't add hid device: -22
[  110.559383][  T522] usbhid: probe of 3-1:0.0 failed with error -22
[  110.720013][  T522] usb 3-1: USB disconnect, device number 5
[  111.383800][  T522] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  111.544630][ T1775] Zero length message leads to an empty skb
[  111.769394][  T522] usb 1-1: Using ep0 maxpacket: 32
[  111.785732][  T522] usb 1-1: config 2 has an invalid interface number: 2 but max is 0
[  111.794589][  T522] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  111.805360][  T522] usb 1-1: config 2 has no interface number 0
[  111.811875][  T522] usb 1-1: config 2 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  111.826518][  T522] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  111.835781][  T522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.844889][  T522] usb 1-1: Product: syz
[  111.849175][  T522] usb 1-1: Manufacturer: syz
[  111.854137][  T522] usb 1-1: SerialNumber: syz
[  112.071313][  T522] asix: probe of 1-1:2.2 failed with error -22
[  112.078830][  T522] usb 1-1: USB disconnect, device number 8
[  112.093757][ T1047] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  112.256705][ T1047] usb 2-1: device descriptor read/64, error -71
[  112.314623][ T1783] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.321853][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.623743][ T1047] usb 2-1: device descriptor read/64, error -71
[  112.684273][ T1788] netlink: 168 bytes leftover after parsing attributes in process `syz.4.454'.
[  112.893700][ T1047] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  113.053714][ T1047] usb 2-1: device descriptor read/64, error -71
[  113.341790][ T1802] input: syz0 as /devices/virtual/input/input7
[  113.359240][   T28] audit: type=1400 audit(1769398098.558:335): avc:  denied  { write } for  pid=1801 comm="syz.3.458" name="usbmon3" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  113.386123][   T28] audit: type=1400 audit(1769398098.588:336): avc:  denied  { ioctl } for  pid=1801 comm="syz.3.458" path="/dev/usbmon3" dev="devtmpfs" ino=168 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  113.455484][ T1807] FAULT_INJECTION: forcing a failure.
[  113.455484][ T1807] name failslab, interval 1, probability 0, space 0, times 0
[  113.468359][ T1807] CPU: 0 PID: 1807 Comm: syz.4.460 Not tainted syzkaller #0
[  113.476165][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.486245][ T1807] Call Trace:
[  113.489523][ T1807]  <TASK>
[  113.492438][ T1807]  __dump_stack+0x21/0x24
[  113.496852][ T1807]  dump_stack_lvl+0x110/0x170
[  113.501551][ T1807]  ? __cfi_dump_stack_lvl+0x8/0x8
[  113.506698][ T1807]  dump_stack+0x15/0x24
[  113.510866][ T1807]  should_fail_ex+0x3d4/0x520
[  113.515546][ T1807]  ? __kvm_mmu_topup_memory_cache+0x1b9/0x500
[  113.521608][ T1807]  __should_failslab+0xac/0xf0
[  113.526483][ T1807]  should_failslab+0x9/0x20
[  113.531070][ T1807]  kmem_cache_alloc+0x3b/0x330
[  113.535828][ T1807]  ? __kvm_mmu_topup_memory_cache+0x1b9/0x500
[  113.541890][ T1807]  __kvm_mmu_topup_memory_cache+0x1b9/0x500
[  113.547777][ T1807]  kvm_mmu_topup_memory_cache+0x20/0x30
[  113.553320][ T1807]  kvm_mmu_load+0x9c/0x25a0
[  113.557840][ T1807]  ? kvm_hv_setup_tsc_page+0x5f0/0xa80
[  113.563372][ T1807]  ? queue_delayed_work_on+0x10d/0x160
[  113.569083][ T1807]  ? kvm_apic_has_interrupt+0x78f/0x7a0
[  113.574611][ T1807]  vcpu_enter_guest+0x4c9b/0x6f80
[  113.579620][ T1807]  ? __cfi_avc_has_perm+0x10/0x10
[  113.584638][ T1807]  ? pvclock_gtod_update_fn+0x280/0x280
[  113.590455][ T1807]  ? 0xffffffffa0003e80
[  113.595397][ T1807]  ? is_bpf_text_address+0x177/0x190
[  113.600688][ T1807]  ? kernel_text_address+0xa0/0xd0
[  113.605803][ T1807]  ? __kernel_text_address+0xd/0x30
[  113.611118][ T1807]  ? unwind_get_return_address+0x4d/0x90
[  113.616880][ T1807]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  113.623135][ T1807]  ? arch_stack_walk+0xfc/0x150
[  113.628029][ T1807]  ? vmx_vcpu_pi_load+0x144/0x880
[  113.633058][ T1807]  ? __stack_depot_save+0x36/0x480
[  113.638180][ T1807]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[  113.643562][ T1807]  ? _parse_integer_limit+0x18a/0x1d0
[  113.649033][ T1807]  ? __asan_set_shadow_00+0xe/0x10
[  113.654164][ T1807]  ? do_vfs_ioctl+0x1b6c/0x1cd0
[  113.659015][ T1807]  ? __this_cpu_preempt_check+0x13/0x20
[  113.664567][ T1807]  ? xfd_validate_state+0x70/0x150
[  113.669702][ T1807]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[  113.675101][ T1807]  ? __local_bh_enable_ip+0x58/0x80
[  113.680410][ T1807]  ? fpu_swap_kvm_fpstate+0x4ef/0x5d0
[  113.685819][ T1807]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[  113.691152][ T1807]  kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0
[  113.696733][ T1807]  kvm_vcpu_ioctl+0x8f2/0xc00
[  113.701517][ T1807]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  113.706912][ T1807]  ? selinux_file_ioctl+0x3a0/0x4d0
[  113.712231][ T1807]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  113.717889][ T1807]  ? mutex_unlock+0x8f/0x230
[  113.722512][ T1807]  ? __cfi_mutex_unlock+0x10/0x10
[  113.727562][ T1807]  ? __fget_files+0x2d5/0x330
[  113.732889][ T1807]  ? security_file_ioctl+0x95/0xc0
[  113.738037][ T1807]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  113.743271][ T1807]  __se_sys_ioctl+0x12f/0x1b0
[  113.748135][ T1807]  __x64_sys_ioctl+0x7b/0x90
[  113.752737][ T1807]  x64_sys_call+0x58b/0x9a0
[  113.757423][ T1807]  do_syscall_64+0x4c/0xa0
[  113.761946][ T1807]  ? clear_bhb_loop+0x30/0x80
[  113.766635][ T1807]  ? clear_bhb_loop+0x30/0x80
[  113.771315][ T1807]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.773862][  T522] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  113.777311][ T1807] RIP: 0033:0x7fd46e39acb9
[  113.777342][ T1807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.777357][ T1807] RSP: 002b:00007fd46f222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.817678][ T1807] RAX: ffffffffffffffda RBX: 00007fd46e615fa0 RCX: 00007fd46e39acb9
[  113.825802][ T1807] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  113.833882][ T1807] RBP: 00007fd46f222090 R08: 0000000000000000 R09: 0000000000000000
[  113.841850][ T1807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.849817][ T1807] R13: 00007fd46e616038 R14: 00007fd46e615fa0 R15: 00007ffec563c428
[  113.857800][ T1807]  </TASK>
[  113.892439][ T1047] usb 2-1: device descriptor read/64, error -71
[  113.965716][  T522] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  113.974095][  T522] usb 4-1: config 0 has no interface number 0
[  113.981045][  T522] usb 4-1: config 0 interface 8 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.992678][  T522] usb 4-1: config 0 interface 8 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  114.003805][  T522] usb 4-1: config 0 interface 8 has no altsetting 0
[  114.010428][  T522] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  114.015880][ T1047] usb usb2-port1: attempt power cycle
[  114.021588][  T522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.047681][  T522] usb 4-1: config 0 descriptor??
[  114.057780][ T1805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  114.079660][   T28] audit: type=1400 audit(1769398099.278:337): avc:  denied  { setopt } for  pid=1820 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.343705][  T297] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  114.433754][ T1047] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  114.465548][ T1047] usb 2-1: device descriptor read/8, error -71
[  114.524789][  T297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.534976][  T297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.553727][  T297] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  114.562918][  T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  114.563859][ T1825] netlink: 11 bytes leftover after parsing attributes in process `syz.4.467'.
[  114.571564][  T297] usb 3-1: SerialNumber: syz
[  114.624722][ T1047] usb 2-1: device descriptor read/8, error -71
[  114.758158][ T1379] usb 4-1: USB disconnect, device number 9
[  114.957346][   T28] audit: type=1400 audit(1769398100.098:338): avc:  denied  { listen } for  pid=1827 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  115.032933][  T297] usb 3-1: 0:2 : does not exist
[  115.046980][  T297] usb 3-1: USB disconnect, device number 6
[  115.314493][  T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.343754][ T1047] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  115.384173][ T1047] usb 2-1: Using ep0 maxpacket: 32
[  115.390550][ T1047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.401632][ T1047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.411592][ T1047] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  115.420845][ T1047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.429829][ T1047] usb 2-1: config 0 descriptor??
[  115.577175][ T1845] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready
[  115.701238][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  115.731264][   T28] audit: type=1400 audit(1769398100.928:339): avc:  denied  { read } for  pid=1859 comm="syz.4.481" name="file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.754470][   T28] audit: type=1400 audit(1769398100.928:340): avc:  denied  { watch } for  pid=1859 comm="syz.4.481" path="/94/file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.778007][ T1863] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  115.878320][ T1047] usbhid 2-1:0.0: can't add hid device: -71
[  115.917615][ T1047] usbhid: probe of 2-1:0.0 failed with error -71
[  115.926714][ T1047] usb 2-1: USB disconnect, device number 8
[  116.036827][ T1875] SELinux:  Context system_u:object is not valid (left unmapped).
[  116.046080][   T28] audit: type=1400 audit(1769398101.248:341): avc:  denied  { relabelto } for  pid=1874 comm="syz.4.484" name="cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  116.058155][ T1873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.483'.
[  116.081069][ T1873] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  116.082013][   T28] audit: type=1400 audit(1769398101.278:342): avc:  denied  { associate } for  pid=1874 comm="syz.4.484" name="cgroup.procs" dev="cgroup" ino=265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object"
[  116.160768][ T1879] mmap: syz.4.486 (1879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.432647][   T28] audit: type=1400 audit(1769398101.628:343): avc:  denied  { lock } for  pid=1883 comm="syz.1.488" path="socket:[21278]" dev="sockfs" ino=21278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  116.433751][ T1379] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  116.582521][ T1897] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[  116.591867][ T1897] netlink: 'syz.2.494': attribute type 2 has an invalid length.
[  118.060509][ T1900] netlink: 168 bytes leftover after parsing attributes in process `syz.1.493'.
[  118.092380][ T1899] netlink: 168 bytes leftover after parsing attributes in process `syz.3.492'.
[  118.135532][ T1379] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  118.220577][ T1379] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  118.241683][ T1379] usb 5-1: config 1 interface 0 has no altsetting 0
[  118.259942][ T1379] usb 5-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.40
[  118.270146][ T1379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.270169][ T1379] usb 5-1: Product: syz
[  118.270182][ T1379] usb 5-1: Manufacturer: syz
[  118.270195][ T1379] usb 5-1: SerialNumber: syz
[  118.277423][ T1879] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  118.375121][   T28] audit: type=1400 audit(1769398103.558:344): avc:  denied  { setattr } for  pid=1907 comm="syz.2.496" name="tty25" dev="devtmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  118.764125][   T28] audit: type=1400 audit(1769398103.848:345): avc:  denied  { name_bind } for  pid=1922 comm="syz.1.502" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  118.810064][ T1379] usbhid 5-1:1.0: can't add hid device: -71
[  118.827164][ T1379] usbhid: probe of 5-1:1.0 failed with error -71
[  118.956612][ T1379] usb 5-1: USB disconnect, device number 13
[  119.076990][   T28] audit: type=1400 audit(1769398103.868:346): avc:  denied  { create } for  pid=1922 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  119.314433][   T28] audit: type=1400 audit(1769398103.878:347): avc:  denied  { sys_admin } for  pid=1922 comm="syz.1.502" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  119.530880][  T531] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  119.629640][ T1940] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  119.945637][  T531] usb 4-1: Using ep0 maxpacket: 32
[  119.952781][  T531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.972970][  T531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.983953][  T531] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  119.993268][  T531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.005831][  T531] usb 4-1: config 0 descriptor??
[  120.414786][  T531] usbhid 4-1:0.0: can't add hid device: -71
[  120.426261][  T531] usbhid: probe of 4-1:0.0 failed with error -71
[  120.446117][   T28] audit: type=1400 audit(1769398105.648:348): avc:  denied  { create } for  pid=1961 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.452301][  T531] usb 4-1: USB disconnect, device number 10
[  120.483675][   T28] audit: type=1400 audit(1769398105.678:349): avc:  denied  { setopt } for  pid=1961 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.520224][ T1964] netlink: 148 bytes leftover after parsing attributes in process `syz.1.516'.
[  120.529396][ T1964] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  120.894250][   T28] audit: type=1326 audit(1769398106.098:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46e39acb9 code=0x7ffc0000
[  120.918175][   T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  120.933686][   T28] audit: type=1326 audit(1769398106.098:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd46e39acb9 code=0x7ffc0000
[  120.957990][   T28] audit: type=1326 audit(1769398106.098:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46e39acb9 code=0x7ffc0000
[  121.013301][ T1976] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  121.164991][   T60] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[  121.173384][   T60] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  121.183935][   T60] usb 1-1: config 0 has no interface number 0
[  121.190258][   T60] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  121.201746][   T60] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  121.211618][ T1379] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  121.211617][   T60] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.234057][   T60] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  121.243126][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2
[  121.251383][   T60] usb 1-1: SerialNumber: syz
[  121.256616][   T60] usb 1-1: config 0 descriptor??
[  121.262744][   T60] usb 1-1: MIDIStreaming interface descriptor not found
[  121.395043][ T1980] netlink: 168 bytes leftover after parsing attributes in process `syz.1.521'.
[  121.423688][ T1379] usb 5-1: Using ep0 maxpacket: 32
[  121.430545][ T1379] usb 5-1: config 2 has an invalid interface number: 2 but max is 0
[  121.439813][ T1379] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  121.451170][ T1379] usb 5-1: config 2 has no interface number 0
[  121.458156][ T1379] usb 5-1: config 2 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  121.486685][ T1379] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  121.496386][ T1379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.517697][ T1379] usb 5-1: Product: syz
[  121.522289][ T1379] usb 5-1: Manufacturer: syz
[  121.528073][ T1379] usb 5-1: SerialNumber: syz
[  121.765844][ T1985] netlink: 168 bytes leftover after parsing attributes in process `syz.2.522'.
[  121.851937][ T1379] asix: probe of 5-1:2.2 failed with error -22
[  121.870662][ T1379] usb 5-1: USB disconnect, device number 14
[  121.876776][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.884005][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.018259][   T60] usb 1-1: USB disconnect, device number 9
[  122.087786][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  122.175680][ T1999] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready
[  122.932068][   T28] audit: type=1400 audit(1769398108.128:353): avc:  denied  { write } for  pid=2009 comm="syz.4.532" path="socket:[22405]" dev="sockfs" ino=22405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  123.058052][ T2019] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  123.065326][ T2019] overlayfs: failed to set xattr on upper
[  123.106165][ T2017] netlink: 148 bytes leftover after parsing attributes in process `syz.1.535'.
[  123.115288][ T2017] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  123.153076][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready
[  123.173717][   T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  123.233687][  T297] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  123.316909][ T2033] netlink: 168 bytes leftover after parsing attributes in process `syz.0.540'.
[  123.373714][   T60] usb 4-1: Using ep0 maxpacket: 32
[  123.380279][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.402903][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.403747][  T297] usb 3-1: device descriptor read/64, error -71
[  123.413875][   T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  123.413904][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.467676][   T60] usb 4-1: config 0 descriptor??
[  123.693689][  T297] usb 3-1: device descriptor read/64, error -71
[  123.878159][   T60] usbhid 4-1:0.0: can't add hid device: -71
[  123.893699][   T60] usbhid: probe of 4-1:0.0 failed with error -71
[  123.905426][   T60] usb 4-1: USB disconnect, device number 11
[  123.963882][  T297] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  124.003040][ T2039] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.010424][ T2039] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.123788][  T297] usb 3-1: device descriptor read/64, error -71
[  124.440856][  T297] usb 3-1: device descriptor read/64, error -71
[  124.573816][  T297] usb usb3-port1: attempt power cycle
[  125.450858][  T297] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.547186][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  125.547207][   T28] audit: type=1326 audit(1769398110.748:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2058 comm="syz.4.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46e39acb9 code=0x0
[  125.659650][  T297] usb 3-1: device descriptor read/8, error -71
[  125.824713][  T297] usb 3-1: device descriptor read/8, error -71
[  126.085310][ T2062] sock: sock_set_timeout: `syz.2.549' (pid 2062) tries to set negative timeout
[  126.093722][ T1047] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  126.102183][   T60] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  126.132570][ T2068] netlink: 148 bytes leftover after parsing attributes in process `syz.1.551'.
[  126.141937][ T2068] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  126.283759][ T1047] usb 4-1: Using ep0 maxpacket: 32
[  126.289547][   T60] usb 1-1: Using ep0 maxpacket: 32
[  126.296273][ T1047] usb 4-1: config 2 has an invalid interface number: 2 but max is 0
[  126.304674][ T1047] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  126.314985][ T1047] usb 4-1: config 2 has no interface number 0
[  126.321153][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.332114][ T1047] usb 4-1: config 2 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  126.345044][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.355220][   T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  126.364455][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.374959][   T60] usb 1-1: config 0 descriptor??
[  126.383367][ T1047] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  126.393163][ T1047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.401293][ T1047] usb 4-1: Product: syz
[  126.408150][ T1047] usb 4-1: Manufacturer: syz
[  126.412982][ T1047] usb 4-1: SerialNumber: syz
[  127.354555][   T60] usbhid 1-1:0.0: can't add hid device: -71
[  127.361134][   T60] usbhid: probe of 1-1:0.0 failed with error -71
[  127.369132][   T60] usb 1-1: USB disconnect, device number 10
[  127.439774][ T1047] asix: probe of 4-1:2.2 failed with error -22
[  127.454605][ T1047] usb 4-1: USB disconnect, device number 12
[  127.540160][ T2086] tap0: tun_chr_ioctl cmd 1074025677
[  127.551797][ T2086] tap0: linktype set to 801
[  128.016934][ T2100] netlink: 168 bytes leftover after parsing attributes in process `syz.0.561'.
[  128.109253][   T28] audit: type=1400 audit(1769398113.308:358): avc:  denied  { write } for  pid=2103 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  128.272227][   T28] audit: type=1400 audit(1769398113.468:359): avc:  denied  { read append } for  pid=2110 comm="syz.3.566" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  128.584473][ T2122] netlink: 148 bytes leftover after parsing attributes in process `syz.2.571'.
[  128.593584][ T2122] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  128.613683][ T1379] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  128.793673][ T1379] usb 4-1: Using ep0 maxpacket: 32
[  128.800705][ T1379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.819517][ T1379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.829924][ T1379] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  128.839335][ T1379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.854219][ T1379] usb 4-1: config 0 descriptor??
[  129.273773][ T1379] usbhid 4-1:0.0: can't add hid device: -71
[  129.281737][ T1379] usbhid: probe of 4-1:0.0 failed with error -71
[  129.297944][ T1379] usb 4-1: USB disconnect, device number 13
[  129.872400][ T2137] incfs: Can't find or create .index dir in ./file0
[  129.892519][ T2137] incfs: mount failed -1
[  129.945153][   T28] audit: type=1400 audit(1769398115.108:360): avc:  denied  { mount } for  pid=2130 comm="syz.0.575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  129.950180][ T2143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  129.985577][   T28] audit: type=1400 audit(1769398115.118:361): avc:  denied  { mounton } for  pid=2130 comm="syz.0.575" path="/newroot/128/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  130.010910][   T28] audit: type=1400 audit(1769398115.118:362): avc:  denied  { read } for  pid=2130 comm="syz.0.575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  130.054474][   T28] audit: type=1400 audit(1769398115.118:363): avc:  denied  { open } for  pid=2130 comm="syz.0.575" path="/newroot/128/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  130.373870][   T28] audit: type=1400 audit(1769398115.118:364): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  131.169973][ T2171] syz.2.591 uses obsolete (PF_INET,SOCK_PACKET)
[  131.333425][   T28] audit: type=1400 audit(1769398116.528:365): avc:  denied  { getopt } for  pid=2170 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  131.406792][ T2171] FAULT_INJECTION: forcing a failure.
[  131.406792][ T2171] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  131.422035][ T2171] CPU: 1 PID: 2171 Comm: syz.2.591 Not tainted syzkaller #0
[  131.429344][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.439584][ T2171] Call Trace:
[  131.442877][ T2171]  <TASK>
[  131.445829][ T2171]  __dump_stack+0x21/0x24
[  131.450195][ T2171]  dump_stack_lvl+0x110/0x170
[  131.455185][ T2171]  ? __cfi_dump_stack_lvl+0x8/0x8
[  131.460228][ T2171]  ? __update_load_avg_cfs_rq+0xaf/0x2f0
[  131.465870][ T2171]  dump_stack+0x15/0x24
[  131.470229][ T2171]  should_fail_ex+0x3d4/0x520
[  131.475412][ T2171]  should_fail_alloc_page+0x61/0x90
[  131.481091][ T2171]  prepare_alloc_pages+0x148/0x600
[  131.486431][ T2171]  ? __alloc_pages_bulk+0x9c0/0x9c0
[  131.491848][ T2171]  __alloc_pages+0x13a/0x480
[  131.496555][ T2171]  ? __cfi___alloc_pages+0x10/0x10
[  131.501690][ T2171]  ? _raw_spin_unlock+0x4c/0x70
[  131.506554][ T2171]  ? finish_task_switch+0x16b/0x7b0
[  131.511772][ T2171]  ? __switch_to_asm+0x3a/0x60
[  131.516992][ T2171]  pte_alloc_one+0x70/0x190
[  131.522230][ T2171]  ? __cfi_pte_alloc_one+0x10/0x10
[  131.527375][ T2171]  __pte_alloc+0x75/0x2a0
[  131.531719][ T2171]  ? __cfi___pte_alloc+0x10/0x10
[  131.537079][ T2171]  ? __kasan_check_read+0x11/0x20
[  131.542135][ T2171]  handle_mm_fault+0x2338/0x26c0
[  131.547093][ T2171]  ? __cfi_handle_mm_fault+0x10/0x10
[  131.552389][ T2171]  __get_user_pages+0x34b/0xdb0
[  131.557240][ T2171]  ? populate_vma_page_range+0x120/0x120
[  131.562871][ T2171]  get_user_pages_unlocked+0x239/0x6e0
[  131.568471][ T2171]  ? __cfi_get_user_pages_unlocked+0x10/0x10
[  131.574461][ T2171]  ? _raw_spin_unlock+0x4c/0x70
[  131.579319][ T2171]  internal_get_user_pages_fast+0x1369/0x17e0
[  131.585391][ T2171]  ? get_user_pages_fast_only+0x50/0x50
[  131.590943][ T2171]  ? __kasan_check_read+0x11/0x20
[  131.596066][ T2171]  ? preempt_schedule_irq+0xca/0x120
[  131.601359][ T2171]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  131.607090][ T2171]  get_user_pages_fast+0x6a/0x90
[  131.612031][ T2171]  __iov_iter_get_pages_alloc+0x394/0xaf0
[  131.617842][ T2171]  iov_iter_get_pages2+0x64/0xa0
[  131.622786][ T2171]  __se_sys_vmsplice+0x621/0xd60
[  131.627747][ T2171]  ? __x64_sys_vmsplice+0xb0/0xb0
[  131.632796][ T2171]  ? proc_fail_nth_write+0x180/0x200
[  131.638099][ T2171]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  131.643752][ T2171]  ? security_file_permission+0x8a/0xb0
[  131.649315][ T2171]  ? vfs_write+0xa2c/0xce0
[  131.653822][ T2171]  ? __kasan_check_write+0x14/0x20
[  131.659018][ T2171]  ? mutex_unlock+0x8f/0x230
[  131.663611][ T2171]  ? ksys_write+0x1f4/0x250
[  131.668122][ T2171]  __x64_sys_vmsplice+0x9b/0xb0
[  131.673007][ T2171]  x64_sys_call+0x705/0x9a0
[  131.677527][ T2171]  do_syscall_64+0x4c/0xa0
[  131.681944][ T2171]  ? clear_bhb_loop+0x30/0x80
[  131.686705][ T2171]  ? clear_bhb_loop+0x30/0x80
[  131.691481][ T2171]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.697395][ T2171] RIP: 0033:0x7fdd3299acb9
[  131.701903][ T2171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.721537][ T2171] RSP: 002b:00007fdd337d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  131.729975][ T2171] RAX: ffffffffffffffda RBX: 00007fdd32c15fa0 RCX: 00007fdd3299acb9
[  131.738043][ T2171] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007
[  131.746370][ T2171] RBP: 00007fdd337d9090 R08: 0000000000000000 R09: 0000000000000000
[  131.754345][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.762318][ T2171] R13: 00007fdd32c16038 R14: 00007fdd32c15fa0 R15: 00007ffdfc435628
[  131.770402][ T2171]  </TASK>
[  132.415942][   T28] audit: type=1400 audit(1769398117.618:366): avc:  denied  { connect } for  pid=2185 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  132.478080][   T28] audit: type=1400 audit(1769398117.678:367): avc:  denied  { watch_reads } for  pid=2177 comm="syz.1.592" path="/138" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  132.743704][   T60] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  132.893740][   T60] usb 2-1: device descriptor read/64, error -71
[  133.163675][   T60] usb 2-1: device descriptor read/64, error -71
[  133.308000][   T28] audit: type=1400 audit(1769398118.508:368): avc:  denied  { name_bind } for  pid=2211 comm="syz.2.605" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  133.356896][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  133.394610][ T2215] dvmrp0: tun_chr_ioctl cmd 1074025692
[  133.433683][   T60] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  133.484100][   T28] audit: type=1326 audit(1769398118.688:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.484781][   T28] audit: type=1326 audit(1769398118.688:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.484878][   T28] audit: type=1326 audit(1769398118.688:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.485032][   T28] audit: type=1326 audit(1769398118.688:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.485156][   T28] audit: type=1326 audit(1769398118.688:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.485230][   T28] audit: type=1326 audit(1769398118.688:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2218 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd3299acb9 code=0x7ffc0000
[  133.593738][   T60] usb 2-1: device descriptor read/64, error -71
[  133.855918][ T2223] netlink: 148 bytes leftover after parsing attributes in process `syz.2.609'.
[  133.855941][ T2223] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  133.873686][   T60] usb 2-1: device descriptor read/64, error -71
[  133.993749][   T60] usb usb2-port1: attempt power cycle
[  135.284251][ T2238] netlink: 168 bytes leftover after parsing attributes in process `syz.0.614'.
[  135.562617][ T2247] netlink: 'syz.2.617': attribute type 2 has an invalid length.
[  135.570568][ T2247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'.
[  136.427873][   T28] kauditd_printk_skb: 83 callbacks suppressed
[  136.427891][   T28] audit: type=1400 audit(1769398121.448:458): avc:  denied  { watch watch_reads } for  pid=2256 comm="syz.2.622" path="/119/file1" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  136.458129][   T28] audit: type=1400 audit(1769398121.468:459): avc:  denied  { read } for  pid=2256 comm="syz.2.622" dev="sockfs" ino=23213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  136.803721][ T1379] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  136.913722][   T60] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  136.993667][ T1379] usb 2-1: Using ep0 maxpacket: 8
[  137.001257][ T1379] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  137.015753][ T1379] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  137.028541][ T1379] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  137.038892][ T1379] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  137.048110][ T1379] usb 2-1: config 250 has no interface number 0
[  137.054787][ T1379] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  137.068542][ T1379] usb 2-1: config 250 interface 228 has no altsetting 0
[  137.086679][ T1379] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  137.095923][ T1379] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  137.103774][   T60] usb 4-1: Using ep0 maxpacket: 32
[  137.107928][ T1379] usb 2-1: Product: syz
[  137.111281][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.114247][ T1379] usb 2-1: SerialNumber: syz
[  137.125351][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.132262][ T1379] hub 2-1:250.228: bad descriptor, ignoring hub
[  137.141961][ T2282] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  137.146510][ T1379] hub: probe of 2-1:250.228 failed with error -5
[  137.154742][   T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  137.172691][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.191511][   T60] usb 4-1: config 0 descriptor??
[  137.601954][   T60] usbhid 4-1:0.0: can't add hid device: -71
[  137.608174][   T60] usbhid: probe of 4-1:0.0 failed with error -71
[  137.616217][   T60] usb 4-1: USB disconnect, device number 14
[  137.653961][ T1379] usb 2-1: reset high-speed USB device number 12 using dummy_hcd
[  137.851620][   T28] audit: type=1400 audit(1769398123.048:460): avc:  denied  { bind } for  pid=2290 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.871381][   T28] audit: type=1400 audit(1769398123.048:461): avc:  denied  { listen } for  pid=2290 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.891344][   T28] audit: type=1400 audit(1769398123.048:462): avc:  denied  { accept } for  pid=2290 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.911404][   T28] audit: type=1400 audit(1769398123.048:463): avc:  denied  { read } for  pid=2290 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  138.008410][ T2299] netlink: 168 bytes leftover after parsing attributes in process `syz.2.634'.
[  138.201641][ T1379] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71)
[  138.215547][ T1379] usb 2-1: USB disconnect, device number 12
[  139.003700][ T1047] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  139.077473][ T1379] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  139.263655][ T1379] usb 2-1: Using ep0 maxpacket: 16
[  139.288920][ T1379] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  139.345642][ T1379] usb 2-1: config 1 has no interface number 0
[  139.377656][ T1379] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  139.432838][ T1379] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  139.486404][ T1379] usb 2-1: config 1 interface 105 has no altsetting 0
[  139.525245][ T1379] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  139.572971][ T1379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.616014][ T1379] usb 2-1: Product: syz
[  139.639106][ T1379] usb 2-1: Manufacturer: syz
[  139.664205][ T1379] usb 2-1: SerialNumber: syz
[  139.686900][ T2314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  139.698234][ T2314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  139.763693][ T1047] usb 1-1: Using ep0 maxpacket: 32
[  139.770297][ T1047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.781552][ T1047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.792063][ T1047] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  139.802535][ T1047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.820774][ T1047] usb 1-1: config 0 descriptor??
[  140.040305][ T2334] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  140.185512][   T28] audit: type=1326 audit(1769398125.388:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1560b9acb9 code=0x0
[  140.231609][ T1047] usbhid 1-1:0.0: can't add hid device: -71
[  140.239196][ T1047] usbhid: probe of 1-1:0.0 failed with error -71
[  140.248845][ T1047] usb 1-1: USB disconnect, device number 11
[  140.288857][ T2335] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  140.296375][ T2335] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  140.705560][ T1379] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  140.869543][ T2348] netlink: 168 bytes leftover after parsing attributes in process `syz.0.650'.
[  140.922308][ T1379] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:6d:96:65:c0:8c
[  140.951877][   T28] audit: type=1400 audit(1769398126.148:465): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  140.996922][   T28] audit: type=1400 audit(1769398126.148:466): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.029835][   T28] audit: type=1400 audit(1769398126.148:467): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=4447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  141.544683][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  141.544699][   T28] audit: type=1400 audit(1769398126.748:481): avc:  denied  { create } for  pid=2375 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  142.540271][  T142] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71
[  142.548905][ T1379] usb 2-1: USB disconnect, device number 13
[  142.579729][ T1379] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  142.601244][  T142] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  142.646741][  T142] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  142.688757][  T142] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19
[  142.713683][  T142] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  142.721798][  T142] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[  142.730411][  T142] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19
[  142.739198][  T142] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19
[  142.762072][  T142] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19
[  142.771243][  T142] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19
[  142.804802][ T2383] netlink: 148 bytes leftover after parsing attributes in process `syz.4.658'.
[  142.823821][ T2383] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  142.874048][ T1379] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19
[  142.892586][ T1379] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[  142.902739][ T1379] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[  142.913687][   T28] audit: type=1400 audit(1769398128.108:482): avc:  denied  { write } for  pid=2393 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  142.963682][ T1379] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[  143.025225][ T1379] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  143.054098][   T28] audit: type=1400 audit(1769398128.258:483): avc:  denied  { execute } for  pid=2413 comm="syz.0.668" path="/147/cpuacct.usage_percpu" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  143.057228][ T1379] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  143.128560][ T1379] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  144.703497][ T2451] netlink: 148 bytes leftover after parsing attributes in process `syz.3.676'.
[  144.720295][ T2451] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  144.837242][   T28] audit: type=1400 audit(1769398130.038:484): avc:  denied  { read write } for  pid=2446 comm="syz.4.675" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.881067][   T28] audit: type=1400 audit(1769398130.058:485): avc:  denied  { open } for  pid=2446 comm="syz.4.675" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  145.123779][   T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  145.293705][   T60] usb 5-1: device descriptor read/64, error -71
[  145.361057][ T2470] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D†ür9’ք܇û
[  146.421244][   T60] usb 5-1: device descriptor read/64, error -71
[  146.543991][ T2492] netlink: 168 bytes leftover after parsing attributes in process `syz.0.685'.
[  146.593820][   T28] audit: type=1400 audit(1769398131.748:486): avc:  denied  { write } for  pid=2486 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.631525][   T28] audit: type=1400 audit(1769398131.748:487): avc:  denied  { nlmsg_write } for  pid=2486 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.763679][   T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  146.923685][   T60] usb 5-1: device descriptor read/64, error -71
[  147.193666][   T60] usb 5-1: device descriptor read/64, error -71
[  147.317299][   T60] usb usb5-port1: attempt power cycle
[  147.401403][ T2500] netlink: 168 bytes leftover after parsing attributes in process `syz.0.688'.
[  147.497774][ T2502] netlink: 168 bytes leftover after parsing attributes in process `syz.3.687'.
[  148.403800][ T2510] netlink: 148 bytes leftover after parsing attributes in process `syz.2.691'.
[  148.474914][ T2510] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  149.489764][ T2522] overlayfs: unrecognized mount option "uid=00000000000000000000" or missing value
[  149.581140][   T28] audit: type=1400 audit(1769398134.778:488): avc:  denied  { write } for  pid=2521 comm="syz.1.693" path="socket:[25807]" dev="sockfs" ino=25807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  149.652330][   T28] audit: type=1400 audit(1769398134.778:489): avc:  denied  { getattr } for  pid=2521 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.860091][   T28] audit: type=1400 audit(1769398136.058:490): avc:  denied  { nlmsg_read } for  pid=2535 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  151.426828][ T2548] netlink: 168 bytes leftover after parsing attributes in process `syz.1.702'.
[  151.436510][  T297] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  151.692122][  T297] usb 3-1: Using ep0 maxpacket: 32
[  151.699699][  T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.713177][  T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.750961][  T297] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  151.800299][  T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.833140][  T297] usb 3-1: config 0 descriptor??
[  152.093702][ T2568] netlink: 148 bytes leftover after parsing attributes in process `syz.1.707'.
[  152.102864][ T2568] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  152.269433][  T297] usbhid 3-1:0.0: can't add hid device: -71
[  152.280102][  T297] usbhid: probe of 3-1:0.0 failed with error -71
[  152.291852][  T297] usb 3-1: USB disconnect, device number 11
[  153.633558][   T28] audit: type=1400 audit(1769398138.828:491): avc:  denied  { shutdown } for  pid=2593 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  153.891848][ T2595] Invalid ELF header magic: != ELF
[  153.898093][ T2595] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.634081][   T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  155.448851][ T2619] netlink: 148 bytes leftover after parsing attributes in process `syz.1.726'.
[  155.463670][   T60] usb 5-1: Using ep0 maxpacket: 32
[  155.476775][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.498404][ T2619] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  155.523645][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.455445][   T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  156.464804][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.475811][   T60] usb 5-1: config 0 descriptor??
[  156.934105][   T60] usbhid 5-1:0.0: can't add hid device: -71
[  156.950766][   T60] usbhid: probe of 5-1:0.0 failed with error -71
[  156.962771][   T60] usb 5-1: USB disconnect, device number 18
[  157.841475][   T60] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  159.238514][   T28] audit: type=1400 audit(1769398144.438:492): avc:  denied  { bind } for  pid=2660 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  159.265437][   T60] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  159.348863][ T2663] netlink: 148 bytes leftover after parsing attributes in process `syz.2.740'.
[  159.361043][   T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.382561][   T60] usb 2-1: config 0 has no interface number 0
[  159.392248][ T2663] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  159.403476][   T60] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  159.430907][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.449130][   T60] usb 2-1: Product: syz
[  159.458578][   T60] usb 2-1: Manufacturer: syz
[  159.464090][ T2674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  159.468646][   T60] usb 2-1: SerialNumber: syz
[  159.510258][   T60] usb 2-1: config 0 descriptor??
[  159.734743][   T60] usb 2-1: USB disconnect, device number 14
[  160.023716][  T531] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  160.193692][  T531] usb 1-1: device descriptor read/64, error -71
[  160.473723][  T531] usb 1-1: device descriptor read/64, error -71
[  160.743663][  T531] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  160.778256][ T2690] input: syz0 as /devices/virtual/input/input8
[  160.903683][  T531] usb 1-1: device descriptor read/64, error -71
[  161.374268][   T28] audit: type=1400 audit(1769398146.558:493): avc:  denied  { ioctl } for  pid=2697 comm="syz.1.751" path="socket:[26594]" dev="sockfs" ino=26594 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  161.399281][   T28] audit: type=1400 audit(1769398146.558:494): avc:  denied  { read write } for  pid=2697 comm="syz.1.751" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  161.423041][  T531] usb 1-1: device descriptor read/64, error -71
[  161.429803][   T28] audit: type=1400 audit(1769398146.558:495): avc:  denied  { open } for  pid=2697 comm="syz.1.751" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  161.666474][  T531] usb usb1-port1: attempt power cycle
[  162.623209][ T2725] overlayfs: missing 'workdir'
[  162.784370][   T28] audit: type=1400 audit(1769398147.988:496): avc:  denied  { setcheckreqprot } for  pid=2741 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  164.094604][   T28] audit: type=1400 audit(1769398149.298:497): avc:  denied  { mounton } for  pid=2759 comm="syz.1.773" path="/178/bus" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  164.128415][   T28] audit: type=1400 audit(1769398149.328:498): avc:  denied  { append } for  pid=2759 comm="syz.1.773" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  164.171090][ T2765] netlink: 'syz.4.775': attribute type 1 has an invalid length.
[  164.198227][ T2765] netlink: 'syz.4.775': attribute type 2 has an invalid length.
[  164.243249][ T2770] FAULT_INJECTION: forcing a failure.
[  164.243249][ T2770] name failslab, interval 1, probability 0, space 0, times 0
[  164.257190][ T2770] CPU: 0 PID: 2770 Comm: syz.4.777 Not tainted syzkaller #0
[  164.264594][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.274665][ T2770] Call Trace:
[  164.277946][ T2770]  <TASK>
[  164.280886][ T2770]  __dump_stack+0x21/0x24
[  164.285226][ T2770]  dump_stack_lvl+0x110/0x170
[  164.289990][ T2770]  ? __cfi_dump_stack_lvl+0x8/0x8
[  164.295024][ T2770]  dump_stack+0x15/0x24
[  164.299263][ T2770]  should_fail_ex+0x3d4/0x520
[  164.303969][ T2770]  __should_failslab+0xac/0xf0
[  164.308746][ T2770]  ? alloc_pipe_info+0x1fc/0x4b0
[  164.313685][ T2770]  should_failslab+0x9/0x20
[  164.318194][ T2770]  __kmem_cache_alloc_node+0x3d/0x2c0
[  164.323567][ T2770]  ? alloc_pipe_info+0x1fc/0x4b0
[  164.328502][ T2770]  __kmalloc+0xa1/0x1e0
[  164.332662][ T2770]  alloc_pipe_info+0x1fc/0x4b0
[  164.337444][ T2770]  fifo_open+0x11e/0xab0
[  164.341879][ T2770]  do_dentry_open+0x88e/0x1260
[  164.346989][ T2770]  ? __cfi_fifo_open+0x10/0x10
[  164.351765][ T2770]  vfs_open+0x73/0x80
[  164.355769][ T2770]  path_openat+0x2700/0x2f80
[  164.360406][ T2770]  ? __kasan_slab_alloc+0x72/0x80
[  164.365551][ T2770]  ? do_filp_open+0x430/0x430
[  164.370243][ T2770]  do_filp_open+0x1f1/0x430
[  164.374745][ T2770]  ? __cfi_do_filp_open+0x10/0x10
[  164.379772][ T2770]  ? alloc_fd+0x4e6/0x590
[  164.384098][ T2770]  do_sys_openat2+0x15e/0x810
[  164.388790][ T2770]  ? __kasan_check_write+0x14/0x20
[  164.393903][ T2770]  ? do_sys_open+0xe0/0xe0
[  164.398354][ T2770]  ? ksys_write+0x1f4/0x250
[  164.402852][ T2770]  ? __cfi_ksys_write+0x10/0x10
[  164.407694][ T2770]  __x64_sys_openat+0x136/0x160
[  164.412540][ T2770]  x64_sys_call+0x783/0x9a0
[  164.417127][ T2770]  do_syscall_64+0x4c/0xa0
[  164.421542][ T2770]  ? clear_bhb_loop+0x30/0x80
[  164.426253][ T2770]  ? clear_bhb_loop+0x30/0x80
[  164.430948][ T2770]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.436865][ T2770] RIP: 0033:0x7fd46e39acb9
[  164.441361][ T2770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.462358][ T2770] RSP: 002b:00007fd46f222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  164.471046][ T2770] RAX: ffffffffffffffda RBX: 00007fd46e615fa0 RCX: 00007fd46e39acb9
[  164.479473][ T2770] RDX: 0000000000183341 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  164.487639][ T2770] RBP: 00007fd46f222090 R08: 0000000000000000 R09: 0000000000000000
[  164.495786][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.503939][ T2770] R13: 00007fd46e616038 R14: 00007fd46e615fa0 R15: 00007ffec563c428
[  164.511917][ T2770]  </TASK>
[  164.743932][ T2785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[  165.033313][ T2796] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  166.458224][ T2819] overlayfs: './file0' not a directory
[  166.483088][   T28] audit: type=1400 audit(1769398151.658:499): avc:  denied  { mounton } for  pid=2818 comm="syz.3.793" path="/138/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  166.513880][ T1047] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  166.611474][ T2831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  166.893746][ T1047] usb 5-1: Using ep0 maxpacket: 32
[  166.905266][ T2811] FAULT_INJECTION: forcing a failure.
[  166.905266][ T2811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.918491][ T2811] CPU: 0 PID: 2811 Comm: syz.4.790 Not tainted syzkaller #0
[  166.925778][ T2811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  166.935928][ T2811] Call Trace:
[  166.939226][ T2811]  <TASK>
[  166.942178][ T2811]  __dump_stack+0x21/0x24
[  166.946617][ T2811]  dump_stack_lvl+0x110/0x170
[  166.951316][ T2811]  ? __cfi_dump_stack_lvl+0x8/0x8
[  166.956367][ T2811]  ? __kasan_check_write+0x14/0x20
[  166.961770][ T2811]  ? _raw_spin_lock_irq+0x95/0xf0
[  166.967102][ T2811]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  166.972776][ T2811]  dump_stack+0x15/0x24
[  166.976958][ T2811]  should_fail_ex+0x3d4/0x520
[  166.981684][ T2811]  should_fail+0xb/0x10
[  166.985945][ T2811]  should_fail_usercopy+0x1a/0x20
[  166.990981][ T2811]  copy_page_from_iter_atomic+0x362/0x1260
[  166.996997][ T2811]  ? __cfi_copy_page_from_iter_atomic+0x10/0x10
[  167.003265][ T2811]  ? __kasan_check_read+0x11/0x20
[  167.008283][ T2811]  ? shmem_write_begin+0x151/0x2c0
[  167.013491][ T2811]  generic_perform_write+0x384/0x740
[  167.018805][ T2811]  ? __cfi_generic_perform_write+0x10/0x10
[  167.024797][ T2811]  ? __cfi_file_update_time+0x10/0x10
[  167.030157][ T2811]  ? generic_write_checks_count+0x3c6/0x4a0
[  167.036172][ T2811]  __generic_file_write_iter+0x17a/0x230
[  167.041789][ T2811]  generic_file_write_iter+0xae/0x310
[  167.047162][ T2811]  vfs_write+0x603/0xce0
[  167.051496][ T2811]  ? __cfi_vfs_write+0x10/0x10
[  167.056306][ T2811]  ? __fget_files+0x2d5/0x330
[  167.061015][ T2811]  ? __fdget+0x19c/0x220
[  167.065279][ T2811]  ? __x64_sys_pwrite64+0xf2/0x220
[  167.070586][ T2811]  __x64_sys_pwrite64+0x197/0x220
[  167.075630][ T2811]  ? __cfi___x64_sys_pwrite64+0x10/0x10
[  167.081274][ T2811]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  167.087366][ T2811]  x64_sys_call+0x36/0x9a0
[  167.091810][ T2811]  do_syscall_64+0x4c/0xa0
[  167.096242][ T2811]  ? clear_bhb_loop+0x30/0x80
[  167.100935][ T2811]  ? clear_bhb_loop+0x30/0x80
[  167.105621][ T2811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.111559][ T2811] RIP: 0033:0x7fd46e39acb9
[  167.116084][ T2811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.135970][ T2811] RSP: 002b:00007fd46f222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  167.144772][ T2811] RAX: ffffffffffffffda RBX: 00007fd46e615fa0 RCX: 00007fd46e39acb9
[  167.152850][ T2811] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007
[  167.161887][ T2811] RBP: 00007fd46f222090 R08: 0000000000000000 R09: 0000000000000000
[  167.170561][ T2811] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001
[  167.178995][ T2811] R13: 00007fd46e616038 R14: 00007fd46e615fa0 R15: 00007ffec563c428
[  167.187435][ T2811]  </TASK>
[  168.009331][ T1047] usb 5-1: unable to get BOS descriptor or descriptor too short
[  168.024077][ T1047] usb 5-1: unable to read config index 0 descriptor/start: -71
[  168.031688][ T1047] usb 5-1: can't read configurations, error -71
[  168.116476][ T2866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2866 comm=syz.3.807
[  168.129426][   T28] audit: type=1326 audit(1769398153.318:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.137882][ T2867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2867 comm=syz.3.807
[  168.171966][   T28] audit: type=1326 audit(1769398153.318:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.202923][   T28] audit: type=1326 audit(1769398153.318:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.230840][   T28] audit: type=1326 audit(1769398153.318:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.274540][   T28] audit: type=1326 audit(1769398153.318:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.323710][   T28] audit: type=1326 audit(1769398153.318:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.384217][   T28] audit: type=1326 audit(1769398153.318:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.427565][   T28] audit: type=1326 audit(1769398153.318:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.474470][   T28] audit: type=1326 audit(1769398153.318:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e28d9acb9 code=0x50000
[  168.633709][  T531] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  168.781165][ T2884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'.
[  168.964812][  T531] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  168.975370][  T531] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  168.992928][  T531] usb 1-1: config 220 has no interface number 2
[  169.003458][  T531] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  169.026305][  T531] usb 1-1: config 220 interface 0 has no altsetting 0
[  169.081879][  T531] usb 1-1: config 220 interface 76 has no altsetting 0
[  169.095792][  T531] usb 1-1: config 220 interface 1 has no altsetting 0
[  169.120697][  T531] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  169.144148][  T531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.165769][  T531] usb 1-1: Product: syz
[  169.177289][  T531] usb 1-1: Manufacturer: syz
[  169.188098][  T531] usb 1-1: SerialNumber: syz
[  170.685146][ T2912] netlink: 168 bytes leftover after parsing attributes in process `syz.1.818'.
[  171.394614][  T531] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  171.401467][  T531] usb 1-1: No valid video chain found.
[  171.409034][  T531] usb 1-1: selecting invalid altsetting 0
[  171.455329][  T531] usb 1-1: USB disconnect, device number 15
[  171.672322][ T2949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.831'.
[  171.693137][ T2949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'.
[  171.772748][ T2954] overlayfs: unrecognized mount option "verity=require" or missing value
[  172.059139][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  172.059160][   T28] audit: type=1400 audit(1769398157.258:568): avc:  denied  { ioctl } for  pid=2968 comm="syz.2.837" path="socket:[28564]" dev="sockfs" ino=28564 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  173.036298][ T3000] netlink: 124 bytes leftover after parsing attributes in process `syz.3.846'.
[  173.812245][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[  173.946617][ T3012] netlink: 'syz.0.848': attribute type 5 has an invalid length.
[  173.959062][ T3012] netlink: 45 bytes leftover after parsing attributes in process `syz.0.848'.
[  174.243696][ T1047] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  174.436342][ T1047] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  174.450943][ T1047] usb 1-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config
[  174.461990][ T1047] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  174.471489][ T1047] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 284, setting to 64
[  174.484809][ T1047] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  174.494784][ T1047] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  174.502919][ T1047] usb 1-1: Product: syz
[  174.507507][ T1047] usb 1-1: Manufacturer: syz
[  174.520282][ T1047] cdc_wdm 1-1:1.0: skipping garbage
[  174.531494][   T28] audit: type=1400 audit(1769398159.728:569): avc:  denied  { read write } for  pid=3019 comm="syz.1.851" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  174.557878][ T1047] cdc_wdm 1-1:1.0: skipping garbage
[  174.563319][ T1047] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  174.575422][   T28] audit: type=1400 audit(1769398159.758:570): avc:  denied  { open } for  pid=3019 comm="syz.1.851" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  174.606657][   T28] audit: type=1400 audit(1769398159.778:571): avc:  denied  { ioctl } for  pid=3019 comm="syz.1.851" path="socket:[28708]" dev="sockfs" ino=28708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  174.645948][   T28] audit: type=1400 audit(1769398159.778:572): avc:  denied  { connect } for  pid=3019 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  174.706114][ T3024] binder: 3023:3024 ioctl c0046209 100000000000000 returned -22
[  174.885164][ T1047] usb 1-1: USB disconnect, device number 16
[  175.004758][ T3045] netlink: 96 bytes leftover after parsing attributes in process `syz.4.860'.
[  175.283681][  T297] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  175.473665][  T297] usb 5-1: Using ep0 maxpacket: 16
[  175.480470][  T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.505977][  T297] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  175.518379][  T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.601230][  T297] usb 5-1: config 0 descriptor??
[  176.603269][ T3070] netlink: 148 bytes leftover after parsing attributes in process `syz.3.870'.
[  176.651493][ T3070] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  177.987099][  T297] usbhid 5-1:0.0: can't add hid device: -71
[  177.993349][  T297] usbhid: probe of 5-1:0.0 failed with error -71
[  178.014248][  T297] usb 5-1: USB disconnect, device number 21
[  178.378207][ T3110] random: crng reseeded on system resumption
[  179.199924][ T3118] x_tables: duplicate underflow at hook 1
[  180.262113][ T3132] netlink: 148 bytes leftover after parsing attributes in process `syz.3.888'.
[  180.313737][ T3132] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  180.330632][   T28] audit: type=1400 audit(1769398165.528:573): avc:  denied  { map } for  pid=3137 comm="syz.1.889" path="socket:[29947]" dev="sockfs" ino=29947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  180.383702][   T28] audit: type=1400 audit(1769398165.558:574): avc:  denied  { module_request } for  pid=3116 comm="syz.4.884" kmod="net-pf-26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  180.427085][ T3144] tipc: Started in network mode
[  180.444001][ T3144] tipc: Node identity aaaaaaaaaa38, cluster identity 4711
[  180.504189][ T3144] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  180.689099][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'.
[  180.981138][ T3156] incfs: Backing dir is not set, filesystem can't be mounted.
[  180.989228][ T3156] incfs: mount failed -2
[  181.344761][   T28] audit: type=1400 audit(1769398166.548:575): avc:  denied  { write } for  pid=3160 comm="syz.3.895" name="file0" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  181.370771][   T28] audit: type=1400 audit(1769398166.548:576): avc:  denied  { open } for  pid=3160 comm="syz.3.895" path="/161/file0" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  181.526713][ T3172] random: crng reseeded on system resumption
[  181.654528][  T562] tipc: Node number set to 9611946
[  182.157007][ T3174] netlink: 292 bytes leftover after parsing attributes in process `syz.2.900'.
[  182.248917][   T28] audit: type=1326 audit(1769398167.448:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3176 comm="syz.0.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaabf9acb9 code=0x0
[  182.670063][   T28] audit: type=1400 audit(1769398167.608:578): avc:  denied  { map } for  pid=3176 comm="syz.0.901" path="socket:[30085]" dev="sockfs" ino=30085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  182.780658][   T28] audit: type=1400 audit(1769398167.798:580): avc:  denied  { setopt } for  pid=3169 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  182.800721][   T28] audit: type=1400 audit(1769398167.668:579): avc:  denied  { bind } for  pid=3169 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  183.834117][ T3194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'.
[  183.856943][ T3195] random: crng reseeded on system resumption
[  284.353562][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  284.360588][    C0] 	(detected by 0, t=10002 jiffies, g=20173, q=34 ncpus=2)
[  284.368241][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294965648-4294955646), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  284.381621][    C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g20173 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  284.392974][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  284.402963][    C0] rcu: RCU grace-period kthread stack dump:
[  284.408936][    C0] task:rcu_preempt     state:R  running task     stack:28064 pid:14    ppid:2      flags:0x00004000
[  284.419731][    C0] Call Trace:
[  284.423103][    C0]  <TASK>
[  284.426038][    C0]  __schedule+0xba6/0x1500
[  284.430572][    C0]  ? release_firmware_map_entry+0x190/0x190
[  284.436517][    C0]  schedule+0xbd/0x170
[  284.440585][    C0]  schedule_timeout+0x159/0x340
[  284.445606][    C0]  ? __cfi_schedule_timeout+0x10/0x10
[  284.451413][    C0]  ? __cfi_process_timeout+0x10/0x10
[  284.456970][    C0]  ? prepare_to_swait_event+0x308/0x320
[  284.463063][    C0]  rcu_gp_fqs_loop+0x2e9/0x10c0
[  284.468018][    C0]  ? _raw_spin_unlock_irq+0x4d/0x70
[  284.473240][    C0]  ? rcu_gp_init+0xf30/0xf30
[  284.478189][    C0]  rcu_gp_kthread+0x99/0x390
[  284.483159][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  284.488598][    C0]  ? __kasan_check_read+0x11/0x20
[  284.493851][    C0]  ? __kthread_parkme+0x142/0x180
[  284.498881][    C0]  kthread+0x281/0x320
[  284.503229][    C0]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  284.508516][    C0]  ? __cfi_kthread+0x10/0x10
[  284.513215][    C0]  ret_from_fork+0x1f/0x30
[  284.517642][    C0]  </TASK>
[  284.520658][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  284.527066][    C0] CPU: 0 PID: 3191 Comm: syz.2.905 Not tainted syzkaller #0
[  284.534344][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  284.544579][    C0] RIP: 0010:_copy_from_user+0x78/0xc0
[  284.549994][    C0] Code: ff 49 29 dc 72 61 4d 39 fc 72 5c e8 72 38 09 ff 0f ae e8 4c 89 f7 89 de e8 a5 69 4e ff 89 da 4c 89 fe 4c 89 f7 e8 d8 fc 8b 02 <41> 89 c7 31 ff 4c 89 fe e8 0b 3d 09 ff 4d 85 ff 75 11 e8 41 38 09
[  284.570212][    C0] RSP: 0018:ffffc9000e75fb90 EFLAGS: 00000246
[  284.576555][    C0] RAX: 0000000000000000 RBX: 0000000000000018 RCX: 0000000000000000
[  284.584521][    C0] RDX: 0000000000000000 RSI: 00007fdd337d8aa8 RDI: ffffc9000e75fc38
[  284.592493][    C0] RBP: ffffc9000e75fbb0 R08: 0000000000000000 R09: 1ffff92001cebf86
[  284.600568][    C0] R10: dffffc0000000000 R11: fffff52001cebf87 R12: 00007fffffffefe8
[  284.608550][    C0] R13: dffffc0000000000 R14: ffffc9000e75fc20 R15: 00007fdd337d8a90
[  284.616610][    C0] FS:  00007fdd337d96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  284.625624][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.632234][    C0] CR2: 0000000000000000 CR3: 00000001354ac000 CR4: 00000000003526b0
[  284.640205][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  284.648257][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  284.656319][    C0] Call Trace:
[  284.659682][    C0]  <TASK>
[  284.662620][    C0]  restore_altstack+0xa8/0x4c0
[  284.667429][    C0]  ? __kasan_check_write+0x14/0x20
[  284.672637][    C0]  ? __cfi_restore_altstack+0x10/0x10
[  284.678059][    C0]  ? __kasan_check_write+0x14/0x20
[  284.683190][    C0]  __ia32_sys_rt_sigreturn+0x639/0x730
[  284.688677][    C0]  ? __cfi___x64_sys_rt_sigreturn+0x10/0x10
[  284.694685][    C0]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  284.700772][    C0]  x64_sys_call+0x832/0x9a0
[  284.705281][    C0]  do_syscall_64+0x4c/0xa0
[  284.709717][    C0]  ? clear_bhb_loop+0x30/0x80
[  284.714395][    C0]  ? clear_bhb_loop+0x30/0x80
[  284.719068][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.724964][    C0] RIP: 0033:0x7fdd3299acb7
[  284.729507][    C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  284.749283][    C0] RSP: 002b:00007fdd337d9028 EFLAGS: 00000246
[  284.755348][    C0] RAX: 0000000000000113 RBX: 00007fdd32c15fa0 RCX: 00007fdd3299acb9
[  284.763408][    C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[  284.771466][    C0] RBP: 00007fdd32a08bf7 R08: 0000000000000007 R09: 0000000000000000
[  284.779437][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.787403][    C0] R13: 00007fdd32c16038 R14: 00007fdd32c15fa0 R15: 00007ffdfc435628
[  284.795482][    C0]  </TASK>
[  428.833512][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 244s!
[  428.842739][    C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 243s!
[  428.851769][    C0] Showing busy workqueues and worker pools:
[  428.857784][    C0] workqueue events: flags=0x0
[  428.862676][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  428.862724][    C0]     pending: jump_label_update_timeout, kfree_rcu_monitor
[  428.862784][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  428.862817][    C0]     pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker
[  428.862883][    C0] workqueue events_long: flags=0x0
[  428.901448][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  428.901494][    C0]     pending: br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup
[  428.901572][    C0] workqueue events_unbound: flags=0x2
[  428.923749][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  428.923790][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  428.923842][    C0] workqueue events_power_efficient: flags=0x80
[  428.945636][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  428.945699][    C0]     pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime
[  428.945792][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  428.945826][    C0]     pending: neigh_managed_work, gc_worker, neigh_periodic_work
[  428.945896][    C0] workqueue mm_percpu_wq: flags=0x8
[  428.985472][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  428.985521][    C0]     pending: vmstat_update
[  428.985552][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  428.985585][    C0]     pending: vmstat_update
[  428.985613][    C0] workqueue writeback: flags=0x4a
[  429.015200][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.015237][    C0]     pending: wb_workfn
[  429.015265][    C0] workqueue kblockd: flags=0x18
[  429.031676][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  429.031818][    C0]     pending: blk_mq_timeout_work
[  429.032144][    C0] workqueue dm_bufio_cache: flags=0x8
[  429.050879][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.050923][    C0]     pending: work_fn
[  429.051029][    C0] workqueue ipv6_addrconf: flags=0x40008
[  429.068383][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=6
[  429.068426][    C0]     pending: addrconf_verify_work
[  429.068453][    C0]     inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
[  429.068518][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2
[  429.068559][    C0]     pending: addrconf_verify_work
[  429.068930][    C0] workqueue wg-crypt-wg0: flags=0x28
[  429.111189][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.111242][    C0]     pending: wg_packet_encrypt_worker
[  429.111273][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.111306][    C0]     pending: wg_packet_encrypt_worker
[  429.111333][    C0] workqueue wg-kex-wg1: flags=0x6
[  429.142843][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.142893][    C0]     pending: wg_packet_handshake_send_worker
[  429.142925][    C0] workqueue wg-crypt-wg1: flags=0x28
[  429.161677][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.161726][    C0]     pending: wg_packet_encrypt_worker
[  429.161765][    C0] workqueue wg-kex-wg2: flags=0x6
[  429.180220][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  429.180261][    C0]     pending: wg_packet_handshake_send_worker
[  429.180291][    C0] workqueue wg-crypt-wg2: flags=0x28
[  429.199295][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  429.199341][    C0]     pending: wg_packet_encrypt_worker